The Senate Intelligence Committee approved legislation Tuesday aimed at helping companies and the government thwart hackers.
But the bill faces opposition from privacy groups, who warn that it could give the National Security Agency access to even more personal information of Americans.
The Cybersecurity Information Sharing Act, advanced in a 12-3 vote, would make it easier for businesses and the government to share information with each other about cyberattacks. Business groups argue that legal barriers are preventing them from getting the information they need to stop hackers.
“Every week, we hear about the theft of personal information from retailers and trade secrets from innovative businesses, as well as ongoing efforts by foreign nations to hack government networks,” Senate Intelligence Committee Chairwoman Dianne Feinstein said in a statement. “This bill is an important step toward curbing these dangerous cyberattacks.”
The legislation includes provisions aimed at protecting privacy, such as requiring that companies that share information first strip out personally identifiable data (such as names, addresses, and Social Security numbers) of known Americans.
But the privacy groups are still worried that the legislation could encourage a company such as Google to turn over vast batches of emails or other private data to the government. The information would go first to the Homeland Security Department, but could then be shared with the NSA or other intelligence agencies.
“Instead of reining in NSA surveillance, the bill would facilitate a vast flow of private communications data to the NSA,” the American Civil Liberties Union, the Center for Democracy and Technology, the Electronic Frontier Foundation, and dozens of other privacy groups wrote in a letter to senators last month.
Democratic Sens. Ron Wyden and Mark Udall voted against the legislation, saying in a statement that it “lacks adequate protections for the privacy rights of law-abiding Americans, and that it will not materially improve cybersecurity.”
The senators said they don’t trust the government not to exploit loopholes to spy on Americans. According to a Wyden aide, the committee defeated an amendment that the Oregon Democrat offered that would have strengthened privacy protections.
The legislation is a counterpart to the Cyber Intelligence Sharing and Protection Act, which passed the House last year.
That legislation prompted a major backlash from Internet activists, who fear it would undermine Internet privacy. More than 100,000 people signed a White House petition opposing the bill, and “CISPA” became a dirty word on many blogs, discussion forums, and news sites.
The White House issued a veto threat on CISPA, saying it lacked adequate privacy safeguards.
“I don’t know what information you would be concerned about that NSA would have in an information-sharing bill,” Feinstein told reporters following the markup, which was closed to the public. “If somebody’s hacking, you want [the information] to go where it needs to go.”
She said the legislation is just a “first step” in improving cybersecurity, and that she is hopeful it will become law before the end of the year.
Sen. Saxby Chambliss, the committee’s top Republican, said the bill is a carefully crafted compromise between business groups and privacy advocates.
“It’s not perfect for anybody,” Chambliss told reporters. “But if we take no action, then cyberattacks are going to continue to occur, and there is the potential for the American economy to be severely disrupted.”
What We're Following See More »
The National Defense Authorization Act passed the House this morning by a 375-34 vote. The bill, which heads to the Senate next week for final consideration, would fund the military to the tune of $618.7 billion, "about $3.2 billion more than the president requested for fiscal 2017. ... The White House has issued a veto threat on both the House and Senate-passed versions of the bill, but has not yet said if it will sign the compromise bill released by the conference committee this week."
"Republicans have elected Rep. Greg Walden (R-OR) the next chairman of the powerful House Energy and Commerce Committee. Walden defeated Reps. John Shimkus (R-IL) and Joe Barton (R-TX), the former committee chairman, in the race for the gavel" to succeed Michgan's Fred Upton.
"Democratic and Republican members of the Senate Judiciary Committee are working on legislation that would limit deportations" under President-elect Donald Trump. Leading the effort are Judiciary Committee members Dick Durbin (D-IL) and Lindsey Graham (R-SC). Sen. Jeff Flake (R-AZ) is also expected to sign on.
Donald Trump has selected retired Marine Gen. James 'Mad Dog' Mattis as his secretary of defense, according to The Washington Post. Mattis retired from active duty just four years ago, so Congress will have "to pass new legislation to bypass a federal law that states secretaries of defense must not have been on active duty in the previous seven years." The official announcement is likely to come next week.