Congress is about to vote on a terrible new cybersecurity bill

Source: 
Coverage Type: 

There's a new cybersecurity bill making its way through Congress, sponsored and written by Sen Diane Feinstein (D-CA), and critics are already calling it a new backdoor for surveillance by the National Security Agency.

The Cybersecurity Intelligence Sharing Act of 2014 (CISA) was just approved by the Senate Intelligence Committee, putting it on track for a Senate vote soon. But like its controversial predecessors, the bill is coming under fire as a step backwards in the fight for surveillance reform.

The bill's primary effect would be a new requirement for sharing information on "cyber threat indicators," a vague term that could refer to anything from an ongoing hack to a vulnerability in commercial software. Once a company makes a report to the government with information about a threat indicator, CISA would require broad sharing across federal agencies, including with the NSA, which would be given a more central role in threat management under the new scheme.

Advocacy groups have seized on the reporting requirements as a troubling expansion of NSA access to private networks. The Center for Democracy in Technology says the provision "risks turning the cybersecurity program it creates into a back door wiretap." CDT also notes the bill lacks many crucial privacy protections that were included in previous cybersecurity acts. The Electronic Frontier Foundation calls the bill "fatally flawed," and raised concerns that it would create a new pipeline of data from independent companies to the NSA.


Congress is about to vote on a terrible new cybersecurity bill Cybersecurity Bill Approved in Senate Intelligence (B&C)