Cybersecurity Information Sharing Act of 2012
Latest action · Feb 13, 2012 Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
Progress
Where this bill reached, and when. A stage with no date was not reached; one that failed a vote and later carried shows the date it carried.
- IntroducedFeb 13, 2012
- Passed SenateNot reached
- Passed HouseNot reached
- To the PresidentNot reached
- Became lawNot reached
Summary
Cybersecurity Information Sharing Act of 2012 - Authorizes private entities to monitor information systems for cybersecurity threats and operate countermeasures for protection, including the information systems of third parties authorizing such measures.
Allows private entities to disclose lawfully obtained cybersecurity threat indicators to any other private entity, provided that the entities: (1) make efforts to safeguard information that can be used to identify specific persons, (2) comply with lawful use or disclosure restrictions, (3) not use the indicators to gain an unfair competitive advantage, and (4) use the indicators only for the purpose of protecting against or mitigating cybersecurity threats.
Directs the Secretary of Homeland Security (DHS) to establish processes and procedures for: (1) designating appropriate federal and non-federal entities as cybersecurity exchanges, (2) sharing classified and unclassified cybersecurity threat information with designated cybersecurity exchanges and other appropriate entities, and (3) identifying certified entities to receive such classified information.
Directs the Secretary to designate a federal entity as the lead cybersecurity exchange for cybersecurity information sharing among federal entities and with non-federal entities.
Allows a non-federal entity to disclose lawfully obtained cybersecurity threat information to an exchange.
Requires the Secretary to develop policies and procedures that govern a federal entity's receipt, retention, use, and disclosure of cybersecurity threat information in a manner that minimizes the impact on privacy and civil liberties. Directs: (1) the Secretary and the Attorney General (DOJ) to establish a mandatory program to oversee compliance with such policies and procedures, and (2) the heads of federal entities to develop and enforce appropriate sanctions for officers, employees, or agents of the federal entities who conduct prohibited activities.
Provides legal protections for entities engaged in cybersecurity monitoring activities, including a good faith defense.
Cosponsors 1
Members who signed on, in the order they did. All signed on Feb 13, 2012.
| Seat | Cosponsor | Signed on | |
|---|---|---|---|
| D-MD | Barbara A. Mikulski | Original | Feb 13, 2012 |
Actions 3
Everything that happened, newest first.
- Feb 13, 2012Introduced in Senate
- Feb 13, 2012Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
- Feb 13, 2012Sponsor introductory remarks on measure. (CR S568-569)
Related bills 2
Companion bills and other measures the record links to this one.
| Bill | Title | Relationship | Latest action |
|---|---|---|---|
| S 2105 | Cybersecurity Act of 2012 | Related bill | Feb 16, 2012 |
| S 3414 | CSA2012 | Related bill | Nov 14, 2012 |
Subjects
Assigned by the Library of Congress. Policy area: Government Operations and Politics.
- Administrative law and regulatory procedures
- Civil actions and liability
- Computer security and identity theft
- Congressional oversight
- Criminal investigation, prosecution, interrogation
- Criminal justice information and records
- Director of National Intelligence
- Federal preemption
- Government information and archives
- Government Operations and Politics
- Intelligence activities, surveillance, classified information
- Right of privacy
Text 1
Each version as it was printed, newest first.
- Feb 13, 2012Introduced in Senate
Everything here is as published by Congress: the summary is the Congressional Research Service's, the action wording is the clerks', and the subjects are the Library of Congress's. How far it got is read from the actions themselves, taking the most recent one of each kind, so a bill that failed a vote and later passed is shown as having passed. Records come from this bill on Congress.gov and govinfo.gov.