Extends the Cybersecurity Act of 2015, which allows the government to share cybersecurity information with private companies, for ten years, until 2035.
Gary Peters
Senator
MI
The Cybersecurity Information Sharing Extension Act amends the Cybersecurity Act of 2015 to extend the Act's sunset date from September 30, 2025, to September 30, 2035.
This bill, the Cybersecurity Information Sharing Extension Act, does one straightforward thing: it pushes the expiration date of the Cybersecurity Act of 2015 from 2025 out to 2035. That's it. The original 2015 law created a framework to encourage private companies and government agencies to voluntarily share information about cybersecurity threats and defenses.
Keeping the Digital Watch Going
Think of this less as a brand-new policy and more like hitting the snooze button on an expiration date. For the next decade, the existing rules of the road for how cyber threat intelligence is shared between the public and private sectors will remain in place under the authority of the 2015 Act (found in 6 U.S.C. 1510(a)). This extension doesn't add new requirements or change how that information sharing currently works. It simply ensures the legal framework established back in 2015 continues operating, aiming to keep collaborative defense efforts against hackers and cyberattacks going without interruption caused by the law sunsetting. For most people, this means the status quo continues – the systems designed to facilitate this info sharing behind the scenes carry on.