Various privacy rights organizations and security experts penned a letter to the Senate Select Committee on Intelligence over their dissatisfaction with the recently drafted Cybersecurity Information Sharing Act of 2015 (CISA).
The groups, including the American Civil Liberties Union (ACLU) and the Electronic Frontier Foundation (EFF), wrote that the bill “disregards the fact that information sharing can – and to be truly effective, must – offer both security and robust privacy protections.”
Furthermore, they wrote, the legislation allows for “automatic NSA access to personal information shared with a government entity” and provides “inadequate protections to sharing.”
CISA requires real-time information sharing with military and intelligence agencies, the letter says, which neglects the broader public's privacy concerns.
The bill also does not include a standard for removing information about an individual before sharing cyber threat indicators with the government, the letter goes on to say.