House NDAA Includes 10-Year Extension of CISA 2015
Summary
The House passed its 2027 NDAA with a provision extending CISA 2015 information-sharing protections for 10 years. Senate opposition and the lack of a matching provision leave the extension subject to debate and negotiations; the chambers also differ on Pentagon cyber-le
Key points
- The House approved its 2027 National Defense Authorization Act 216-212, including a provision to reauthorize CISA 2015 for another decade.
- CISA 2015 provides legal protections for private-sector and federal-government sharing of information about criminal and nation-state hacking threats.
- The Senate draft does not include a matching extension, and Sen. Rand Paul has vowed to block reauthorization unless it includes restrictions on CISA’s work countering online disinformation.
- The law briefly expired last year and was temporarily extended through September 30.
- The House and Senate versions also differ on Pentagon cyber leadership: the Senate draft would combine two roles, while the House bill calls for a review and realignment of cyber roles.
Article Details
- Event Type
- Legislative action: the House passed a defense bill containing a provision to extend the 2015 Cybersecurity and Information Sharing Act for ten years.
- Impact
- If enacted, the extension would preserve legal protections for private-sector and federal-government sharing of data about criminal and nation-state hacking threats. The measure still faces Senate opposition and would require agreement in final negotiations.
People
Countries
Industries
DefenseThe House passed a defense policy bill that would extend the 2015 Cybersecurity and Information Sharing Act for another decade, preserving legal protections for sharing threat data between the private sector and theGovernmentdecade, preserving legal protections for sharing threat data between the private sector and the federal government.