CISA passed 74-21 in the Senate. Now what?
Lawmakers rejected all amendments, including those that would protect personal information (55-41) or more closely define "cybersecurity threat" (60-35) to prevent the law from being abused. (Video via C-SPAN)
Aspects that worried privacy advocates are still in place. Private agencies may gather and share cybersecurity threat information on their networks "notwithstanding any other provision of law" — despite pushback from privacy advocates, security researchers, a good chunk of Silicon Valley and even the Department of Homeland Security.
Now, CISA goes to a congressional conference committee where members will work out the final language.
The House and the Senate must agree on CISA's language before it reaches the president's desk.