Cybersecurity Database

Law

Cybersecurity Information Sharing Act (CISA 2015)

Cybersecurity Information Sharing Act of 2015 (CISA 2015)

In force since 18 December 2015Record checked against the official source on 29 October 2026 · Methodology

Official source: https://www.govinfo.gov/app/details/PLAW-114publ113

Official sourceDownload PDF (official source)
Official number
Public Law 114-113, Division N, Title I (6 U.S.C. 1501-1510)
Date adopted
Entry into force

Summary

The law encourages companies to share cyber threat indicators and defensive measures voluntarily with the federal government and with each other. In return it offers specific protections: liability protection for sharing and for monitoring their own systems in line with the law, an antitrust exemption, exemption of shared information from freedom-of-information requests and a ban on using it for regulatory purposes. The Department of Homeland Security runs the federal entry point (now through CISA) and must remove unnecessary personal information before passing information on. It is the legal basis for much of the threat-information sharing between the private sector and government in the United States.

Who it applies to

Companies and other non-federal entities that voluntarily share threat indicators and defensive measures, and the federal agencies that receive and disseminate them.

Key dates

  1. The law's original sunset date passes; its protections lapse during the federal funding gap
  2. The continuing appropriations act (Public Law 119-37) restores the law until 30 January 2026
  3. Public Law 119-75 extends the law until 30 September 2026
  4. Public Law 119-103 extends the law until 11 December 2026

Information

Jurisdiction
United States
Issuing body
United States Congress
Type
Law
Available languages
English
Topics
Notes
It is Title I of Division N (Cybersecurity Act of 2015) of the Consolidated Appropriations Act, 2016; the linked PDF contains the whole appropriations act. Section 111 set its sunset at 30 September 2025: the protections lapsed during the federal funding gap and were restored by Public Law 119-37 of 12 November 2025 (section 149), then extended by Public Law 119-75 (section 5008) and Public Law 119-103 (section 2011) until 11 December 2026. As of the end of October 2026 Congress has not yet passed a multi-year reauthorisation. Not to be confused with the Cybersecurity and Infrastructure Security Agency, which has the same acronym.

Record details

Original title
Cybersecurity Information Sharing Act of 2015 (CISA 2015)
Title in other languages
  • Legge del 2015 sulla condivisione delle informazioni di cybersecurity (CISA 2015)
  • Loi de 2015 sur le partage d'informations en matière de cybersécurité (CISA 2015)
  • Ley de 2015 de intercambio de información sobre ciberseguridad (CISA 2015)
  • Gesetz von 2015 über den Austausch von Informationen zur Cybersicherheit (CISA 2015)
Licence / terms of use
Public domain / official act – Work of the United States federal government, not protected by copyright (17 U.S.C. § 105).
Collected from
manual entry
Last verified
(verified via web)

How to cite

APA

United States Congress. (2015). Cybersecurity Information Sharing Act of 2015 (CISA 2015) (Public Law 114-113, Division N, Title I (6 U.S.C. 1501-1510)). https://www.govinfo.gov/app/details/PLAW-114publ113

Chicago

United States Congress. "Cybersecurity Information Sharing Act of 2015 (CISA 2015)." 18 December 2015. https://www.govinfo.gov/app/details/PLAW-114publ113.

BibTeX

@misc{us_cybersecurity_information_sharing_act_2015,
  author       = {{United States Congress}},
  title        = {{Cybersecurity Information Sharing Act of 2015 (CISA 2015)}},
  year         = {2015},
  note         = {Public Law 114-113, Division N, Title I (6 U.S.C. 1501-1510)},
  url          = {https://www.govinfo.gov/app/details/PLAW-114publ113},
  urldate      = {2026-10-29}
}

Metadata and summary: CC BY 4.0 · JSON