The landmark Cybersecurity Information Sharing Act of 2015 (CISA
2015)1 has been reauthorized retroactively from its
original September 30, 2025 expiration for a limited one-year
period. This development was the result of the House of
Representatives and Senate passing H.R. 7148, the Consolidated Appropriations Act
of 2026, which included the CISA 2015 extension in legislation to
fund certain parts of the federal government through the end of
Fiscal Year 2026, which ends September 30, 2026. President Trump
signed the bill into law on February 3, 2026.
CISA 2015 was originally enacted with overwhelming bipartisan
support over 10 years ago to provide much-needed clarity about the
lawfulness of cybersecurity information sharing, deployment of
defensive measures, and network monitoring. The law provides
privacy protections; an antitrust exemption; protection of
attorney-client privilege; confidential treatment for commercial,
financial, and proprietary information shared
