The U.S. House of Representatives' solid bipartisan vote for a cybersecurity bill sends a message to the Senate: Now it's your turn to act.
Ignoring a White House veto threat, the House on Thursday approved the Cyber Intelligence Sharing and Protection Act, which would encourage companies and the federal government to share information collected on the Internet to help prevent electronic attacks from cybercriminals, foreign governments and terrorists.
The legislation would allow the government to relay cyber threat information to a company to prevent attacks from Russia or China. In the private sector, corporations could alert the government and provide data that could stop an attack intended to disrupt the country's water supply or take down the banking system.
Congressional leaders are determined to get a cybersecurity bill completed this presidential election year, but that may be difficult. The Obama administration and several leading Senate Democrats and Republicans want a bill that would give the Homeland Security Department the primary role in overseeing domestic cybersecurity and the authority to set security standards. The House bill would impose no new regulations on businesses, an imperative for Republicans.
Senior Senate Republicans argue that Homeland Security is ill-equipped to determine how best to secure the nation's essential infrastructure. In the coming weeks, the Senate will try to proceed on its bill by Sens. Joe Lieberman and Susan Collins, who have said the House bill is inadequate in protecting against cyberattacks.
More than 10 years after the Sept. 11 terrorist attacks, proponents of the House bill cast it as an initial step to deal with an evolving threat of the Internet age.
Faced with widespread privacy concerns, Rep. Mike Rogers, chairman of the House Intelligence Committee, and Rep. C.A. "Dutch" Ruppersberger, the Intelligence panel's top Democrat, pulled together an amendment that limits the government's use of threat information to five specific purposes: cybersecurity; investigation and prosecution of cybersecurity crimes; protection of individuals from death or serious bodily harm; protection of minors from child pornography; and the protection of national security.
The House passed the amendment.
The White House, along with a coalition of liberal and conservative groups and some lawmakers, strongly opposed the measure, complaining that Americans' privacy could be violated. They argued that companies could share an employee's personal information with the government, data that could end up in the hands of officials from the National Security Agency or the Defense Department. They also challenged the bill's liability waiver for private companies that disclose information, complaining that it was too broad.
Echoing those concerns were several Republicans and Democrats who warned of potential government spying on its citizens with the help of employers.
"In an effort to foster information sharing, this bill would erode the privacy protections of every single American using the Internet. It would create a 'Wild West' of information sharing," said Rep. Bennie Thompson, the top Democrat on the House Homeland Security Committee.
Countering criticism of Big Brother run amok, proponents argued that the bill does not allow the government to monitor private networks, read private emails or close a website. It urges companies that share data to remove personal information.