Cybersecurity Policy Report, Cyber Info-Sharing Law Extension Blocked Again by Sen. Paul, (Oct 6, 2025)
For the fourth time in recent weeks, Sen. Gary Peters (D., Mich.) asked the Senate to immediately adopt legislation that would reauthorize a cyber threat information-sharing program that expired on Sept. 30.
Friday’s unanimous consent request by Sen. Peters, ranking member of the Senate Homeland Security and Governmental Affairs Committee, was again blocked by Sen. Rand Paul (R., Ky.), the committee’s chairman.
A bill introduced by Sen. Peters, the Cybersecurity Information Sharing Extension Act (S 1337), would extend the provisions of the Cybersecurity Information Sharing Act of 2015 (CISA 2015) through 2035 (CPR, April 16).
When CISA 2015 expired, private-sector entities lost legal protections that were enacted to encourage them to share cyber threat information among themselves and with the federal government.
“Businesses and stakeholders across industries who count on this law want to see a clean 10-year extension. Over the past few months, we have heard from more than 100 of them urging us to pass legislation that will give them the long-term certainty of these protections,” Sen. Peters told his colleagues.
Sen. Paul noted that a continuing resolution (CR) under consideration in the Senate to end the government shutdown would delay CISA 2015’s sunset until Nov. 21. Democrats oppose the CR.
“To come to the floor and complain about the government shutting down a program when the senator has every ability to vote in a few minutes to open the government back up is quite fake outrage,” Sen. Paul said.
But a temporary extension won’t resolve the concerns of the business community, and the reauthorization of CISA 2015’s authorities shouldn’t be tied to the appropriations process or government shutdown, Sen. Peters responded.
“This has absolutely nothing to do with annual appropriations whatsoever. It doesn't have to do with the shutdown. This is a law that expired at the end of the fiscal year to protect our cybersecurity across the country,” he said.
“It is basically one person standing in the way of providing critical protection for cybersecurity for the entire country,” he added. “This is simply irresponsible.”
News: FederalLegislation DataSecurity