Cybersecurity Policy Report, Cyber Threat Info-Sharing Law Would Get Extension Under Senate-Approved Spending Bill, (Aug 10, 2026)
A law that encourages private-sector entities to share cyber threat information among themselves and with the federal government would be renewed through Dec. 11 under a stopgap spending bill that cleared the Senate on Saturday.
The Cybersecurity Information Sharing Act of 2015 (CISA 2015), which is due to expire on Sept. 30, would be extended past that date under the Continuing Appropriations and Extensions Act, 2027 (H.R. 6500, 119th Cong. (2026)).
CISA 2015 protects companies from legal repercussions when they report cyber attacks to the federal government or share cyber threat information. Without those protections, some private-sector entities would be reluctant to engage in information-sharing, creating blind spots for cyber defenders.
CISA 2015 is widely regarded as a foundational cybersecurity law and business groups have sought to prevent its expiration. Legislation that would extend it through 2035, the Widespread Information Management for the Welfare of Infrastructure and Government Act (HR 5079), cleared the House Homeland Security Committee last year (CPR, Sept. 3, 2025).
The Senate passed HR 6500 by a vote of 90-6 to avoid a potential government shutdown on Oct. 1. The bill would extend current spending authorities for federal agencies through Dec. 11, ensuring that any shutdown would occur after the Nov. 3 midterm elections. The House may consider the bill when members return from their district work period on Aug 31.
News: FederalLegislation DataSecurity