Cybersecurity and Information Sharing: Comparison of H.R. 1560 and H.R. 1731 [April 23, 2015] [open pdf - 384KB]
"It is generally recognized that effective sharing of information in cybersecurity is an important tool in the protection of information systems and their contents from unauthorized access by cybercriminals and other adversaries. Five bills on information sharing in cybersecurity have been introduced in the 114th Congress (H.R. 234, H.R. 1560, H.R. 1731, S. 456, and S. 754). The White House has also submitted a legislative proposal and issued an executive order on the topic. In the House, H.R. 1560, the Protecting Cyber Networks Act (PCNA), was reported out of the House Permanent Select Committee on Intelligence on April 13, 2015, and H.R. 1731, the National Cybersecurity Protection Advancement Act of 2015 (NCPAA), was ordered reported by the House Committee on Homeland Security on April 14. Both bills are expected to receive floor action in the House the week of April 20. They both focus on information sharing among private entities and between them and the federal government. They address the structure of the information-sharing process, issues associated with privacy and civil liberties, and liability risks for private-sector sharing, and both address some other topics in common. In addition to other provisions, the NCPAA would explicitly amend portions of the Homeland Security Act of 2002 (6 USC 101 et seq.), and the PCNA would amend parts of the National Security Act of 1947 (50 USC 3021 et seq.). Comparison of the bills reveals many similarities but also significant differences, for example in how they define terms in common such as cyber threat indicator, the roles they provide for federal agencies (especially, the Department of Homeland Security and the intelligence community), processes for nonfederal entities to share information with the federal government; processes for protecting privacy and civil liberties, uses permitted for shared information, and reporting requirements."
CRS Report for Congress, R43996