The landmark Cybersecurity Information Sharing Act of 2015 (CISA 2015)^[1] has been reauthorized retroactively from its original September 30, 2025 expiration for a limited one-year period. This development was the result of the House of Representatives and Senate passing H.R. 7148, the Consolidated Appropriations Act of 2026, which included the CISA 2015 extension in legislation to fund certain parts of the federal government through the end of Fiscal Year 2026, which ends September 30, 2026. President Trump signed the bill into law on February 3, 2026.

CISA 2015 was originally enacted with overwhelming bipartisan support over 10 years ago to provide much-needed clarity about the lawfulness of cybersecurity information sharing, deployment of defensive measures, and network monitoring. The law provides privacy protections; an antitrust exemption; protection of attorney-client privilege; confidential treatment for commercial, financial, and proprietary information shared with the government; and federal preemption.