On 17 March 2015, the Cybersecurity Information Sharing Act of 2015 (SB 754), introducing provisions for data protection during the sharing of cyber threat indicators, was introduced to the United States Senate. The Bill would require federal entities and participating private organisations to remove any personal information not directly related to a cybersecurity threat before sharing or further dissemination. It would also mandate the implementation of security controls and establish procedures for notifying individuals if their personal information were shared in violation of the Law.
Original source