On 30 January 2026, the Cybersecurity Information Sharing Act of 2015 (CISA) is scheduled to expire unless reauthorised by Congress. Its expiration would also terminate the Law’s data protection provisions, including the requirement for private enti…