Feeds

White House threatens veto of CISPA surveillance bill

Obama lowers the boom on snoop law

The essential guide to IT transformation

The White House has said that the Cyber Intelligence Sharing and Protection Act (CISPA), currently before the US House of Representatives, lacks enough privacy protections in its current form and will probably be vetoed if passed.

A statement from the White House Office of Management and Budget said that, while the importance of protecting the national infrastructure from online attacks is paramount, it "strongly opposes" the bill because it lacks proper oversight, could seriously damage individuals' privacy and hands over responsibility for domestic cybersecurity to the NSA, rather than to a civilian body.

"Legislation should address core critical infrastructure vulnerabilities without sacrificing the fundamental values of privacy and civil liberties for our citizens, especially at a time our Nation is facing challenges to our economic well-being and national security," the statement reads.

"The Administration looks forward to continuing to engage with the Congress in a bipartisan, bicameral fashion to enact cybersecurity legislation to address these critical issues. However, for the reasons stated herein, if H.R. 3523 were presented to the President, his senior advisors would recommend that he veto the bill."

The bill as it stands sets up a mechanism for government cybersecurity agencies to share threat data with commercial companies, and sets up a mechanism whereby companies can share user information with the government on a voluntary basis. It includes full legal immunity for those companies that participate from any legal action brought by consumers who would like their data to remain private.

This legal shield is a major sticking point with the White House. The statement points out that CISPA would allow companies to dodge any legal action from consumers over data protection, if it could be shown that cybersecurity was involved.

CISPA was introduced in November by introduced by representatives Mike Rogers (R-MI) and "Dutch" Ruppersberger (D-MD) and has 112 co-sponsors, indicating strong support. The White House has obliquely warned against the legislation but now appears to have taken the gloves off and is actively trying to discourage it.

The bill has a lot of cheerleaders from the technology industry, with IBM, Intel, Facebook, Microsoft, Oracle, EMC and others sending in letters of support for the legislation, although none of them would comment when El Reg called. Facebook did issue a general statement that is supported the bill because any information sharing would be voluntary, and so would allow Facebook not to participate.

The bill's sponsors have been meeting with privacy groups to try and hammer out a compromise, and the Center for Democracy and Technology (CDT) announced significant progress has been made in tightening up privacy controls.

"The House Intelligence Committee has agreed to support certain amendments that will improve CISPA in terms of privacy and civil liberties," blogged CDT senior counsel Greg Nojeim. "However, the Committee-supported amendments leave two key issues unresolved - the flow of information to the super-secret National Security Agency and the broad purposes for which that information can be used." ®

Next gen security for virtualised datacentres

More from The Register

next story
e-Borders fiasco: Brits stung for £224m after US IT giant sues UK govt
Defeat to Raytheon branded 'catastrophic result'
Snowden on NSA's MonsterMind TERROR: It may trigger cyberwar
Plus: Syria's internet going down? That was a US cock-up
Who needs hackers? 'Password1' opens a third of all biz doors
GPU-powered pen test yields more bad news about defences and passwords
Think crypto hides you from spooks on Facebook? THINK AGAIN
Traffic fingerprints reveal all, say boffins
Microsoft cries UNINSTALL in the wake of Blue Screens of Death™
Cache crash causes contained choloric calamity
Germany 'accidentally' snooped on John Kerry and Hillary Clinton
Dragnet surveillance picks up EVERYTHING, USA, m'kay?
prev story

Whitepapers

5 things you didn’t know about cloud backup
IT departments are embracing cloud backup, but there’s a lot you need to know before choosing a service provider. Learn all the critical things you need to know.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.
Rethinking backup and recovery in the modern data center
Combining intelligence, operational analytics, and automation to enable efficient, data-driven IT organizations using the HP ABR approach.
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.