WASHINGTON (8/5/15)--The Cybersecurity Information Sharing Act (CISA) is a strong step toward improving cybersecurity, but further steps are needed, CUNA and its partners told Senate leadership in a letter sent Tuesday.
The bill, (S. 754), requires federal agencies to share information on cyberthreats in a timely manner and allows private entities to share information, indicators and defensive measures they detect.
“We encourage even further steps be taken to protect consumers’ sensitive information from the scourge of data breaches,” the letter reads. “To that end, we urge the Senate to take up legislation to establish a strong, but scalable, national data security standard to safeguard sensitive and personal consumer data from cyber criminals, such as the one proposed by Senators Tom Carper (D-Del.) and Roy Blunt (R-Mo.) in the Data Security Act of 2015 (S. 961).”
The letter adds that, with no federal data protection currently in place, millions of consumers are at risk of having their information exposed through data breaches. S. 961 would add such a standard.
“By outlining a security process that is adaptable to future changes in technology the Data Security Act would enable businesses of all sizes and complexity to better protect consumers from harm,” the letter reads. “Importantly, S. 961 also recognizes that it is not productive to duplicate data protection and consumer notice requirements that are already in place for financial institutions under the Gramm-Leach-Bliley Act and subsequent regulations.”
In addition to CUNA, the Consumer Bankers Association, Independent Community Bankers of America and the National Association of Federal Credit Unions signed the letter.