Extending Expired Cybersecurity Authorities Act

Summary#

This bill would extend a set of cybersecurity information-sharing authorities first created in 2015. It changes the law so that the expiration date moves from September 30, 2025, to September 30, 2035. The change is written to take effect retroactively as if it were enacted on October 1, 2025. The bill also renames the 2015 statute to the "Protecting America from Cyber Threats Act" and updates references to that short title in Title XXII of the Homeland Security Act of 2002. The bill was introduced in the Senate on October 7, 2025, and placed on the Senate calendar.

What it means for you#

  • If you are an entity that uses the 2015 information-sharing authority, those authorities would remain available through 2035.
  • The text of the bill makes no specific changes to individual rights or new programs in the provided material.

Expenses#

No publicly available information.

Proponents' View#

No publicly available information about proponents' stated reasons is included in the bill text. The bill lists Senators Peters and Rounds among its sponsors.

Opponents' View#

No publicly available information about opponents' stated objections is included in the bill text.