The Cybersecurity Information Sharing Act (CISA) facilitates cyber threat information sharing while protecting privacy by requiring the removal of personal identifiable information. The act restricts government usage of shared information solely for cybersecurity purposes and mandates consent for law enforcement investigations. Additionally, businesses can volunteer to share threat data with limited liability protections, but are not obligated to do so.