An amendment numbered 3 printed in House Report 112-454 to make clear in the bill's liability provision that the reference to the use of cybersecurity systems is the use of such systems to identify and obtain cyber threat information or the sharing of information are not exempt from potential civil liability.

1. Replaces “or sharing information” with “to identify or obtain cyber threat information or for sharing such information”

   ReplacesPage 8, line 18Printed page

   In H.R. 3523 · Reported in House

   "(3) Exemption from liability.--No civil or criminal cause of action shall lie or be maintained in Federal or State court against a protected entity, self-protected entity, cybersecurity provider, or an officer, employee, or agent of a protected entity, self-protected entity, or cybersecurity provider, acting in good faith--

   "(A) for using cybersecurity systems [inserted: to identify ]or [inserted: obtain cyber threat information or for ]sharing [inserted: such ]information in accordance with this section; or

   "(B) for not acting on information obtained or shared in accordance with this section.

   Original wording

   Page 8, beginning on line 18, strike “or sharing information” and insert “to identify or obtain cyber threat information or for sharing such information”.

Read automatically from the Congressional Record. Check the original before relying on it.

As printed