PRIA Logo™
HR5079119th Congress

Widespread Information Management for the Welfare of Infrastructure and Government Act

Sponsored By: Representative Garbarino, Andrew R. [R-NY-2]

In Committee

Summary

Modernizes the Cybersecurity Act of 2015 to add artificial intelligence and expand real‑time information sharing with critical infrastructure. This bill would update federal definitions, broaden which agencies and systems are covered, and require faster outreach and guidance to non‑Federal owners and operators.

Personalized for You

How does this bill affect your finances?

Personalize government policy and PRIA will tell you what this bill means for your household, plus every other piece of legislation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.

Free to download

Bill Overview

Analyzed Economic Effects

6 provisions identified: 3 benefits, 1 costs, 2 mixed.

Cybersecurity law extended to 2035

If enacted, the Cybersecurity Act’s end year would move from 2025 to 2035. The government would also publish a cyber threats report every two years by September 30, prepared with Homeland Security and sent to Congress. The report would add focus on ransomware and prepositioning activities.

Broader cyber coverage for AI and devices

If enacted, cyber coverage would expand to include more types of compromise, and technologies like AI, operational technology, edge devices, and IoT. It would also add legal definitions for artificial intelligence, critical infrastructure, and sector risk management agency. These updates would help agencies and partners apply the rules more clearly.

More cyber help for infrastructure operators

If enacted, the government would keep a program to offer voluntary cyber help to non‑federal operators, including small and rural ones. DHS would create an outreach plan within 90 days to teach how to share threat indicators and strip personal data. Select staff at critical infrastructure companies could get a one‑time read‑in briefing. Federal procedures for sharing threat data would be updated as needed, and follow‑up actions would be required within 60 days after any update.

Some cyber rules become optional

If enacted, a required rule would change from “shall” to “may” in one part of the law. The Secretary’s role as the designated agent would also become optional instead of required. These shifts would reduce guaranteed actions and leave more discretion to the agency.

Mixed changes to cyber info sharing

If enacted, more sector risk agencies would be included in prevention and response activities. Agencies could quickly share threat alerts with other federal entities, and copyright would be recognized alongside trade secret protection. But the bill would also let actors limit or change sharing of cyber threat information with sector risk agencies.

Mixed rules for using AI in cyber

If enacted, some cyber tools could use AI when the AI is built only for cybersecurity. At the same time, the bill would bar use of certain AI for specified authorized activities. These changes would take effect upon enactment.

Sponsors & CoSponsors

Sponsor

Garbarino, Andrew R. [R-NY-2]

NY • R

Cosponsors

  • Rep. McCaul, Michael T. [R-TX-10]

    TX • R

    Sponsored 9/2/2025

Roll Call Votes

No roll call votes available for this bill.

View on Congress.gov
Back to Legislation