Title 6, Domestic SecurityRelease 119-110

§1507 Construction and Preemption

Title 6 › CHAPTER 6 — CYBERSECURITY › SUBCHAPTER I — CYBERSECURITY INFORMATION SHARING › § 1507

Last updated Sep 22, 2026|Official source

Summary

Lets people and governments keep sharing lawfully. States, local governments, companies, and other non‑federal groups may share communications, records, or other information with each other and with the federal government if that sharing is already allowed. Federal agencies may also use those lawful disclosures, even when they repeat what others have shared. Employees and others still have the whistleblower protections under 5 U.S.C. 2302(b)(8), 5 U.S.C. 7211, 10 U.S.C. 1034, and 50 U.S.C. 3234. Rules about handling classified information, authorized law enforcement or intelligence actions, and enforcing classified‑information rules remain in force. The law does not change other legal duties to give information. It does not allow anticompetitive acts like price‑fixing or market allocation. It does not force anyone to start or join an information‑sharing relationship, or to give information as a condition of a contract, grant, or purchase. Contracts, trade secrets, and intellectual property rights stay the same. Federal law here overrides state laws that would block activities this law allows, but it does not override state laws about lawful state law‑enforcement practices. It does not create new regulatory power beyond what is written, preserves the Secretary of Defense’s authority under 10 U.S.C. 394, and allows disclosure in criminal cases when other law requires it.

Full Legal Text

Title 6, §1507

Domestic Security, Source: USLM XML via OLRC

(a)Otherwise lawful disclosures
Nothing in this subchapter shall be construed—
(1)to limit or prohibit otherwise lawful disclosures of communications, records, or other information, including reporting of known or suspected criminal activity, by a non-Federal entity to any other non-Federal entity or the Federal Government under this subchapter; or
(2)to limit or prohibit otherwise lawful use of such disclosures by any Federal entity, even when such otherwise lawful disclosures duplicate or replicate disclosures made under this subchapter.
(b)Whistle blower protections
Nothing in this subchapter shall be construed to prohibit or limit the disclosure of information protected under section 2302(b)(8) of title 5 (governing disclosures of illegality, waste, fraud, abuse, or public health or safety threats), section 7211 of title 5 (governing disclosures to Congress), section 1034 of title 10 (governing disclosure to Congress by members of the military), section 3234 of title 50 (governing disclosure by employees of elements of the intelligence community), or any similar provision of Federal or State law.
(c)Protection of sources and methods
Nothing in this subchapter shall be construed—
(1)as creating any immunity against, or otherwise affecting, any action brought by the Federal Government, or any agency or department thereof, to enforce any law, executive order, or procedure governing the appropriate handling, disclosure, or use of classified information;
(2)to affect the conduct of authorized law enforcement or intelligence activities; or
(3)to modify the authority of a department or agency of the Federal Government to protect classified information and sources and methods and the national security of the United States.
(d)Relationship to other laws
Nothing in this subchapter shall be construed to affect any requirement under any other provision of law for a non-Federal entity to provide information to the Federal Government.
(e)Prohibited conduct
Nothing in this subchapter shall be construed to permit price-fixing, allocating a market between competitors, monopolizing or attempting to monopolize a market, boycotting, or exchanges of price or cost information, customer lists, or information regarding future competitive planning.
(f)Information sharing relationships
Nothing in this subchapter shall be construed—
(1)to limit or modify an existing information sharing relationship;
(2)to prohibit a new information sharing relationship;
(3)to require a new information sharing relationship between any non-Federal entity and a Federal entity or another non-Federal entity; or
(4)to require the use of the capability and process within the Department of Homeland Security developed under section 1504(c) of this title.
(g)Preservation of contractual obligations and rights
Nothing in this subchapter shall be construed—
(1)to amend, repeal, or supersede any current or future contractual agreement, terms of service agreement, or other contractual relationship between any non-Federal entities, or between any non-Federal entity and a Federal entity; or
(2)to abrogate trade secret or intellectual property rights of any non-Federal entity or Federal entity.
(h)Anti-tasking restriction
Nothing in this subchapter shall be construed to permit a Federal entity—
(1)to require a non-Federal entity to provide information to a Federal entity or another non-Federal entity;
(2)to condition the sharing of cyber threat indicators with a non-Federal entity on such entity’s provision of cyber threat indicators to a Federal entity or another non-Federal entity; or
(3)to condition the award of any Federal grant, contract, or purchase on the provision of a cyber threat indicator to a Federal entity or another non-Federal entity.
(i)No liability for non-participation
Nothing in this subchapter shall be construed to subject any entity to liability for choosing not to engage in the voluntary activities authorized in this subchapter.
(j)Use and retention of information
Nothing in this subchapter shall be construed to authorize, or to modify any existing authority of, a department or agency of the Federal Government to retain or use any information shared under this subchapter for any use other than permitted in this subchapter.
(k)Federal preemption
(1)In general
This subchapter supersedes any statute or other provision of law of a State or political subdivision of a State that restricts or otherwise expressly regulates an activity authorized under this subchapter.
(2)State law enforcement
Nothing in this subchapter shall be construed to supersede any statute or other provision of law of a State or political subdivision of a State concerning the use of authorized law enforcement practices and procedures.
(l)Regulatory authority
Nothing in this subchapter shall be construed—
(1)to authorize the promulgation of any regulations not specifically authorized to be issued under this subchapter;
(2)to establish or limit any regulatory authority not specifically established or limited under this subchapter; or
(3)to authorize regulatory actions that would duplicate or conflict with regulatory requirements, mandatory standards, or related processes under another provision of Federal law.
(m)Authority of Secretary of Defense to respond to malicious cyber activity carried out by foreign powers
Nothing in this subchapter shall be construed to limit the authority of the Secretary of Defense under section 394 of title 10.
(n)Criminal prosecution
Nothing in this subchapter shall be construed to prevent the disclosure of a cyber threat indicator or defensive measure shared under this subchapter in a case of criminal prosecution, when an applicable provision of Federal, State, tribal, or local law requires disclosure in such case.

Legislative History

Notes & Related Subsidiaries

Editorial Notes

Amendments

2018—Subsec. (m). Pub. L. 115–232 substituted “section 394” for “section 130g”.

Reference

Citations & Metadata

Citation

6 U.S.C. § 1507

Title 6, Domestic Security

Last Updated

Sep 22, 2026

Release point: 119-110