“We don’t support the current CISA proposal,” Apple said in a statement. “The trust of our customers means everything to us and we don’t believe security should come at the expense of their privacy.” Sounding off in support was Amber Cottle, head of Dropbox global public policy and government affairs, who noted, “While it’s important for the public and private sector to share relevant data about emerging threats, that type of collaboration should not come at the expense of users’ privacy.”
Citing Apple’s experience with security matters, Tiffiniy Cheng, co-founder of the digital rights advocacy group Fight for the Future said, “Apple gets privacy and security better than most companies, and way better than Congress does. Our lawmakers’ lack of understanding of cybersecurity isn’t just embarrassing, it’s dangerous. They should listen to the experts and abandon this hopelessly flawed bill.”
And while Apple and Dropbox are the latest to join the growing legions of organizations opposed to CISA, the tech community at large remains rather divided on the bill. Notably, Internet Service Providers like Comcast, Verizon, and AT&T are considered to be part of “Team NSA” by Fight for the Future, who took “public statements made by companies in official blog posts, tweets, to the media, or via their industry associations” into consideration when determining whether companies were for or against increased surveillance. “Remaining silent on essential policy questions that affect a company’s users,” Fight for the Future added, “Was also counted against that company’s score.”
CISA advocates on the Hill claim that they have the necessary support to pass the bill, and co-sponsor Sen. Dianne Feintstein, D-Calif., pointed out, “A bank would not be able to share a customer’s name or account information.” She continued, “Things like Social Security numbers, addresses, passwords, and credit information would be unrelated to a cyberthreat and would, except in very exceptional circumstances, be removed” before finding their way into federal hands.
Still, considering the growing opposition in the public sector, many seem wary of the bill’s future. “Sharing information about cybersecurity threats is a worthy goal,” said Sen. Ron Wyden, D-Ore. “Yet if you share more information without strong privacy protections, millions of Americans will say, ‘That is not a cybersecurity bill. It is a surveillance bill.'”
