In all honestly I do not see what the concern over this law has been about. It doesn&#x27;t expand the (terrible) surveillance powers but just allows network operators to do what they have been doing anyway (e.g. CloudFlare&#x27;s WTF and cloudsourced DDoS protection), and share data that you reasonably should expect to be shared.<p>What is concerning is what the law may be twisted to &quot;authorize&quot; (see patriotic act and mass metadata), but on the surface of it I really don&#x27;t see concern about CISA.