Senate's NSA skirmish stalling cyber bill

A Senate skirmish over National Security Agency (NSA) reform has stalled the upper chamber’s plan to move a major cyber bill. 

The House this week passed two complementary measures that would increase the public-private exchange of data about hackers, following a series of massive cyberattacks at Sony Entertainment, Anthem, Home Depot and JPMorgan. The bills would shield companies from liability when sharing cyber threat data with civilian government agencies.

The Senate had planned to move its companion legislation, the Cybersecurity Information Sharing Act (CISA), by the end of April, but those plans appear to been put on hold.

Senate Intelligence Committee Chairman Richard BurrRichard Mauze BurrGOP's Tillis comes under pressure for taking on Trump Warner says there are 'enormous amounts of evidence' suggesting Russia collusion McCarthy dismisses Democrat's plans: 'Show me where the president did anything to be impeached' MORE (R-N.C.) — who is backing the measure, along with the panel’s top Democrat, Sen. Dianne FeinsteinDianne Emiel FeinsteinGOP rep to introduce constitutional amendment to limit Supreme Court seats to 9 Senate Dems petition Saudi king to release dissidents, US citizen Court-packing becomes new litmus test on left MORE (Calif.) — told The Hill there was no timeline for CISA at this point.

“We have a few things to do first,” Minority Leader Harry ReidHarry Mason ReidBernie campaign 2.0 - he's in it to win it, this time around Dems wrestle over how to vote on ‘Green New Deal’ Senate confirms Trump court pick despite missing two 'blue slips' MORE (D-Nev.) told reporters Thursday.

Chiefly, legislators have to figure out what to do about the Patriot Act, which authorizes a number of the NSA’s controversial spying powers, before portions of it expire on June 1.

And the Senate seems stuck.

Reformers are looking to a compromise bill that Sen. Patrick LeahyPatrick Joseph LeahyCitizens lose when partisans play politics with the federal judiciary Senate Dems petition Saudi king to release dissidents, US citizen Patrick Leahy sits at center of partisan judicial nominations MORE (D-Vt.), the Judiciary committee’s top Democrat, has worked on with House lawmakers. But Majority Leader Mitch McConnellAddison (Mitch) Mitchell McConnellTrump blasts McCain, bemoans not getting 'thank you' for funeral GOP senator: Trump's criticism of McCain 'deplorable' McConnell calls McCain a 'rare patriot' and 'American hero' after Trump criticism MORE (R-Ky.) cut in Tuesday, unexpectedly dropping his own measure to re-up the Patriot Act without changes for five years.

It’s unlikely McConnell has the support necessary to easily punch through his “clean” Patriot Act provision, given the bipartisan group calling for surveillance changes. Meanwhile, Judiciary Committee Chairman Chuck GrassleyCharles (Chuck) Ernest GrassleySeniors win big with Trump rebate rule  Klobuchar: ObamaCare a 'missed opportunity' to address drug costs Just one in five expect savings from Trump tax law: poll MORE (R-Iowa) has declined to weigh in with a specific path forward, instead claiming he needs to have additional consultations with leaders of the Intelligence Committee.

Despite lawmakers’ insistence that NSA reform and cybersecurity are separate matters, the two issues have been intertwined for the past year, and that has hampered efforts to move legislation on either topic.

“It you’re not careful, they all get wrapped up into one unhappy package that doesn’t have a pretty bow on it,” said Norma Krayem, a lobbyist with Squire Patton Boggs who co-chairs the firm’s cybersecurity industry group.

The Senate’s inability to advance the surveillance-curbing USA Freedom Act in late 2014 was largely credited with killing an attempt at cyber info-sharing legislation that had already passed the House.

The fear is that without altering NSA authority first, a cyber info-sharing measure would simply shuttle more sensitive data to the intelligence agency.

Cyber info-sharing legislation “would leave the door wide open to more NSA surveillance by allowing the sharing of personal information for a raft of purposes unrelated to cybersecurity,” said Rep. Jared Polis (D-Colo.), who voted against both House bills.

Senate Democrats currently opposing CISA — including Leahy and Sen. Ron WydenRonald (Ron) Lee WydenCongress should take action to stop unfair taxation of the digital economy Trump officials take bold steps on Medicaid GOP steps up attack over tech bias claims MORE (D-Ore.) — are also some of the staunchest NSA critics.

And the longer the Senate spins its wheels on CISA, the more opposition can build, Wyden said during a Computer and Communications Industry Association panel Thursday morning.

“I think when consumers learn about this, that in effect all this information is going to be shared, that corporations’ privacy is important but individuals’ privacy doesn’t count for a whole lot, I think they’re not going to be pretty happy about it,” he said.

The Senate could be tied up for awhile. 

In addition to a battle over whether to rein in the NSA’s spying powers, the Senate is also bogged down over Iranian nuclear negotiations and trade legislation. An anti-human-trafficking bill and Loretta Lynch’s confirmation as attorney general also ate up time this week.

Meanwhile, the House is trying to quickly move its own NSA reform bill, with an eye toward spurring the Senate to action.

Next week, lawmakers are expected to introduce a much-anticipated bill that would eliminate some of the more controversial NSA surveillance authorities.

Many believe the timing is partially tied to the movement of the cyber bills.

“That was the first thing that hit my mind,” said Alex Manning, who served as staff director of the House Homeland Security Subcommittee on Cybersecurity last Congress. “I think they did that on purpose to say, ‘We’re going to address that.’ ”

House lawmakers are hoping a speedy and overwhelming vote in favor of reshaping the NSA might send a signal to senators hesitant about cyber info-sharing.

“I think it sends a good message that while there are some outstanding issues, we’re still willing to work through them,” Rep. Bennie Thompson (D-Miss.), the top Democrat on the House Homeland Security Committee and a top advocate of one of the lower chamber’s cyber bills, told The Hill. 

That’s why lawmakers say they remain confident these cyber bills will ultimately become law. 

“The Senate kind of plays by its own set of rules,” Thompson said. “One day it’s hot, next day it’s cold, next day it’s back hot. I’m sure at the end of the day they’ll be back on track.”

That day could come sooner if the Senate is able to first work some NSA reform language into its Patriot Act reauthorization bill.

“Hopefully that will take some of the edge away from that group” opposing CISA, said Manning, now the senior government relations director with Arent Fox.

Rep. Jim Langevin (D-R.I.), who co-chairs the Congressional Cybersecurity Caucus, told The Hill, “In some ways dealing with FISA reform first certainly makes sense.” 

FISA, or the Foreign Intelligence Surveillance Act, is the original law the Patriot Act altered in 2001.

“Let’s allay the public’s fears about info-sharing first, and deal with FISA reform so we know what the government can and can’t do,” Langevin said. “Next, let’s move toward addressing the need for information-sharing on cyber.” 

And most think the Senate will have to include some reform measures a Patriot Act reauthorization.

McConnell’s bill won’t have enough support to get through the upper chamber, Langevin said, “and I certainly don’t think it could pass the House.” 

If the NSA debate gets settled, Reid believes his colleagues can wrap up CISA before the Senate’s next break, at the end of May.

“I think McConnell wants to do it this work period and so do I,” he told reporters.

— Julian Hattem contributed