Sec. 231. Protections for clearinghouse participants
215 words·~1 min read·
/bill/113/s/1995/is/section-231·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
To the extent feasible, the designated entity shall ensure that any technical information disclosed to the designated entity under this subtitle shall be stored in a format designed to protect proprietary business information from inadvertent disclosure. To the extent feasible, the designated entity shall ensure that all information stored in the technical information clearinghouse and accessed by certified parties is presented in a form that minimizes the potential for such information to be traced to a particular network, company, or security breach incident.
Except as otherwise provided in this subtitle— security and vulnerability information collected under this section and provided to the Federal Government, including aggregated analysis and data, shall be exempt from disclosure under section 552(b)(3) of title 5, United States Code; and under section 230(e), security and vulnerability-related information provided to the Federal Government under this section, including aggregated analysis and data, shall be protected from public disclosure, except that this paragraph— does not prohibit the sharing of such information, as the designated entity determines to be appropriate, in order to mitigate cybersecurity threats or further the official functions of a government agency; and does not authorized such information to be withheld from a committee of Congress authorized to request the information.
Nothing in this subtitle permits the unauthorized disclosure of classified information.