---
kind: "section"
citation: "6 U.S.C. § 1505"
title: "6"
title_heading: "Domestic Security"
number: "1505"
heading: "Protection from liability"
release: "119-102"
date: "2026-07-12"
url: "https://uscodex.org/usc/6/1505"
units:
  - "Chapter 6 — Cybersecurity"
  - "Subchapter I — Cybersecurity Information Sharing"
---

# §1505. Protection from liability

- (a) **Monitoring of information systems—** No cause of action shall lie or be maintained in any court against any [private entity](/usc/6/1501.md?p=15-A), and such action shall be promptly dismissed, for the monitoring of an [information system](/usc/6/1501.md?p=9) and information under [section 1503(a) of this title](/usc/6/1503.md?p=a) that is conducted in accordance with this subchapter.
- (b) **Sharing or receipt of cyber threat indicators—** No cause of action shall lie or be maintained in any court against any [private entity](/usc/6/1501.md?p=15-A), and such action shall be promptly dismissed, for the sharing or receipt of a [cyber threat indicator](/usc/6/1501.md?p=6) or [defensive measure](/usc/6/1501.md?p=7) under [section 1503(c) of this title](/usc/6/1503.md?p=c) if—
  - (1) such sharing or receipt is conducted in accordance with this subchapter; and
  - (2) in a case in which a [cyber threat indicator](/usc/6/1501.md?p=6) or [defensive measure](/usc/6/1501.md?p=7) is shared with the Federal Government, the [cyber threat indicator](/usc/6/1501.md?p=6) or [defensive measure](/usc/6/1501.md?p=7) is shared in a manner that is consistent with [section 1504(c)(1)(B) of this title](/usc/6/1504.md?p=c-1-B) and the sharing or receipt, as the case may be, occurs after the earlier of—
    - (A) the date on which the interim policies and procedures are submitted to Congress under [section 1504(a)(1) of this title](/usc/6/1504.md?p=a-1) and guidelines are submitted to Congress under [section 1504(b)(1) of this title](/usc/6/1504.md?p=b-1); or
    - (B) the date that is 60 days after December 18, 2015.
- (c) **Construction—** Nothing in this subchapter shall be construed—
  - (1) to create—
    - (A) a duty to share a [cyber threat indicator](/usc/6/1501.md?p=6) or [defensive measure](/usc/6/1501.md?p=7); or
    - (B) a duty to warn or act based on the receipt of a [cyber threat indicator](/usc/6/1501.md?p=6) or [defensive measure](/usc/6/1501.md?p=7); or
  - (2) to undermine or limit the availability of otherwise applicable common law or statutory defenses.

## Source credit

(Pub. L. 114–113, div. N, title I, § 106, Dec. 18, 2015, 129 Stat. 2950.)