Cybersecurity bill would add secrecy to public records laws

WASHINGTON (AP) — A proposed law meant to encourage companies to share information about cyberthreats with the U.S. government includes measures that could significantly limit what details, if any, the public can review about the program through federal and state public records laws.

The legislation — already passed with broad bipartisan support in both houses of Congress but not yet finalized — would keep secret any information a company hands over to the Obama administration under a new cybersecurity agreement, including specifics the firms decide themselves shouldn't be disclosed.

The cyber agreement passed with bipartisan support, despite privacy concerns over Senate language from some lawmakers and technology companies, including Apple Inc. and Dropbox Inc. It's the culmination of a roughly six-year effort made possible by recent additions of antitrust and consumer-liability protections for the companies' participation.

Transparency advocates said the new law would provide excessive cover to tech companies through new restrictions to the U.S. Freedom of Information Act, which also supersedes state and tribal open-records laws.