Jeh Johnson actually said...
So in the Cyber Security Act of 2015, Congress established limits on criminal and civil liability for those who share cyber threat indicators with the Department of Homeland Security.
Context
Johnson discusses legal protections for companies sharing cyber threat information.
04/10/2018