Where does it state that private cos get access to this data?
103(a)(3) also requires them to share, when possible, with the general public.
In the Senate CISA draft, the language about "entities" is a little confusing. "Entities", unqualified, are private companies; government agencies are "Federal entities".
One the few changes in the budget bill CISA is to have the law now refer to "Federal entities" and "Non-federal entities".
I'm sure Techdirt found a way to spin that into a conspiracy to chopper away the Open Whisper System developers in black helicopters.