That's not the legal obligation you should care about.
Under CISPA, there's no longer any legal obligation to protect your information. There is full immunity for not doing so.
Under CISPA, there's no longer any legal obligation to protect your information. There is full immunity for not doing so.
If an ISP suffers a breach and coughs up huge amounts of PII that they handled negligently, they are absolutely still liable after CISPA becomes a law.