CIRCIA (Cyber Incident Reporting for Critical Infrastructure Act)
CIRCIA: Information Protections (Sec. 2245)

CIRCIA (Cyber Incident Reporting for Critical Infrastructure Act) CIRCIA-2245b: Protections for Reporting Entities (FOIA, Privilege, Proprietary)

Submitted reports are treated as the commercial, financial and proprietary information of the entity when so designated, are exempt from FOIA and analogous State/Tribal/local disclosure laws, do not waive any applicable privilege or trade-secret protection, and are not subject to ex parte communication rules.

Other controls in CIRCIA: Information Protections (Sec. 2245)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.