CISA Terms Scorecard

Grade A+ — Highly protective (score 100/100)

The CISA Privacy Policy is a government-standard document that explicitly prohibits the sale of PII, limits data collection to necessary functions, and provides clear transparency on analytics.

CISA maintains a highly protective privacy policy with no data sale.

Terms at a glance

Sells your data
NO
Forced arbitration
NO
Trains AI on your content
NO
Collects biometric data
NO
Shares data with government
LIKELY
Easy to cancel
YES
Tells you before changes
NO
Deletes data on request
YES

What the terms actually say

Personally Identifiable Information

We never create individual profiles or give your PII to any private organizations.

The agency does not share your personal information with private companies.

How CISA Uses Cookies

If you do not wish to have session or persistent cookies stored on your machine, you can opt out or disable cookies in your browser.

You have full control over cookie storage without losing site functionality.

Site Security

Except for authorized law enforcement investigations, no other attempts are made to identify individual users or their usage habits.

The agency does not track you unless required by law enforcement investigations.

Last reviewed 2026-08-27 under rubric v3.5.

Other scorecards