Under the national coronavirus emergency, companies don't need much permission to give up people's data to the federal government. Privacy advocates are concerned with how agencies will gather, store and utilize it.

The platform uses encrypted keys to securely transmit personally identifiable information and trade secrets on U.S. imports during transactions.

Third-party contractors are prohibited from using or sharing data collected with CISA in their task orders, but that's no guarantee.

The Department of Defense hasn't done a good enough job assessing such threats, the Government Accountability Office found.