19 1 (i) be used by an entity to monitor or 2 operate a defensive measure that is applied 3 to— 4 (I) an information system of the 5 entity; or 6 (II) an information system of an- 7 other entity or a Federal entity upon 8 the written consent of that other enti- 9 ty or that Federal entity; and 10 (ii) be otherwise used, retained, and 11 further shared by an entity subject to— 12 (I) an otherwise lawful restriction 13 placed by the sharing entity or Fed- 14 eral entity on such cyber threat indi- 15 cator or defensive measure; or 16 (II) an otherwise applicable pro- 17 vision of law. 18 (B) CONSTRUCTION.—Nothing in this 19 paragraph shall be construed to authorize the 20 use of a cyber threat indicator or defensive 21 measure other than as provided in this section. 22 (4) USE 23 OF CYBER THREAT INDICATORS BY STATE, TRIBAL, OR LOCAL GOVERNMENT.— 24 (A) LAW † S 754 ES ENFORCEMENT USE.—