21 1 (C) STATE, 2 TRIBAL, AND LOCAL REGU- LATORY AUTHORITY.— 3 (i) IN GENERAL.—Except as provided 4 in clause (ii), a cyber threat indicator or 5 defensive measure shared with a State, 6 tribal, or local government under this title 7 shall not be directly used by any State, 8 tribal, or local government to regulate, in- 9 cluding an enforcement action, the lawful 10 activity of any entity, including an activity 11 relating to monitoring, operating a defen- 12 sive measure, or sharing of a cyber threat 13 indicator. 14 (ii) REGULATORY AUTHORITY SPE- 15 CIFICALLY RELATING TO PREVENTION OR 16 MITIGATION 17 THREATS.—A 18 fensive measure shared as described in 19 clause (i) may, consistent with a State, 20 tribal, or local government regulatory au- 21 thority specifically relating to the preven- 22 tion or mitigation of cybersecurity threats 23 to information systems, inform the devel- 24 opment or implementation of a regulation 25 relating to such information systems. † S 754 ES OF CYBERSECURITY cyber threat indicator or de-