So your're not saying that the ECPA specifically allows broad information sharing with private parties, but rather that that information sharing is allowed by d

So your're not saying that the ECPA specifically allows broad information sharing with private parties, but rather that that information sharing is allowed by default? The problem then reduces to the CISPA grant of immunity, I think. If you have a contract with a company not to release your private information, the CISPA immunity clause seems to nullify that part of your contract. I imagine there might also be some common law legal restrictions on handling of personal information, but all I can find at the moment relates to information disclosed publicly ("privacy torts"); I'm not sure if that applies to disclosure to specific 3rd parties. If Facebook or Google or Microsoft can share your personal information and messages with Hollywood or Stratfor if they notice that those messages detail, hypothetically, a possible copyright violation, or even something as vague as messages where you talk about Anonymous and computer security, respectively... then you might be able to sue or you might not, depending on whether there's a contract or privacy policy involved, and depending on whether the sharing gets into the area of torts. However, if CISPA passed, the sharing would certainly be legal.