The Cybersecurity Act of 2009 (PDF) gives the president the ability to “declare a cybersecurity emergency” and shut down or limit Internet traffic in any “critical” information network “in the interest of national security.” The bill does not define a critical information network or a cybersecurity emergency. That definition would be left to the president.
The bill does not only add to the power of the president. It also grants the Secretary of Commerce “access to all relevant data concerning [critical] networks without regard to any provision of law, regulation, rule, or policy restricting such access.” This means he or she can monitor or access any data on private or public networks without regard to privacy laws.
Basically all this will do is prevent ankle biters and keyboard mashers from doing things that in all probability have already been done by those with a predisposition to do, and the skills required to do so. I’m not exactly confident in Rockefeller or Snow having any competency in this field beyond the restricting of behavior in the obviously other classes of people, outside of government, than they.