If you read their press release about CISPA, and then read the Wikipedia page, you'll find a number of direct discrepancies.

For example, the EFF claims that cyber intelligence is user data, when in reality it's IPs, domains, md5s, general behavior of threat actors. The EFF intentionally pretends like companies want to give away user information, when in reality, companies want to enable the US government to protect its citizens.