DOJ Proposes Rules to Restrict US Data Transfers to Countries of ...

Covered Large-Scale International Data Transfers Would Be Prohibited or Restricted; Comments Due by November 29, 2024 · Related Practices.

The US Department of Justice (DOJ) on October 21, 2024 issued a Notice of Proposed Rulemaking (NPRM), through its Foreign Investment Review ...

As previewed in the ANPRM, the proposed rule does not authorize the imposition of generalized data localization requirements to store Americans' ...

In support of the DOJ's rule, the NPRM is accompanied by proposed security requirements for restricted transactions issued by the Cybersecurity ...

On October 29, 2024, the DOJ issued a proposed rule prohibiting and restricting ... data of U.S. citizens or to U.S. government-related data ...

On October 21, 2024, the National Security Division (“NSD”) of the U.S. Department of Justice (“DOJ”) issued a notice of proposed rulemaking ...

The proposed rule prohibits U.S. persons from knowingly engaging in a covered data transaction involving data brokerage with a country of ...

The Department of Justice proposes a rule to implement Executive Order 14117 of February 28, 2024 (Preventing Access to Americans' Bulk ...

On October 29, 2024, the Department of Justice (DOJ) issued a proposed rule prohibiting and restricting certain transactions that could ...

The Department of Justice (DOJ) has proposed a rule that would regulate certain transactions involving bulk sensitive personal data.

The U.S. Department of Justice (“DOJ”) issued a revised proposed rule with new details about the most recent regulatory regime governing ...

The Proposed Rule would prohibit certain data transfers, while other transfers may occur only if specific security requirements are put in place ...

Further, a U.S. company focused on software development may be restricted from transferring sensitive personal data to a subsidiary in China for ...

... restrictions on covered data transactions ... Covered Persons: The proposed rule would generally regulate U.S. persons' data transactions.

DOJ's new rule impacts business activities and compliance for sensitive US data transfers ... The proposed rule defines “country of concern” as ...

These restricted transactions would only be permitted if they satisfy CISA's security requirements to mitigate risks from countries of concern ...

... countries of concern to bulk US ... requirements, the rule would create personal data transfer restrictions under US law.

The NPRM identifies six “countries of concern” as posing a significant risk of exploiting bulk sensitive personal data: China (including Hong ...

US persons engaging in restricted transactions would have to implement a data compliance program including risk-based procedures for verifying ...

The transfer of data related to U.S. government operations or large quantities of data about Americans to adversarial foreign nations would ...