The US Department of Justice’s (DOJ’s) final rule implementing Executive Order (EO) 14117, Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern went into effect April 8, 2025. The EO charged DOJ with establishing and implementing a new regulatory program, which is referred to as the Data Security Program (DSP), to address the urgent and extraordinary national security threat posed by the continuing efforts of countries of concern (and covered persons that they can leverage) to access bulk US sensitive personal data and certain US government-related data.
Please see full publication below for more information.