The U.S. Department of Justice unveiled a set of stringent new rules aimed at protecting sensitive American data from falling into the hands of foreign adversaries, particularly countries like China, Iran, and Russia.
The proposed regulations, announced on Monday, are part of a broader effort to safeguard the federal government’s data, as well as the bulk personal data of American citizens, from potential misuse in cyberattacks, espionage, or blackmail.
This move marks a significant escalation in Washington’s ongoing efforts to prevent foreign nations from accessing sensitive U.S. information. The proposal also follows an executive order issued earlier in 2024 by President Joe Biden, which seeks to curtail the ability of foreign actors to exploit American financial, health, and genomic data.
In addition to China, Iran, and Russia, the rule targets several other countries deemed national security threats, including Venezuela, Cuba, and North Korea.
The issue of foreign access to U.S. data has been an area of increasing concern for policymakers in Washington. Over the past few years, tensions have escalated over the use of technology and data in trade, security, and geopolitical competition.
China, in particular, has been at the center of these concerns, with several high-profile cases involving Chinese companies attempting to gain access to U.S. data through business transactions.
One such example occurred in 2018, when the U.S. Committee on Foreign Investment (CFIUS) blocked the sale of MoneyGram International, a U.S.-based money transfer company, to China’s Ant Financial due to concerns over data security. The committee determined that the deal would have given the Chinese company access to data that could potentially be used to identify U.S. citizens, posing a national security risk.
The Justice Department’s latest proposal is part of a broader push to curb the transfer of sensitive American data to foreign countries, particularly those classified as “countries of concern.”
READ ALSO: US Election: Elon Musk Promises $1 Million Daily to Voters in Battleground States
One of the most notable aspects of the proposed rules is the specific attention paid to certain types of data, particularly human genomic, financial, and health data. These categories are increasingly seen as areas of vulnerability, as they can be used to carry out targeted cyberattacks, blackmail, or even biological espionage.
According to the new rules, the transfer of human genomic data concerning over 100 individuals, or personal health or financial data affecting over 10,000 people, would be restricted if there is any risk of it being sent to a foreign adversary.
In addition, precise geolocation data from over 1,000 U.S. devices would also be banned from being transferred to entities that could pass the information on to countries like China, Russia, or Iran.
These protections are meant to address growing concerns over how large-scale data collection by foreign powers could be used against U.S. citizens and the government. For example, genomic data could be used to develop highly specific biological weapons, while financial data could be used to influence or blackmail individuals in key positions of power.
The new rules also place restrictions on certain business transactions, particularly those involving data brokers. The proposal would ban any transactions involving data brokers who knowingly sell or transfer sensitive American data to “countries of concern.”
This includes businesses that trade in personal health, financial, or location data. Furthermore, the rules would bar the transfer of any U.S. government personnel data, closing a potential loophole that could have compromised national security.
The proposal is designed to be broad in scope, enabling the Justice Department to enforce compliance through both criminal and civil penalties. This could mean severe legal consequences for companies or individuals who are found to be complicit in transferring sensitive U.S. data to foreign adversaries.
One of the most contentious areas of U.S.-China relations in recent years has been the use of Chinese-owned apps, particularly TikTok. The wildly popular social media platform has faced multiple allegations of data privacy violations, with U.S. officials expressing concerns that TikTok’s parent company, ByteDance, could potentially hand over U.S. user data to the Chinese government.
The Justice Department’s proposed rules would add further pressure on apps like TikTok by making it illegal for such platforms to transfer sensitive data from U.S. users to a parent company based in China or another “country of concern.” While TikTok has repeatedly denied allegations that it has shared U.S. user data with the Chinese government, the platform continues to face intense scrutiny from U.S. regulators and lawmakers.
In light of the new rules, Chinese apps and technology companies could face further restrictions if they are found to be in violation of U.S. data protection laws.
Monday’s proposal is just the latest development in the U.S. government’s long-standing efforts to protect American data from being exploited by foreign powers. The Biden administration has been particularly focused on preventing adversaries from accessing critical data that could be used for cyberattacks or to undermine U.S. national security.
READ ALSO: Liverpool Eye Borussia Dortmund Defender as Potential Successor to Virgil van Dijk
As technology continues to evolve and the amount of data collected on individuals grows, the stakes in the battle for data security are becoming higher. With the rise of artificial intelligence, biometric data collection, and interconnected devices, protecting sensitive data has become a priority for the U.S. government.
By proposing these new rules, the Justice Department is sending a clear message: American data must be protected from foreign adversaries at all costs. Whether the proposal will be successful in deterring nations like China, Russia, or Iran from accessing U.S. data remains to be seen, but it represents a critical step in safeguarding American privacy and security in the digital age.
As the proposal moves forward, it is likely to face opposition from companies that trade in data, as well as from foreign governments who view the U.S. stance as overly restrictive. However, with growing concerns about cyberattacks and data breaches, the push for stronger regulations appears to be gaining momentum.