1124-AA01 202504 Unified Agenda of Federal Regulatory and Deregulatory Actions 1124 National Security Division NSD 1100 Department of Justice DOJ Provisions Regarding Access to Americans' Bulk Sensitive Personal Data and Government-Related Data by Countries of Concern

On February 28, 2024, the President issued the "Executive Order Preventing Access to Americans’ Bulk Sensitive Personal Data and U.S. Government-Related Data by Countries of Concern" (EO 14117). The Order directs the Attorney General to issue regulations that prohibit or otherwise restrict United States persons from engaging in any
acquisition, holding, use, transfer, transportation, or exportation of, or dealing in, any property in which a foreign person has any interest, where the transaction: (a) involves U.S. Government-related data or bulk U.S. sensitive personal data, as defined by final rules implementing the Order; (b) falls within a category of transactions that the Attorney General has determined pose an unacceptable national security risk of access by countries of concern or covered persons to Americans’ bulk sensitive personal data or U.S. Government-related data; or (c) meets other criteria specified by the Order.


On March 5, 2024, the Department published an Advanced Notice of Proposed Rulemaking (ANPRM) seeking public comment on various topics related to the implementation of the Order, including designating countries of concern and covered persons, identifying prohibited and restricted data transactions, defining U.S.  governmentrelated data and bulk U.S. sensitive personal data, and other provisions relating to the Order’s interpretation, enforcement, and compliance therewith.

The Department plans to publish a Notice of Proposed Rulemaking (NPRM) later this year.

]]> Economically Significant Previously Published in The Unified Agenda Completed Actions Yes No Regulatory 28 CFR 202 5 U.S.C. 301 28 U.S.C. 509, 510 EO 14117 - Preventing Access to Americans' Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern Yes ANPRM 03/05/2024 89 FR 15780 ANPRM Comment Period End 04/19/2024 NPRM 10/29/2024 89 FR 86116 NPRM Comment Period End 11/29/2024 Final Rule 01/08/2025 90 FR 1636 Final Action Effective 04/08/2025 Previously reported as RIN 1105-AB72. YES Businesses Organizations None No No Yes Yes Lee Licata Deputy Chief for National Security Data Risks, Foreign Investment Review Section 1124 National Security Division NSD 202 514-8648 nsd.firs.datasecurity@usdoj.gov 175 N Street, NE, Washington DC 20002