View Rule

View EO 12866 Meetings Printer-Friendly Version     Download RIN Data in XML

DOJ/NSD RIN: 1124-AA01 Publication ID: Spring 2025 
Title: Provisions Regarding Access to Americans' Bulk Sensitive Personal Data and Government-Related Data by Countries of Concern 
Abstract:

On February 28, 2024, the President issued the "Executive Order Preventing Access to Americans’ Bulk Sensitive Personal Data and U.S. Government-Related Data by Countries of Concern" (EO 14117). The Order directs the Attorney General to issue regulations that prohibit or otherwise restrict United States persons from engaging in any
acquisition, holding, use, transfer, transportation, or exportation of, or dealing in, any property in which a foreign person has any interest, where the transaction: (a) involves U.S. Government-related data or bulk U.S. sensitive personal data, as defined by final rules implementing the Order; (b) falls within a category of transactions that the Attorney General has determined pose an unacceptable national security risk of access by countries of concern or covered persons to Americans’ bulk sensitive personal data or U.S. Government-related data; or (c) meets other criteria specified by the Order.


On March 5, 2024, the Department published an Advanced Notice of Proposed Rulemaking (ANPRM) seeking public comment on various topics related to the implementation of the Order, including designating countries of concern and covered persons, identifying prohibited and restricted data transactions, defining U.S.  governmentrelated data and bulk U.S. sensitive personal data, and other provisions relating to the Order’s interpretation, enforcement, and compliance therewith.

The Department plans to publish a Notice of Proposed Rulemaking (NPRM) later this year.

 
Agency: Department of Justice(DOJ)  Priority: Economically Significant 
RIN Status: Previously published in the Unified Agenda Agenda Stage of Rulemaking: Completed Actions 
Major: Yes  Unfunded Mandates: No 
EO 14192 Designation: Regulatory 
CFR Citation: 28 CFR 202   
Legal Authority: 5 U.S.C. 301    28 U.S.C. 509, 510    EO 14117 - Preventing Access to Americans' Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern   
Legal Deadline:  None
Timetable:
Action Date FR Cite
ANPRM  03/05/2024  89 FR 15780   
ANPRM Comment Period End  04/19/2024 
NPRM  10/29/2024  89 FR 86116   
NPRM Comment Period End  11/29/2024 
Final Rule  01/08/2025  90 FR 1636   
Final Action Effective  04/08/2025 
Additional Information: Previously reported as RIN 1105-AB72.
Regulatory Flexibility Analysis Required: YES  Government Levels Affected: None 
Small Entities Affected: Businesses, Organizations  Federalism: No 
Included in the Regulatory Plan: Yes 
International Impacts: This regulatory action will be likely to have international trade and investment effects, or otherwise be of international interest.
RIN Data Printed in the FR: Yes 
Agency Contact:
Lee Licata
Deputy Chief for National Security Data Risks, Foreign Investment Review Section
Department of Justice
National Security Division
175 N Street, NE,
Washington, DC 20002
Phone:202 514-8648
Email: nsd.firs.datasecurity@usdoj.gov