Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons; Correction

Key Points

• 1The rule blocks countries of concern (identified as security threats) and their representatives from obtaining sensitive U.S. personal data, including financial records, health information, and location data
• 2Companies and data brokers must implement safeguards to prevent unauthorized foreign access to Americans' personal information
• 3The regulation applies to firms that handle or sell personal data, requiring them to verify who is requesting information and deny access to foreign governments and covered persons from high-risk countries
• 4Violations can result in penalties and enforcement action by the Department of Justice
• 5The regulation was corrected after initial publication, suggesting the original rule had technical or procedural errors that needed fixing

Key Dates