Sensitive data, serious stakes: What the DOJ’s new data rule means for your data supply chain
Brittany Thomas, Senior Regulatory Analyst (New York)
The Department of Justice’s (DOJ) Final Rule on bulk sensitive US data, effective 8th April 2025, was born out of Executive Order 14117. The order directed the DOJ to take action to prevent countries of concern – including China, Russia, Iran, North Korea, Cuba, and Venezuela – from accessing large-scale US sensitive personal and government-related data. The rule is a direct response to national security concerns about the exploitation of Americans' data, particularly in the context of artificial intelligence and cross-border data flows. Anyone buying alternative data needs to understand where the new lines are drawn and what it means for their sourcing, compliance, and risk management.WHAT
ALTERNATIVE DATA IS IN SCOPE?
The rule targets ‘bulk sensitive personal data’ – genomic, biometric, precise...