DOJ Launches Data Security Program to Counter Foreign Data Exploitation

Summary: The U.S. Department of Justice has launched a Data Security Program to safeguard national security and personal data from foreign threats by prohibiting access to sensitive American data by adversarial nations. The program aims to curb foreign espionage through regulation of data transactions and compliance requirements for U.S. entities. A 90-day grace period will allow businesses to adjust to the new regulations without facing immediate civil enforcement.

Affected: U.S. organizations and foreign firms operating in the U.S.

Keypoints :

• Data Security Program effective April 8, 2025, restricts foreign adversaries from accessing sensitive U.S. data.
• Includes requirements for compliance programs, audits, and definitions of “covered data transactions” and “covered persons.”
• DOJ offers guidance and a grace period for businesses to adapt to new regulations without facing immediate penalties for good faith compliance efforts.