New U.S. Department of Justice regulations implementing Executive Order 14117 will restrict transfers of Americans’ bulk sensitive personal data to certain foreign countries due to national security concerns. The rule limits data brokerage and certain transactions involving large datasets such as health, genomic, or biometric data, particularly with “countries of concern.” Some transactions are prohibited while others require strict security measures. Healthcare organizations must review international partnerships, vendors, cloud services, and AI uses to ensure compliance and avoid significant civil or criminal penalties.
