The Justice Department is proposing new rules that would limit the ability of adversarial nations to purchase Americans’ bulk data.
The Justice Department is proposing new rules that would limit the ability of adversarial nations to purchase Americans’ bulk data.
The notice of proposed rulemaking, announced on Oct. 21, would attempt to throttle the amount of information sent by data brokers to six covered nations by placing new limits on certain business transactions regarding Americans’ data.
The six nations that are targeted include China, Cuba, Iran, North Korea, Russia, and Venezuela.
The proposal was precipitated in February when President Joe Biden signed an executive order directing the department to create new regulations that would prevent hostile countries from purchasing the sensitive data of U.S. residents through legal means.
The proposed regulations would, therefore, limit the sale of sensitive personal data—including genomic, biometric, personal health, geolocation, and financial information—of U.S. residents.
As currently written, the rules would prohibit “any U.S. person from knowingly engaging in a covered data transaction involving data brokerage with a country of concern or a covered person.”
Whether that language holds or is watered down remains to be seen, however. International data brokerage is a lucrative field of business, and the rules are likely to be the target of intense lobbying.
To that end, the notice outlines that the United States is “widely perceived to be the largest data-brokerage market in the world.”
Among the largest data brokerages in the world are U.S.-based Oracle America, Equifax, and Experian, which boast combined U.S. revenues of more than $61 billion, according to the notice.
Such corporations often have access to deep stores of sensitive personal information that could easily be used by a foreign adversary to target individual Americans for influence operations or worse.
The document highlights the findings of one group of researchers from Notre Dame, who “were offered access to thousands of records of military personnel and military veterans’ data containing names, addresses, emails, phone numbers, military agency or branch, medical ailments, political affiliations, religion, gender, age, income, credit rating, and even details on children in the household.”
“Data brokers often collect data regarding, for example, where the average person goes, where they shop, and what they search for online,” the document adds.
