The U.S. Justice Department has disclosed its plans to execute an executive order aimed at addressing national security risks and enhancing data security. The order's primary focus is on safeguarding the personal data of American consumers.
Titled "Preventing Access to Americans' Bulk Sensitive Personal Data and U.S. Government-Related Data by Countries of Concern," the Executive Order mandates the Justice Department to establish and administer new national-security programs designed to mitigate data security risks. According to a press release by the U.S. Department of Justice, President issued this directive on February 28. The order will necessitate the Department to collaborate with various agencies in formulating regulations that restrict certain types of data transactions deemed harmful to American citizens and the U.S. Government.
The executive order will also enhance the authority vested in the Justice Department for addressing security risks associated with data in telecommunications infrastructure. The National Security Division of the Department will be tasked with implementing provisions that identify China, Russia, Iran, North Korea, Cuba, and Venezuela as countries of concern regarding data security breaches. According to a press release by the Department of Justice (DOJ), an Advance Notice of Proposed Rulemaking (ANPRM) will be issued for transparency and clarity about what the Department aims to achieve.
Attorney General Merrick B. Garland stated, "Our adversaries are exploiting Americans’ sensitive personal data to threaten our national security." He added that these adversaries are purchasing this data for blackmailing and surveilling individuals, targeting those they perceive as dissidents in the United States, and engaging in other malicious activities. Garland further explained that "the executive order gives the Justice Department the authority to block countries that pose a threat to our national security from harvesting Americans’ most sensitive personal data—including human genomic data, biometric and personal identifiers, and personal health and financial data."
