DOJ Issues Additional Guidance as Data Security Program Enters into Effect; Limits Enforcement for First 90 Days

On April 11, 2025, the U.S. Department of Justice, National Security Division (“DOJ”) issued a compliance guide (“Compliance Guide”), a set of frequently asked questions (“FAQs”), and a 90-day limited enforcement policy (“Enforcement Policy”) relating to implementation of the Data Security Program, codified at 28 C.F.R. Part 202 (“DSP”). 

The DSP is a regulatory program designed to prevent certain countries of concern—China, Cuba, Iran, North Korea, Russia, and Venezuela—and covered persons from having access to Americans’ bulk sensitive personal data and U.S. government-related data. The DSP largely went into effect on April 8, 2025.

Continue reading on the Cleary Foreign Investment and International Trade Watch blog