DOJ Issues New Rule Regulating Handling of Bulk Sensitive Personal Data

The DOJ has proposed a rule that would regulate certain transactions involving bulk sensitive personal data. The rule would implement a complex regulatory framework, with civil and criminal enforcement, that is similar to sanctions and export licensing regimes. It also implicates federal cybersecurity requirements, government contracting and CFIUS actions.

7 minute read December 01, 2024 at 12:15 AM
By
Craig Heeren  , Mollie Sitkowski and Angela Lam
DOJ Issues New Rule Regulating Handling of Bulk Sensitive Personal Data

By Craig R. Heeren, Mollie D. Sitkowski and Angela Lam

The Department of Justice (DOJ) has proposed a rule that would regulate certain transactions involving bulk sensitive personal data. Public comments are due in 30 days from the notice date.

This premium content is locked for Cybersecurity Law & Strategy subscribers only

ENJOY UNLIMITED ACCESS TO THE SINGLE SOURCE OF OBJECTIVE LEGAL ANALYSIS, PRACTICAL INSIGHTS, AND NEWS IN Cybersecurity Law & Strategy

  • Stay current on the latest information, rulings, regulations, and trends
  • Includes practical, must-have information on copyrights, royalties, AI, and more
  • Tap into expert guidance from top entertainment lawyers and experts
Subscribe Now

Already have an account? Sign In Now

For enterprise-wide or corporate access, please contact Customer Service at [email protected] or call 1-877-256-2473.

NOT FOR REPRINT

© 2026 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.

Continue Reading

Is Your Law Firm’s AI Ready for Answer Engines and Clients?

AI claims are getting more scrutiny and regulators are looking more closely at whether organizations can substantiate what they say their AI does, while courts are beginning to address what happens when AI-generated search summaries get information wrong.

November 01, 2026

When AI Agents Trigger a Crisis, Part 2: Before the Agent Acts

This is the second in a two-part series on AI-driven crises. Part 1 examined communications during an incident while the facts are still developing. Part 2 addresses crisis plans, governance and tabletop exercises before an agent acts on behalf of the business.

November 01, 2026
Centellic Logo

© Copyright 2026 ALM Global, LLC trading as Centellic.

Advertise with Us Customer Support Terms of Service