The Department of Justice (DOJ) has proposed new regulations to implement Executive Order 14117, aimed at preventing foreign access to sensitive U.S. personal data. The proposed rules would restrict U.S. entities from engaging in transactions that allow access to sensitive data by individuals or companies from designated “countries of concern,” particularly China and Russia. This applies to data brokerage and various agreements involving vendors, employment, and investments. Companies must conduct due diligence and implement robust compliance measures. The regulations also set broad definitions for sensitive data and outline penalties for violations, including civil and criminal fines.