Protecting Americans' Data: New Export Controls on Sensitive Personal Information.
This Act establishes new export controls on sensitive personal data belonging to US citizens and residents to prevent exploitation by foreign governments and adversaries. Companies must obtain a license for bulk transfers (above a set threshold, e.g., 10,000 individuals) of specific data categories (like health or financial records) to designated restricted countries. The goal is to enhance national security and privacy by limiting foreign access to aggregated US personal information.
Key points
Imposes export controls on bulk transfers of sensitive personal data (starting at 10,000 individuals) to countries deemed a national security risk.
The Secretary of Commerce must identify specific categories of sensitive data (e.g., health, finance, education) that require protection and establish a list of restricted countries.
Data transfers necessary for providing a service or data protected by certified, strong encryption are generally exempt from licensing requirements.
The law explicitly protects public record information, news media activities, and information covered by the First Amendment.
Expired
Citizen Poll