DOJ/CISA finalize new rules regarding data transfers to countries of concern

On December 27, 2024, the U.S. Department of Justice (DOJ) announced its final rule on the transfer of certain bulk sensitive personal data to China, Russia, and other countries. Following this, on January 3, 2025, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) released the final security requirements for these restricted transfers. These measures aim to protect U.S. security interests and prevent unauthorized access to U.S. data....
By: A&O Shearman

Array