In a bid to curb the weaponization of Americans’ data, the U.S. federal government has implemented regulations aimed at restricting the bulk commercial transfer of data to China and Russia. The data in question includes information on Americans’ locations, health data, and biometric or genomic identifiers. The finalized rule, which was announced on Friday, will effectively limit the transfer of sensitive data to these countries.
The new rule, which will take effect within 90 days of its publication in the Federal Register, includes reporting requirements that will be enforced 270 days later. This regulatory effort was initiated following an executive order issued by President Joe Biden in February, targeting bulk data transfers to China. The rule is a response to concerns raised by various administrations regarding China’s efforts to obtain vast amounts of data on Americans through a range of methods, including hacking and commercial transactions.
According to Assistant Attorney General Matthew Olsen, the rule is designed to prevent Americans’ personal data from being sold to hostile foreign powers, whether through direct purchase or commercial access. The restrictions outlined in the rule include a prohibition on the transfer of genetic data beyond certain thresholds, as well as limitations on the bulk transfer of human biospecimens. Data transferred for vendor agreements, employment, or investment purposes will also be subject to cybersecurity standards developed by the Cybersecurity and Infrastructure Security Agency.
Furthermore, the rule imposes restrictions on the transfer of geolocation data linked to national security or military installations, as well as sensitive personal data associated with government employees or contractors. The goal of these restrictions is to prevent countries like China from compiling dossiers on individuals and using them for malicious purposes, such as cyberattacks or espionage.
The concerns about the weaponization of data have been exacerbated by advancements in machine learning and artificial intelligence. The National Counterintelligence Strategy highlighted adversaries’ increased focus on data and the importance of protecting Americans’ personally identifiable information. A recent annual report by the U.S.-China Economic and Security Review Commission also warned about China’s efforts to increase the availability of quality data within its AI ecosystem.
In conclusion, the new rule represents a significant step towards safeguarding Americans’ personal data and preventing its misuse by foreign entities. By placing restrictions on the bulk transfer of sensitive information to countries like China and Russia, the U.S. government is taking proactive measures to protect national security and prevent potential threats stemming from the weaponization of data.