Privacy AI
Regulatory

Health data compliance, handled.

Tell us what you need. We'll tell you what it takes and how long, before you commit.

Contact us

Summary

Contact us

Biden's New Approach to US Personal Data Transfers

The Biden Administration issued an executive order authorizing the Department of Justice (DOJ) and other federal agencies to take steps to prevent “the large-scale transfer of Americans’ personal data to countries of concern.” It represents an effort by the administration to put more safeguards on the data broker industry and limit the ability of US adversaries to purchase granular data on American citizens.

The Biden Administration has enacted an executive order empowering the Department of Justice (DOJ) and additional federal bodies to act against the significant movement of personal data of Americans to nations deemed as threats. This move aims to bolster the protections around the data brokerage industry and curb the potential for adversaries of the U.S. to acquire detailed information about American individuals.

Furthermore, the order mandates the following actions:

  • It directs the Committee for the Assessment of Foreign Participation in the United States Telecommunications Services Sector (Committee) to continually manage the national security and law enforcement dangers posed by the access of 'countries of concern' to extensive sensitive personal data as outlined in this directive. This applies to any new or existing application or license the Committee reviews concerning submarine cable systems' landing or operation.
  • It calls upon the Secretary of Defense, the Secretary of Health and Human Services, the Secretary of Veterans Affairs, and the Director of the National Science Foundation to explore actions, including the enactment of regulations, guidance, or directives. These actions aim to block assistance that grants 'countries of concern' or specified entities access to the bulk sensitive personal data of U.S. citizens, particularly data related to personal health and human genomic information.
  • It instructs the Director of the Consumer Financial Protection Bureau (CFPB) to assess steps, in line with the CFPB's legal powers, to counter this threat dimension and to strengthen adherence to Federal consumer protection laws.
  • It requires the Attorney General, the Secretary of Homeland Security, and the Director of National Intelligence, in collaboration with leaders of pertinent agencies, to "recommend measures to identify, evaluate, and counteract national security threats stemming from past transfers of bulk sensitive personal data of U.S. individuals to countries of concern.

Read more

Contact us

FAQs

Our frequently questions

No items found.

Seamus Larroque

CDPO / CPIM / ISO 27005 Certified

Find out how iliomad can help your company.

[Map placeholder]
Only visible in production
38.709099
-39.182035
1.6
6d17042a3425c5b3
Your message has been received!
We'll get back to you as soon as possible.
Something went wrong, please try again.
Home

Discover our latest articles

View All Blog Posts
Illustration of the CNIL MR-001 framework applied to a clinical trial data compliance workflow in France, showing patient data flow and security controls
September 7, 2026
GDPR
Regulation
Guideline
Regulations & Guidelines

MR-001 CNIL: what clinical trial sponsors must know about French health data compliance

Understand MR-001 CNIL obligations for clinical trial sponsors in France, from Article 32 security requirements to breach notification and cross-border data transfers.

A clinical trial coordinator reviewing an informed consent form alongside a data governance checklist, representing ICF boilerplate review and open-access database disclosure compliance
September 4, 2026
Guideline
EU Privacy Law
Regulations & Guidelines
Clinical Trials
United-Kingdom

ICF Boilerplate and Open-Access Database Disclosures: What Clinical Trial Sponsors Must Know

Learn how US site ICF boilerplate on commercial products and open-access genetic databases affects sponsor data governance, Common Rule compliance and GDPR obligations.

Abstract digital network graphic representing data protection, clinical trial compliance and cybersecurity themes for the iliomad weekly digest
September 3, 2026
Regulations & Guidelines
GDPR
Data Breach & Cybersecurity
LLMS

iliomad Weekly Digest: DPO Conflicts, Bulk Data Rules, Healthcare Cyber Incidents and AI Transparency

This week: CNIL on DPO conflicts of interest, DOJ bulk data rule for life sciences, wave of healthcare ransomware attacks, Uber's €825m GDPR fine and AI disclosure demands.