President Joe Biden signed an executive order on Wednesday aimed at enhancing the protection of Americans' personal data from foreign adversaries such as China and Russia. The order targets various aspects of personal data, including biometrics, health records, finances, and geolocation information.
The directive tasks the attorney general and federal agencies with preventing the large-scale transfer of Americans' personal data to countries deemed as 'countries of concern.' It also aims to establish safeguards around activities that could potentially grant these countries access to sensitive data.
The administration emphasized that the goal is to enhance data protection without impeding legitimate commerce related to data. The order specifically focuses on commercial data brokers, which are entities that collect and categorize personal information for various purposes.
While activities like computer hacking are already prohibited in the U.S., the purchase of potentially sensitive data through brokers remains legal. The administration highlighted the risks associated with this practice, including intrusive surveillance, scams, and violations of privacy.
The executive order directs the Department of Justice to issue regulations that safeguard Americans' sensitive personal data and sensitive government-related data. It also calls for collaboration between the Justice Department and Homeland Security to establish safety standards against foreign adversaries collecting data.
The order identifies countries of concern such as China, Russia, North Korea, Iran, Cuba, and Venezuela. Notably, China and Chinese-owned companies like TikTok have been a focal point of concern for U.S. officials.
This executive action aligns with Biden's previous order on artificial intelligence, which aimed to balance technological advancements with national security and consumer protection. The administration stressed that the order complements potential legislative actions to establish federal privacy protections.
Overall, the executive order underscores the administration's commitment to safeguarding Americans' personal data from foreign threats while promoting responsible data practices in the digital age.