CISA finalizes security requirements for restricted transactions under Justice Dept. sensitive U.S. bulk data rulemaking

The Cybersecurity and Infrastructure Security Agency has published final security requirements for restricted transactions that will be used by the Justice Department as part of a rulemaking to limit the sharing of sensitive personal data of Americans with foreign countries that pose national security risk.

The security requirements were developed in response to a February executive order directing DOJ to set up a process for placing restrictions on the selling of sensitive U.S. bulk data. DOJ released final...