28 CFR § 202.601 Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons

§ 202.601 Determination of countries of concern.

Current through Sep 21, 2026 · Read all of Part 202

(a) Countries of concern. Solely for purposes of the Order and this part, the Attorney General has determined, with the concurrence of the Secretaries of State and Commerce, that the following foreign governments have engaged in a long-term pattern or serious instances of conduct significantly adverse to the national security of the United States or security and safety of U.S. persons and pose a significant risk of exploiting government-related data or bulk U.S. sensitive personal data to the detriment of the national security of the United States or security and safety of U.S. persons:

(1) China;

(2) Cuba;

(3) Iran;

(4) North Korea;

(5) Russia; and

(6) Venezuela.

(b) Effective date of amendments. Any amendment to the list of countries of concern will apply to any covered data transaction that is initiated, pending, or completed on or after the effective date of the amendment.

← § 202.511 Other clinical investigations and post-marketing surveillance data.§ 202.701 Designation of covered persons. →