Data Security Program Cheat Sheet
This resource provides an overview of the U.S. Data Security Program, which establishes controls to prevent foreign adversaries from accessing sensitive U.S. data.
Published: 3 July 2025
The U.S. Department of Justice's final rule on protecting Americans' sensitive data took effect on 8 April 2025. The Data Security Program was adopted pursuant to Executive Order 14117 and is implemented by the DOJ's National Security Division. The DSP establishes controls to prevent foreign adversaries, and those subject to their control and direction, from accessing bulk U.S. sensitive personal data and U.S. government-related data.
This cheat sheet provides an overview of the DSP. The IAPP additionally published this article on preparing for the DSP.
This content is eligible for Continuing Professional Education credits. Please self-submit according to CPE policy guidelines.
Contributors:
Cheryl Saniuk-Heinig
Former research and insights analyst, IAPP
CIPP/E, CIPP/US
Jim Dempsey
Lecturer, UC Berkeley Law; Managing Director, Cybersecurity Law Center, IAPP
Tags:
Data Security Program Cheat Sheet
This resource provides an overview of the U.S. Data Security Program, which establishes controls to prevent foreign adversaries from accessing sensitive U.S. data.
Published: 3 July 2025
Contributors:
Cheryl Saniuk-Heinig
Former research and insights analyst, IAPP
CIPP/E, CIPP/US
Jim Dempsey
Lecturer, UC Berkeley Law; Managing Director, Cybersecurity Law Center, IAPP
The U.S. Department of Justice's final rule on protecting Americans' sensitive data took effect on 8 April 2025. The Data Security Program was adopted pursuant to Executive Order 14117 and is implemented by the DOJ's National Security Division. The DSP establishes controls to prevent foreign adversaries, and those subject to their control and direction, from accessing bulk U.S. sensitive personal data and U.S. government-related data.
This cheat sheet provides an overview of the DSP. The IAPP additionally published this article on preparing for the DSP.
This content is eligible for Continuing Professional Education credits. Please self-submit according to CPE policy guidelines.
Tags:
Related resources
US State Privacy Legislation Tracker
Organizational Digital Governance Report 2025
US State Comprehensive Privacy Laws Report
US Data Privacy Litigation
