DOJ Cracks Down on Data Breaches and Corporate Misconduct

Welcome back to the DOJ Weekly Brief, your source for the latest developments from the Department of Justice that shape our country, our businesses, and our everyday lives. I’m glad you’re here. This week’s biggest headline is the DOJ’s enforcement of its new Data Security Program. As of July 9, the Justice Department began actively enforcing rules to prevent sensitive U.S. data from ending up in the hands of foreign adversaries. This follows a 90-day grace period allowing companies to adapt. Now, full compliance is not optional—companies face strict oversight and the standard for finding a violation is high. DOJ officials stress that ignorance or delay in compliance won’t be tolerated, and Assistant Attorney General Matthew Olsen recently underscored, “Expect the National Security Division to pursue appropriate enforcement with respect to any violations.” This program has the staying power of a bipartisan initiative, having survived the handover between administrations, and it directly aligns with President Trump’s “America First” agenda, tightening national security controls across the board. In parallel, the DOJ released significant new policies for prosecuting white-collar crime. Emphasizing fairness and efficiency, the Department updated its approach to corporate enforcement. The new policies encourage voluntary self-disclosure: companies that quickly come forward before DOJ independently learns of their misconduct could avoid prosecution altogether or see reductions in criminal fines of up to 75 percent. DOJ Criminal Division Chief Matthew Galeotti put it simply: “The key here is self-disclosure.” There’s also a renewed focus on healthcare fraud, trade fraud, and money laundering connected to transnational crime—areas of high impact for both the public and private sectors. For American citizens, these moves mean stronger safeguards for your personal data and potentially more effective deterrents against white-collar misconduct that can undermine savings, jobs, and public trust. Businesses, especially those dealing with sensitive data or in heavily regulated sectors, need to quickly adapt compliance programs and consider how self-disclosure options might limit risk. State and local governments may see increased federal oversight, especially where local enforcement is perceived as lacking—an approach consistent with broader DOJ strategy shifts detailed in Project 2025, including a possible uptick in federal presence in local jurisdictions with crime challenges. On the public engagement front, the DOJ has made compliance guides and FAQs for the new Data Security Program publicly available. If you’re a business owner or IT leader, these tools are essential reading to avoid costly violations. For concerned citizens, watch for upcoming public webinars hosted by the DOJ to answer questions on both the Data Security Program and evolving enforcement policies. Looking ahead, expect continued enforcement in the data security arena and close atten This content was created in partnership and with the help of Artificial Intelligence AI.