DOJ's New Data Rule and White-Collar Enforcement Overhaul: Impacts for Businesses and Individuals

The Department of Justice has captured headlines this week with the full implementation of its groundbreaking “Preventing Access to U.S. Sensitive Personal Data and Government Related Data by Countries of Concern” Rule, taking effect today, October 6, 2025. Stemming from national security concerns and a 2024 executive order, this rule restricts certain international transactions involving Americans’ bulk sensitive personal data. The DOJ has made clear in guidance and compliance materials that even businesses operating solely within the United States may fall under its scope, which has sparked a nationwide compliance push. Organizations dealing with data—large and small, domestic or international—have been undergoing reviews to understand what changes are needed. For context, enforcement materials and a grace period for compliance were clarified earlier this year, but now, full enforcement is underway. Alongside this, the DOJ announced in May a robust overhaul of white-collar enforcement policies—the first major statement from the Trump administration on this front. According to Matthew Galeotti, head of the DOJ’s Criminal Division, the department remains committed to rooting out white-collar crime but aims to strike a “balance” that avoids placing unnecessary burdens on businesses. The new approach emphasizes three main pillars: focus, fairness, and efficiency. Galeotti stated, “Overbroad and unchecked corporate enforcement burdens U.S. businesses and harms U.S. interests.” The new guidance urges prosecutors to focus on only the most egregious crimes—those threatening national security, the U.S. economy, or the investing public. There’s also a renewed emphasis on alternatives to prosecution, like leniency for corporations that cooperate and self-disclose wrongdoing. Updates to the Corporate Enforcement and Voluntary Self-Disclosure Policy now offer transparent incentives for companies that reveal misconduct, with a published flowchart to clarify potential outcomes. The pilot program for corporate whistleblower awards has also been expanded to attract tips on procurement, customs, and trade fraud, as well as sanctions violations and support for foreign terrorist organizations. For businesses, this means enhanced incentives for robust compliance, but also real risks for ignoring problem areas. For American citizens, these policy moves mean stronger safeguards around personal data and a sharper focus on deterring business misconduct that can impact markets and daily lives. Businesses face a compliance landscape demanding more transparency and quicker response to violations. State and local governments may see increased partnership opportunities to enhance data security and law enforcement effectiveness as DOJ aligns with their efforts. Internationally, this data rule presses U.S. allies and trade partners to adopt parallel protections and signals the administration’s willingness to leverage regulatory tools for national security aims. Looking ah This content was created in partnership and with the help of Artificial Intelligence AI.