Amid urgent national security, cybersecurity and data privacy threats, companies require experienced counsel to advise on an ever-changing privacy and cybersecurity compliance landscape and respond to potentially crippling data incidents so they can get back to business. Led by some of the world’s leading legal advisors on national security and data-related regulatory matters, we help boards and top executives safely navigate high-impact breaches and related cyber incidents, and offer specialized regulatory advice in the transactional and compliance contexts.
Caution Is Key Under New U.S. Data Security Program, John Carlin Tells Lexology Pro
May 5, 2025
National Security Practice Group Chair John Carlin spoke with Lexology Pro about what the U.S. Department of Justice’s new data security rule means for corporations. The rule, which took effect on April 8, restricts certain foreign entities’ access to Americans’ sensitive personal data and government-related data. In “Seller beware: navigating third-party corporate ownership under new US data restrictions,” published on May 5, John says that the practical guidance for companies under this new regime calls for continued diligence. “You need to figure out, ‘Hey if I’m doing business with a party, how much risk do I have in this transaction?’” he says.
John adds that when working with new business partners, companies should take care to do basic diligence to determine either internally or through a sanctions compliance vendor on the business counterparty’s ownership structure and what laws that business is subject to.
» read the article