Rick Sofield – Debevoise Data Blog

Announcement

Debevoise Data Blog: Top 5 Privacy Posts of 2025

By: Charu A. Chandrasekhar, Luke Dembosky, Avi Gesser, Erez Liebermann, Robert Maddox, Julie M. Riewe, Kristin Snyder, Rick Sofield, Sheena Paul, Johanna Skrzypczyk, HJ Brehmer, Martha Hirst, Suchita Mandavilli Brundage, Melyssa Eigen, Ned Terrace, Michelle Shen, Diane Bernabei and Mengyi Xu December 11, 2025

As we approach the end of the year, here are the top 5 privacy posts on the Debevoise Data Blog in 2025. Takeaways for Large Firms from the SEC’s Reg…

Cybersecurity

Maturing Compliance with the Bulk Sensitive Data Rule (Data Security Program) before the July 8, 2025 Safe Harbor Expires

By: Luke Dembosky, Avi Gesser, Erez Liebermann, Rick Sofield, Johanna Skrzypczyk and Mengyi Xu May 28, 2025

All eyes are on the DOJ Bulk Sensitive Data Rule (28 C.F.R. Part 202), and July 8, 2025, when the recently announced good-faith safe harbor expires. The rule, which the…

Data Transfers

National Security Update: DOJ Unveils Rules Restricting Sensitive Bulk Data Transfers

By: Carter Burwell, Luke Dembosky, Rick Sofield, Robert Dura, Johanna Skrzypczyk and Emily Kennedy January 16, 2025

DOJ Issues Landmark Rules on Sensitive Data On December 27, 2024, the U.S. Department of Justice (“DOJ”) issued the “Final Rule on Preventing Access to Sensitive Data,” creating a comprehensive…

Data Transfers

Biden Administration Proposes to Limit Access to Sensitive Personal Data by Countries of Concern

By: Satish Kini, Rick Sofield, Erez Liebermann, Robert Dura, Taylor Richards, Stephanie Thomas, Jordan Corrente Beck and Yair Strachman November 6, 2024

The Department of Justice (“DOJ”) has moved ahead with its effort to protect Americans’ sensitive personal data and U.S. government data from exploitation by countries of concern or related covered…

Data Transfers

Biden Administration Acts to Limit Access to Sensitive Personal Data by Countries of Concern

By: Satish Kini, Erez Liebermann, Rick Sofield, Robert Dura, Taylor Richards and Stephanie Thomas March 5, 2024

On February 28, 2024, President Biden issued an Executive Order (the “Order”) designed to protect the “sensitive personal data” of Americans from “exploitation” by “countries of concern” or related “covered…