Careers

Diversity

With 18 offices, from New York to Los Angeles and Seattle to Orlando, we live and work in communities all over the U.S., collaborating across locations, disciplines and even borders. Our experienced, highly ranked lawyers serve businesses wherever they are and wherever they want to go.

Offices

About Us

Pages

Professionals

Thought leadership: blogs, podcasts, videos, publications, events and news

Insights

Services

Pro Bono

Am Law 100 firm with practices in Business, Digital Assets and Data Management, Intellectual Property, Labor & Employment, Litigation and Tax.

Home | BakerHostetler

From Regulation to Compliance – Decoding the DOJ’s Data Security Program

Ohio Clock

Hallway with a grandfather clock displayed

The Weekly Hill Update

Jonathan Forster Discusses Asset Volatility During Highland Capital Brokerage Webinar

Blockchain Monitor

Blockchain Monitor - Planet earth in outer space with network connection and sunlight.

Weekly Blockchain Blog – June 23, 2025

<em>Are you ready for U.S. personal data export enforcement?</em>

contentpilot/introduction

In early 2025, the U.S. Department of Justice finalized its new Data Security Program Rule. This novel U.S. data export rule took effect on April 8, and its implications are likely broader than organizations may anticipate. Enforcement of the Rule commences in July.<br><br>This Rule was issued under Executive Order 14117, formally titled “Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons,” and accompanied by security requirements for restricted data transactions published by the U.S. Cybersecurity and Infrastructure Security Agency. &nbsp;

core/paragraph

At a high level, the Rule either prohibits or restricts the transfer, access, or storage of specified categories of bulk sensitive personal data, including anonymized sensitive personal data, to or by certain countries of concern or individuals associated with those countries. This webinar will address the practical aspects of the Rule and potential implications.  In particular, we will focus on: 

core/list-item

Evaluating personal data uses to determine compliance obligations

Essential compliance elements and considerations

Vendor oversight and customer due diligence under the Rule

Implementing appropriate security measures to safeguard restricted data transactions

core/list

1.0 CLE credit hour approved for CA, NY, PA, and TX. Approval pending for CO, DE, IL, GA, FL, OH, NJ, and WA. Other states may be available upon request.

Related Services

Featured Insights