New Federal Laws Restricting Data Transfers to Foreign Adversaries: Scope, Enforcement, Penalties, Implications

Course Details
- smart_display Format
On-Demand
- signal_cellular_alt Difficulty Level
Intermediate
- work Practice Area
Cybersecurity and Data Privacy
- event Date
Wednesday, August 7, 2024
- schedule Time
1:00 p.m. ET./10:00 a.m. PT
- timer Program Length
90 minutes
-
This 90-minute webinar is eligible in most states for 1.5 CLE credits.
This CLE webinar will provide an overview of recent legislation and an Executive Order (EO) restricting the sale or release of sensitive data to foreign adversaries. The panelist will discuss the scope, applicability, and practical implications of these new laws and will provide guidance on actions companies need to take now to ensure compliance.
Faculty

Mr. Peloquin advises clients on a wide range of legal and regulatory issues in the area of clinical research and related activities. He counsels academic medical centers, life sciences companies, information technology companies and other clients that sponsor, support and conduct research. With a broad client base and knowledge of a range of laws and regulations, from the Common Rule and FDA regulations, to HIPAA and GDPR, to state and federal fraud and abuse laws—Mr. Peloquin offers clients clear, practical advice on how the complex legal landscape intersects with an array of research activities. In addition to his advisory work, Mr. Peloquin collaborates with the private equity group to conduct regulatory diligence of clinical research investments and works with the firm’s litigation practice on government and civil investigations involving clinical research. He speaks and writes frequently on issues in healthcare law and data privacy.
Description
The federal government has made significant strides in its effort to protect Americans' sensitive data from foreign adversaries. In late February, President Biden issued an EO directing federal agencies to deploy regulations governing bulk sensitive data transfers to certain countries. The EO was followed by an Advanced Notice of Proposed Rulemaking by the Department of Justice detailing proposed regulations that either prohibit or restrict certain bulk sensitive data transfers to countries of concern because such transfers pose a risk to national security.
On Apr. 24, 2024, President Biden signed into law two pieces of legislation that also target data use practices with important implications for a large number of industries.
The Protecting Americans' Data From Foreign Adversaries Act of 2024 (PADFA) generally prohibits "data brokers" from selling, licensing, renting, trading, transferring, releasing, disclosing, providing access to, or otherwise making available personally identifiable "sensitive data" of U.S. residents to a foreign adversary country or an entity controlled by them. PAFDA is effective June 23, 2024, and includes steep civil penalties for violations.
The Protecting Americans From Foreign Adversary Controlled Applications Act (PAFACA), which originally targeted TikTok, makes it unlawful for an entity to distribute, maintain, or update (or enable the distribution, maintenance, or updating of) a website, desktop application, mobile application, or augmented or immersive technology application that is operated, directly or indirectly (including through a parent company, subsidiary, or affiliate), by a foreign adversary. PAFACA also imposes significant civil penalties for violations based on the number of users within the U.S.
Listen as David Peloquin. Partner at Ropes & Gray, reviews these changes in the federal government's approach to privacy and data security. The panel will also provide guidance for assessing the applicability of these new rules to a client's business and how to navigate compliance under this new data transfer framework.
Outline
- Overview: current federal landscape regarding data use practices
- EO on Preventing Access To Americans' Bulk Sensitive Personal Data and U.S. Government-Related Data by Countries of Concern
- Protecting Americans' Data From Foreign Adversaries Act of 2024
- Protecting Americans From Foreign Adversary Controlled Applications Act
- Key definitions and provisions of new laws
- Scope and applicability
- Penalties for violations
- Implementation of new laws
- Harmonizing the new laws with current state laws regulating data brokers
- Implications for businesses
- Actions businesses need to take now to ensure compliance
Benefits
The panelist will discuss these and other key issues:
- What are the key definitions and provisions of the new legislation and EO prohibiting certain data transfers to foreign adversaries?
- What are the practical implications of these new laws for businesses?
- How will these new laws be enforced and what are the penalties for violations?
- When do these new laws become effective and what actions do businesses need to take now to ensure compliance?
Unlimited access to premium CLE courses:
- Annual access
- Available live and on-demand
- Best for attorneys and legal professionals
Unlimited access to premium CPE courses.:
- Annual access
- Available live and on-demand
- Best for CPAs and tax professionals
Unlimited access to premium CLE, CPE, Professional Skills and Practice-Ready courses.:
- Annual access
- Available live and on-demand
- Best for legal, accounting, and tax professionals
Related Courses

Legal Ethics, Cybersecurity, and Data Privacy: Navigating Risks, Protecting Client Data, Maintaining Compliance
Tuesday, May 13, 2025
1:00 p.m. ET./10:00 a.m. PT

AdTech and Data Privacy Risks: Law, Policy, Litigation and Enforcement
Thursday, May 1, 2025
1:00 PM E.T.
Recommended Resources
Explore the Advantages of Consistent Legal Language
- Learning & Development
- Business & Professional Skills
- Talent Development
The Power of Project Management: Using the 80/20 Rule in E-Discovery
- Legal Technology
- E-Discovery