Covered Data Transaction – DOJ

Any  data transaction that involves any access by a country of concern or covered person to any government-related data or bulk U.S. sensitive personal data and that involves:

1. Data brokerage;
2. A vendor agreement;
3. An employment agreement; or
4. An investment agreement.

See Covered Data Transaction (28 CFR § 202.210) for examples.

Resources

• See DOJ definitions of Covered Data Transaction (28 CFR § 202.210) for examples
• Covered Person
• Countries of Concern
• Bulk U.S. Sensitive Personal Data
• U.S. Government-related Data
• Exempt Data Transactions
• Restricted Data Transactions
• DOJ: Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons
• Sept. 2025 National Security Division (NSD) Data Security Program FAQs