Legislation introduced in late June in the Senate would prohibit sale of personal data about Americans to countries deemed to be "high risk." As with other trade prohibitions and regulations, the bill would allow the Commerce officials of the US to identify data that could be sensitive for national security reasons, and regulate trade in that data among countries. Currency and goods are already regulated this way, with restrictions on certain countries that either limit trade or prohibit it entirely depending on the nature of the government in that country. There are already regulated trade limits relating to cybersecurity of the US and its assets.
Why It Matters
The government sees the proliferation of surveillance type data about Americans as a potential national security risk because it creates potential opportunities for criminal and espionage activity. From a commercial standpoint, this kind of regulation is likely to involve additional red tape for businesses engaged in certain cloud storage, offshore data processing, and data resale activities. It is likely that many businesses would be entirely unaffected by such rules. However, it is a sign that data about citizens is increasingly seen as a threat vector and something that requires attention and caution.