Author: Kaylee

NIST SP 800-171 Compliance for Controlled-Access Data Security

Background NIH policy states that new and renewal data use requests to access controlled-access data stored in any of the NIH controlled access data repositories (CADRs) must protect data in an environment compliant with NIST SP 800-171 “Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations.” NIST SP 800-171 provides 110 security controls organized […]

Department of Justice (DOJ) Final Rule Relating to U.S. Sensitive Personal Data and Government-Related Data

The U.S. Department of Justice issued a Final Rule, effective April 8, 2025, implementing Executive Order 14117, Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern.  The DOJ Final Rule restricts, and in some cases prohibits, the transfer of large quantities of Americans’ sensitive personal and government-related […]