by Avi Gesser and Joseph Kniaz
We have recently written on whether protecting personal data should be regulated using a property model instead of a privacy model (and concluded, probably not). Another framework for regulating personal data that is getting increased attention is a national security model, which looks at securing personal data as a means of protecting the country from unfriendly government actors or agents who might use that data to harm the national interest.
At the “Washington Comes to Silicon Valley” conference on October 22, John Demers, the Assistant Attorney General of the DOJ’s National Security Division, said that the U.S. government is concerned about national security risks posed by foreign companies acquiring personal data of U.S. citizens through corporate acquisitions. One concern with such acquisitions is that if sensitive personal data of American officials falls into the hands of foreign governments, that information could be used to extort or blackmail individuals with access to classified information. Continue reading