Biden executive order on sensitive personal information does little for now to curb data market – but spotlights the threat the market poses

White House press secretary Karine Jean-Pierre took questions on the day the Biden administration announced an executive order that puts personal data privacy in a national security context. AP Photo/Andrew Harnik by Anne Toomey McKenna, University of Richmond The Biden administration has identified “countries of concern” exploiting Americans’ sensitive personal data as a national emergency. To address the crisis, the White House issued an executive order on Feb. 28, 2024, aimed at preventing these countries from accessing Americans’ bulk sensitive personal data. The order doesn’t specify the countries, but news reports cited unnamed senior administration officials identifying them as China, Russia, North Korea, Iran, Cuba and Venezuela. The executive order adopts a simple, broad definition of sensitive data that should be protected, but the order is limited in the protections it affords. The order’s larger significance lies in its stated rationale for why the U.S. needs such an order to protect people’s sensitive data in the first place. The national emergency is the direct result of the staggering quantities of sensitive personal data up for sale – to anyone – in the vast international commercial data market, which is comprised of companies that collect, analyze and sell personal data. Data...