Full Breakdown
Congressional Democrats Warn New Data Protection Rules Omit Key Federal Sites
5/22/2026, 11:26:46 PM
Regulation Gaps Leave Key Federal Sites Unprotected
In April 2025 the Biden administration’s regulations barred the sale of location data from over 1,000 U.S. devices to six foreign adversaries and prohibited data from 736 GPS-identified sites, but omitted the White House, Capitol and CIA headquarters.
Background and Lawmakers Involved
The rules followed a year-long effort to curb data-broker sales that governments use for intelligence. Senators Ron Wyden, Martin Heinrich and Rep. Sara Jacobs authored a letter warning of national-security risks. Data brokers typically sell this information to advertisers, but governments have increasingly turned it into an intelligence resource.
Scope, Data Limits and Identified Gaps
The regulations ban location-data sales to China, Russia, Iran, North Korea, Cuba and Venezuela and forbid any sale tied to the 736 GPS-coded sites. Wyden’s staff, with CRS assistance, confirmed the White House, Capitol and CIA were excluded.
National Security Implications
Location data can map movements of U.S. personnel, enabling foreign spy agencies to target sensitive facilities. Omitting key sites therefore creates a potential espionage pathway that undermines the rules’ security purpose. Foreign spy agencies could use the data to track the movements of officials and plan operations against U.S. interests.
Official Statements and Agency Responses
The lawmakers’ letter warned that data sales “pose a serious threat to U.S. national security” and can be “exploited for espionage.” The Justice Department declined comment; the DNI office did not respond.
Congressional Criticism of the Rules
Wyden, Heinrich and Jacobs argue that protecting individual buildings is insufficient. They call for a “protection zone” covering the entire Washington, D.C., region and for an expanded list of countries of concern.
Conflicting Reports and Unresolved Issues
The rule relies on GPS coordinates, requiring external analysis to identify covered facilities. Wyden’s staff found omissions, yet the administration has not publicly indicated whether it will amend the list to incorporate the missing locations.
Verbatim Quotes
"The sale of Americans' location data by data brokers poses a serious threat to U.S. national security, particularly when data about U.S. government employees is sold to foreign governments." — Sen. Ron Wyden, Oregon
"Such data can reveal sensitive information that can be exploited for espionage purposes." — Sen. Martin Heinrich, New Mexico
"We urge the Department to expand the list of countries of concern that are barred from acquiring data on Americans." — Rep. Sara Jacobs, California
"We call for a protection zone that encompasses the entire Washington, D.C., region rather than choosing individual buildings." — Sen. Ron Wyden, Oregon
What’s Next
The three lawmakers will press the Justice Department and the DNI for a revised list that includes the omitted sites, a broader protection zone, and any additional adversaries that could exploit location data. They also request that any future adversary beyond the current six be barred from acquiring such data.
