Research Security & DOJ Bulk Sensitive Data Rule
UC Merced Office of Research Compliance & Integrity
Overview
UC Merced research activities may involve the collection, transfer, or analysis of sensitive personal data. Federal regulations under Executive Order 14117 restrict certain transactions involving bulk sensitive data and designated foreign entities or countries of concern.
These requirements are intended to protect national security while supporting legitimate academic research and collaboration.
Key Federal Requirements
The rule restricts certain “covered data transactions” involving bulk sensitive personal data such as:
- Genomic and biometric data
- Health and financial data
- Precise geolocation data
- Personal identifiers at scale
These restrictions apply when data is accessed by designated countries of concern or restricted entities.
All UC Merced researchers, staff, students, and collaborators involved in federally funded or export-controlled research must comply with these requirements when handling covered data.
Prohibited:
- Transfer of bulk sensitive data to countries of concern
- Data access by restricted foreign entities
Restricted (requires review):
- Cloud storage involving foreign infrastructure
- International collaborations involving sensitive datasets
- Disclose all foreign collaborations and data sharing plans
- Consult Export Control before sharing regulated datasets
- Complete required research security training
- Review sponsor-specific compliance requirements
Contact
Office of Research Compliance & Integrity (RCI)
UC Merced
Email: rci@ucmerced.edu
