StacksVerified U.S. regulatory reference

28 CFR §202.209

Verified against eCFR.gov as of June 20, 2026View official text on eCFR.gov ↗
The term country of concern means any foreign government that, as determined by the Attorney General with the concurrence of the Secretary of State and the Secretary of Commerce:
  1. (a)Has engaged in a long-term pattern or serious instances of conduct significantly adverse to the national security of the United States or security and safety of United States persons; and
  2. (b)Poses a significant risk of exploiting government-related data or bulk U.S. sensitive personal data to the detriment of the national security of the United States or security and safety of U.S. persons.