eCFR :: 28 CFR Part 202 -- Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered

eCFR :: 28 CFR Part 202 -- Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons
Site Feedback
You are using an unsupported browser
You are using an unsupported browser. This web site is designed for the current versions of
Microsoft Edge, Google Chrome, Mozilla Firefox, or Safari.
Site Feedback
The Office of the Federal Register publishes documents on behalf of Federal agencies but does not have any authority over their programs. We recommend you directly contact the agency associated with the content in question.
If you have comments or suggestions on how to improve the www.ecfr.gov website or have questions about using www.ecfr.gov, please choose the 'Website Feedback' button below.
Website Feedback
If you would like to comment on the current content, please use the 'Content Feedback' button below for instructions on contacting the issuing agency
Content Feedback
If you have questions for the Agency that issued the current document please contact the agency directly.
Website Feedback
Browse
Titles
Agencies
Incorporation by Reference
Recent Updates
Recent Changes
Corrections
Reader Aids
Reader Aids Home
Using the eCFR Point-in-Time System
Understanding the eCFR
Government Policy and OFR Procedures
Developer Resources
Recent Site Updates
My eCFR
My Subscriptions
Sign In / Sign Up
eCFR
The Electronic Code of Federal Regulations
Enhanced Content :: FR Reference
Enhanced content is provided to the user to provide additional context.
Enhanced Content :: FR Reference
Title 28
This content is from the eCFR and is authoritative but unofficial.
Displaying title 28, up to date as of 4/22/2026. Title 28 was last amended 4/20/2026.
view historical versions
drafting site is available
for use when drafting amendatory language
switch to drafting site
Navigate by entering citations or phrases
(eg:
1 CFR 1.1
49 CFR 172.101
Organization and Purpose
1/1.1
Regulation Y
FAR
).
Choosing an item from
citations and headings
will bring you directly to the content. Choosing an item from
full text search results
will bring you to those results. Pressing enter in the search box
will also bring you to search results.
Background and more details are available in the
Search & Navigation
guide.
Title 28
—Judicial Administration
Chapter I
—Department of Justice
Part 202
Previous
Next
Top
Table of Contents
Enhanced Content - Table of Contents
Part 202
Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons
202.101 – 202.1401
Subpart A
General
202.101 – 202.106
§ 202.101
Scope.
§ 202.102
Rules of construction and interpretation.
§ 202.103
Relation of this part to other laws and regulations.
§ 202.104
Delegation of authorities.
§ 202.105
Amendment, modification, or revocation.
§ 202.106
Severability.
Subpart B
Definitions
202.201 – 202.259
§ 202.201
Access.
§ 202.202
Attorney General.
§ 202.203
Assistant Attorney General.
§ 202.204
Biometric identifiers.
§ 202.205
Bulk.
§ 202.206
Bulk U.S. sensitive personal data.
§ 202.207
CFIUS action.
§ 202.208
China.
§ 202.209
Country of concern.
§ 202.210
Covered data transaction.
§ 202.211
Covered person.
§ 202.212
Covered personal identifiers.
§ 202.213
Cuba.
§ 202.214
Data brokerage.
§ 202.215
Directing.
§ 202.216
Effective date.
§ 202.217
Employment agreement.
§ 202.218
Entity.
§ 202.219
Exempt transaction.
§ 202.220
Former senior official.
§ 202.221
Foreign person.
§ 202.222
Government-related data.
§ 202.223
Human biospecimens.
§ 202.224
Human `omic data.
§ 202.225
IEEPA.
§ 202.226
Information or informational materials.
§ 202.227
Interest.
§ 202.228
Investment agreement.
§ 202.229
Iran.
§ 202.230
Knowingly.
§ 202.231
Licenses; general and specific.
§ 202.232
Linked.
§ 202.233
Linkable.
§ 202.234
Listed identifier.
§ 202.235
National Security Division.
§ 202.236
North Korea.
§ 202.237
Order.
§ 202.238
Person.
§ 202.239
Personal communications.
§ 202.240
Personal financial data.
§ 202.241
Personal health data.
§ 202.242
Precise geolocation data.
§ 202.243
Prohibited transaction.
§ 202.244
Property; property interest.
§ 202.245
Recent former employees or contractors.
§ 202.246
Restricted transaction.
§ 202.247
Russia.
§ 202.248
Security requirements.
§ 202.249
Sensitive personal data.
§ 202.250
Special Administrative Region of Hong Kong.
§ 202.251
Special Administrative Region of Macau.
§ 202.252
Telecommunications service.
§ 202.253
Transaction.
§ 202.254
Transfer.
§ 202.255
United States.
§ 202.256
United States person or U.S. person.
§ 202.257
U.S. device.
§ 202.258
Vendor agreement.
§ 202.259
Venezuela.
Subpart C
Prohibited Transactions and Related Activities
202.301 – 202.305
§ 202.301
Prohibited data-brokerage transactions.
§ 202.302
Other prohibited data-brokerage transactions involving potential onward transfer to countries of concern or covered persons.
§ 202.303
Prohibited human `omic data and human biospecimen transactions.
§ 202.304
Prohibited evasions, attempts, causing violations, and conspiracies.
§ 202.305
Knowingly directing prohibited or restricted transactions.
Subpart D
Restricted Transactions
202.401 – 202.402
§ 202.401
Authorization to conduct restricted transactions.
§ 202.402 [Reserved]
Subpart E
Exempt Transactions
202.501 – 202.511
§ 202.501
Personal communications.
§ 202.502
Information or informational materials.
§ 202.503
Travel.
§ 202.504
Official business of the United States Government.
§ 202.505
Financial services.
§ 202.506
Corporate group transactions.
§ 202.507
Transactions required or authorized by Federal law or international agreements, or necessary for compliance with Federal law.
§ 202.508
Investment agreements subject to a CFIUS action.
§ 202.509
Telecommunications services.
§ 202.510
Drug, biological product, and medical device authorizations.
§ 202.511
Other clinical investigations and post-marketing surveillance data.
Subpart F
Determination of Countries of Concern
202.601
§ 202.601
Determination of countries of concern.
Subpart G
Covered Persons
202.701 – 202.702
§ 202.701
Designation of covered persons.
§ 202.702
Procedures governing removal from the Covered Persons List.
Subpart H
Licensing
202.801 – 202.803
§ 202.801
General licenses.
§ 202.802
Specific licenses.
§ 202.803
General provisions.
Subpart I
Advisory Opinions
202.901
§ 202.901
Inquiries concerning application of this part.
Subpart J
Due Diligence and Audit Requirements
202.1001 – 202.1002
§ 202.1001
Due diligence for restricted transactions.
§ 202.1002
Audits for restricted transactions.
Subpart K
Reporting and Recordkeeping Requirements
202.1101 – 202.1104
§ 202.1101
Records and recordkeeping requirements.
§ 202.1102
Reports to be furnished on demand.
§ 202.1103
Annual reports.
§ 202.1104
Reports on rejected prohibited transactions.
Subpart L
Submitting Applications, Requests, Reports, and Responses
202.1201
§ 202.1201
Procedures.
Subpart M
Penalties and Finding of Violation
202.1301 – 202.1306
§ 202.1301
Penalties for violations.
§ 202.1302
Process for pre-penalty notice.
§ 202.1303
Penalty imposition.
§ 202.1304
Administrative collection and litigation.
§ 202.1305
Finding of violation.
§ 202.1306
Opportunity to respond to a pre-penalty notice or finding of violation.
Subpart N
Government-Related Location Data List
202.1401
§ 202.1401
Government-Related Location Data List.
Enhanced Content - Table of Contents
Details
Enhanced Content - Details
URL
Citation
28 CFR Part 202
Agency
Department of Justice
Part 202
Authority:
50 U.S.C. 1701
et seq.;
50 U.S.C. 1601
et seq.;
E.O. 14117
89 FR 15421
Source:
90 FR 1706
, Jan. 8, 2025, unless otherwise noted.
Enhanced Content - Details
Print/PDF
Enhanced Content - Print
Generate PDF
(approximately 100+ pages) (may take several minutes to generate)
This content is from the eCFR and may include recent changes applied to the CFR.
The official, published CFR, is updated annually and available below under
"Published Edition". You can learn more about the process
here
Enhanced Content - Print
Display Options
Enhanced Content - Display Options
Enhanced Content - Display Options
Enhanced Content - Subscribe
Subscribe to:
28 CFR Part 202
Enhanced Content - Subscribe
Timeline
Enhanced Content - Timeline
4/18/2025
view on this date
view change
introduced
4/08/2025
view on this date
view change
introduced
compare to most recent
Enhanced Content - Timeline
Go to Date
Enhanced Content - Go to Date
Enhanced Content - Go to Date
Compare Dates
Enhanced Content - Compare Dates
Enhanced Content - Compare Dates
Published Edition
Enhanced Content - Published Edition
View the most recent official publication:
View Title 28 on govinfo.gov
View the PDF for 28 CFR Part 202
These links go to the official, published CFR, which is updated annually. As a
result, it may not include the most recent changes applied to the CFR.
Enhanced Content - Published Edition
Developer Tools
Enhanced Content - Developer Tools
Information and documentation can be found in our
developer resources
Enhanced Content - Developer Tools
eCFR Content
The
Code of Federal Regulations
(CFR) is the official legal print publication containing the codification of the general and permanent rules published in the
Federal Register
by the departments and agencies of the Federal Government. The Electronic Code of Federal Regulations (eCFR) is a continuously updated online version of the CFR. It is not an official legal edition of the CFR.
about the eCFR, its status, and the editorial process.
Enhanced Content
View
table of contents
for this page.
PART 202—ACCESS TO U.S. SENSITIVE PERSONAL DATA AND GOVERNMENT-RELATED DATA BY COUNTRIES OF CONCERN OR COVERED PERSONS
Authority:
50 U.S.C. 1701
et seq.;
50 U.S.C. 1601
et seq.;
E.O. 14117
89 FR 15421
Source:
90 FR 1706
, Jan. 8, 2025, unless otherwise noted.
Subpart A—General
§ 202.101 Scope.
Executive Order 14117 of February 28, 2024 (Preventing Access to Americans' Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern) (“the Order”), directs the Attorney General to issue regulations that prohibit or otherwise restrict United States persons from engaging in any acquisition, holding, use, transfer, transportation, or exportation of, or dealing in, any property in which a foreign country or national thereof has any interest (“transaction”), where the transaction: involves United States Government-related data (“government-related data”) or bulk U.S. sensitive personal data, as defined by final rules implementing the Order; falls within a class of transactions that has been determined by the Attorney General to pose an unacceptable risk to the national security of the United States because the transactions may enable access by countries of concern or covered persons to government-related data or bulk U.S. sensitive personal data; and meets other criteria specified by the Order.
This part contains regulations implementing the Order and addressing the national emergency declared in Executive Order 13873 of May 15, 2019 (Securing the Information and Communications Technology and Services Supply Chain), and further addressed with additional measures in Executive Order 14034 of June 9, 2021 (Protecting Americans' Sensitive Data from Foreign Adversaries) and Executive Order 14117.
§ 202.102 Rules of construction and interpretation.
The examples included in this part are provided for informational purposes and should not be construed to alter the meaning of the text of the regulations in this part.
As used in this part, the term “including” means “including but not limited to.”
All references to “days” in this part mean calendar days. In computing any time period specified in this part:
Exclude the day of the event that triggers the period;
Count every day, including Saturdays, Sundays, and legal holidays; and
Include the last day of the period, but if the last day is a Saturday, Sunday, or Federal holiday, the period continues to run until the end of the next day that is not a Saturday, Sunday, or Federal holiday.
§ 202.103 Relation of this part to other laws and regulations.
Nothing in this part shall be construed as altering or affecting any other authority, process, regulation, investigation, enforcement measure, or review provided by or established under any other provision of Federal law, including the International Emergency Economic Powers Act.
§ 202.104 Delegation of authorities.
Any action that the Attorney General is authorized to take pursuant to the Order or pursuant to this part may be taken by the Assistant Attorney General for National Security or by any other person to whom the Attorney General or Assistant Attorney General for National Security in writing delegates authority so to act.
§ 202.105 Amendment, modification, or revocation.
Except as otherwise provided by law, any determinations, prohibitions, decisions, licenses (whether general or specific), guidance, authorizations, instructions, orders, or forms issued pursuant to this part may be amended, modified, or revoked, in whole or in part, at any time.
§ 202.106 Severability.
If any provision of this part is held to be invalid or unenforceable by its terms, or as applied to any person or circumstance, or stayed pending further agency action or judicial review, the provision is to be construed so as to continue to give the maximum effect to the provision permitted by law, unless such holding will be one of utter invalidity or unenforceability, in which event the provision will be severable from this part and will not affect the remainder thereof.
Subpart B—Definitions
§ 202.201 Access.
The term
access
means logical or physical access, including the ability to obtain, read, copy, decrypt, edit, divert, release, affect, alter the state of, or otherwise view or receive, in any form, including through information systems, information technology systems, cloud-computing platforms, networks, security systems, equipment, or software. For purposes of determining whether a transaction is a covered data transaction, access is determined without regard for the application or effect of any security requirements.
§ 202.202 Attorney General.
The term
Attorney General
means the Attorney General of the United States or the Attorney General's designee.
§ 202.203 Assistant Attorney General.
The term
Assistant Attorney General
means the Assistant Attorney General, National Security Division, United States Department of Justice, or the Assistant Attorney General's designee.
§ 202.204 Biometric identifiers.
The term
biometric identifiers
means measurable physical characteristics or behaviors used to recognize or verify the identity of an individual, including facial images, voice prints and patterns, retina and iris scans, palm prints and fingerprints, gait, and keyboard usage patterns that are enrolled in a biometric system and the templates created by the system.
§ 202.205 Bulk.
The term
bulk
means any amount of sensitive personal data that meets or exceeds the following thresholds at any point in the preceding 12 months, whether through a single covered data transaction or aggregated across covered data transactions involving the same U.S. person and the same foreign person or covered person:
Human `omic data collected about or maintained on more than 1,000 U.S. persons, or, in the case of human genomic data, more than 100 U.S. persons;
Biometric identifiers collected about or maintained on more than 1,000 U.S. persons;
Precise geolocation data collected about or maintained on more than 1,000 U.S. devices;
Personal health data collected about or maintained on more than 10,000 U.S. persons;
Personal financial data collected about or maintained on more than 10,000 U.S. persons;
Covered personal identifiers collected about or maintained on more than 100,000 U.S. persons; or
Combined data, meaning any collection or set of data that contains more than one of the categories in
paragraphs (a)
through
(f)
of this section, or that contains any listed identifier linked to categories in
paragraphs (a)
through
(e)
of this section, where any individual data type meets the threshold number of persons or devices collected or maintained in the aggregate for the lowest number of U.S. persons or U.S. devices in that category of data.
§ 202.206 Bulk U.S. sensitive personal data.
The term
bulk U.S. sensitive personal data
means a collection or set of sensitive personal data relating to U.S. persons, in any format, regardless of whether the data is anonymized, pseudonymized, de-identified, or encrypted, where such data meets or exceeds the applicable threshold set forth in § 202.205.
§ 202.207 CFIUS action.
The term
CFIUS action
means any agreement or condition the Committee on Foreign Investment in the United States has entered into or imposed pursuant to
50 U.S.C. 4565(l)(1)
, (3), or (5) to resolve a national security risk involving access by a country of concern or covered person to sensitive personal data that the Committee on Foreign Investment in the United States has explicitly designated, in the agreement or document containing the condition, as a CFIUS action, including:
Suspension of a proposed or pending transaction, as authorized under
50 U.S.C. 4565(l)(1)
Entry into or imposition of any agreement or condition with any party to a covered transaction, as authorized under
50 U.S.C. 4565(l)(3)
; and
The establishment of interim protections for covered transactions withdrawn before CFIUS's review or investigation is completed, as authorized under
50 U.S.C. 4565(l)(5)
§ 202.208 China.
The term
China
means the People's Republic of China, including the Special Administrative Region of Hong Kong and the Special Administrative Region of Macau, as well as any political subdivision, agency, or instrumentality thereof.
§ 202.209 Country of concern.
The term
country of concern
means any foreign government that, as determined by the Attorney General with the concurrence of the Secretary of State and the Secretary of Commerce:
Has engaged in a long-term pattern or serious instances of conduct significantly adverse to the national security of the United States or security and safety of United States persons; and
Poses a significant risk of exploiting government-related data or bulk U.S. sensitive personal data to the detriment of the national security of the United States or security and safety of U.S. persons.
§ 202.210 Covered data transaction.
Definition.
covered data transaction
is any transaction that involves any access by a country of concern or covered person to any government-related data or bulk U.S. sensitive personal data and that involves:
Data brokerage;
A vendor agreement;
An employment agreement; or
An investment agreement.
Examples
Example 1.
A U.S. institution conducts medical research at its own laboratory in a country of concern, including sending several U.S.-citizen employees to that laboratory to perform and assist with the research. The U.S. institution does not engage in data brokerage or a vendor, employment, or investment agreement that gives a covered person or country of concern access to government-related data or bulk U.S. sensitive personal data. Because the U.S. institution does not engage in any data brokerage or enter into a vendor, employment, or investment agreement, the U.S. institution's research activity is not a covered data transaction.
Example 2.
A U.S. person engages in a vendor agreement with a covered person involving access to bulk U.S. sensitive personal data. The vendor agreement is a restricted transaction. To comply with the CISA security requirements, the U.S. person, among other things, uses data-level requirements to mitigate the risk that the covered person could access the data. The vendor agreement remains a covered data transaction subject to the requirements of this part.
Example 3.
A covered person engages in a vendor agreement with a U.S. person involving the U.S. person accessing bulk U.S. sensitive personal data already possessed by the covered person. The vendor agreement is not a covered data transaction because the transaction does not involve access by the covered person.
§ 202.211 Covered person.
Definition.
The term
covered person
means:
A foreign person that is an entity that is 50% or more owned, directly or indirectly, individually or in the aggregate, by one or more countries of concern or persons described in
paragraph (a)(2)
of this section; or that is organized or chartered under the laws of, or has its principal place of business in, a country of concern;
A foreign person that is an entity that is 50% or more owned, directly or indirectly, individually or in the aggregate, by one or more persons described in
paragraphs (a)(1)
(3)
(4)
, or
(5)
of this section;
A foreign person that is an individual who is an employee or contractor of a country of concern or of an entity described in
paragraphs (a)(1)
(2)
, or
(5)
of this section;
A foreign person that is an individual who is primarily a resident in the territorial jurisdiction of a country of concern; or
Any person, wherever located, determined by the Attorney General:
To be, to have been, or to be likely to become owned or controlled by or subject to the jurisdiction or direction of a country of concern or covered person;
ii
To act, to have acted or purported to act, or to be likely to act for or on behalf of a country of concern or covered person; or
iii
To have knowingly caused or directed, or to be likely to knowingly cause or direct a violation of this part.
Examples
Example 1.
Foreign persons primarily resident in Cuba, Iran, or another country of concern would be covered persons.
Example 2.
Chinese or Russian citizens located in the United States would be treated as U.S. persons and would not be covered persons (except to the extent individually designated). They would be subject to the same prohibitions and restrictions as all other U.S. persons with respect to engaging in covered data transactions with countries of concern or covered persons.
Example 3.
Citizens of a country of concern who are primarily resident in a third country, such as Russian citizens primarily resident in a European Union country or Cuban citizens primarily resident in a South American country that is not a country of concern, would not be covered persons except to the extent they are individually designated or to the extent that they are employees or contractors of a country of concern government or a covered person that is an entity.
Example 4.
A foreign person is located abroad and is employed by a company headquartered in China. Because the company is a covered person that is an entity and the employee is located outside the United States, the employee is a covered person.
Example 5.
A foreign person is located abroad and is employed by a company that has been designated as a covered person. Because the foreign person is the employee of a covered person that is an entity and the employee is a foreign person, the person is a covered person.
Example 6.
A foreign person individual investor who principally resides in Venezuela owns 50% of a technology company that is solely organized under the laws of the United States. The investor is a covered person because the investor is a foreign person that is an individual who is primarily a resident in the territorial jurisdiction of a country of concern. The technology company is a U.S. person because it is an entity organized solely under the laws of the United States or any jurisdiction within the United States. The technology company is not a covered person because it is not a foreign person and therefore does not meet the criteria of
§ 202.211(a)(2)
. However, the technology company could still be designated as a covered person following a determination that the technology company meets one or more criteria of
§ 202.211(a)(5)
Example 7.
Same as Example 6, but the technology company is additionally organized under the laws of Luxembourg. A U.S. company wishes to license bulk U.S. sensitive personal data to the technology company. The technology company is not a U.S. person because it is not solely organized under the laws of the United States. The technology company is a covered person because it is 50% or more owned, directly or indirectly, individually or in the aggregate, by a foreign person that is an individual who is primarily resident in the territorial jurisdiction of a country of concern. The transaction between the U.S. company and the technology company would be a prohibited data transaction.
Example 8.
A foreign person that lives in China owns 50% of Foreign Entity A. Foreign Entity A owns 100% of Foreign Entity B and 100% of Foreign Entity C. Foreign Entity B owns 20% of Foreign Entity D. Foreign Entity C owns 30% of Foreign Entity D. Foreign Entity D would be a covered person for two independent reasons. First, Foreign Entity D because it is “indirectly” 50% or more owned by Foreign Entity A (20% through Foreign Entity B and 30% through Foreign Entity C). Second, Foreign Entity D is directly 50% owned, in the aggregate, by Foreign Entity B and Foreign Entity C, each of which are covered persons because they are 50% or more owned by Foreign Entity A.
§ 202.212 Covered personal identifiers.
Definition.
The term
covered personal identifiers
means any listed identifier:
In combination with any other listed identifier; or
In combination with other data that is disclosed by a transacting party pursuant to the transaction such that the listed identifier is linked or linkable to other listed identifiers or to other sensitive personal data.
Exclusion.
The term
covered personal identifiers
excludes:
Demographic or contact data that is linked only to other demographic or contact data (such as first and last name, birthplace, ZIP code, residential street or postal address, phone number, and email address and similar public account identifiers); and
A network-based identifier, account-authentication data, or call-detail data that is linked only to other network-based identifier, account-authentication data, or call-detail data as necessary for the provision of telecommunications, networking, or similar service.
Examples of listed identifiers in combination with other listed identifiers
Example 1.
A standalone listed identifier in isolation (
i.e.,
that is not linked to another listed identifier, sensitive personal data, or other data that is disclosed by a transacting party pursuant to the transaction such that the listed identifier is linked or linkable to other listed identifiers or to other sensitive personal data)—such as a Social Security Number or account username—would not constitute a covered personal identifier.
Example 2.
A listed identifier linked to another listed identifier—such as a first and last name linked to a Social Security number, a driver's license number linked to a passport number, a device Media Access Control (“MAC”) address linked to a residential address, an account username linked to a first and last name, or a mobile advertising ID linked to an email address—would constitute covered personal identifiers.
Example 3.
Demographic or contact data linked only to other demographic or contact data—such as a first and last name linked to a residential street address, an email address linked to a first and last name, or a customer loyalty membership record linking a first and last name to a phone number—would not constitute covered personal identifiers.
Example 4.
Demographic or contact data linked to other demographic or contact data and to another listed identifier—such as a first and last name linked to an email address and to an IP address—would constitute covered personal identifiers.
Example 5.
Account usernames linked to passwords as part of a sale of a dataset would constitute covered personal identifiers. Those pieces of account-authentication data are not linked as a necessary part of the provision of telecommunications, networking, or similar services. This combination would constitute covered personal identifiers.
Examples of a listed identifier in combination with other data disclosed by a transacting party
Example 1.
A foreign person who is a covered person asks a U.S. company for a list of Media Access Control (“MAC”) addresses from devices that have connected to the wireless network of a U.S. fast-food restaurant located in a particular government building. The U.S. company then sells the list of MAC addresses, without any other listed identifiers or sensitive personal data, to the covered person. The disclosed MAC addresses, when paired with the other data disclosed by the covered person—that the devices “have connected to the wireless network of a U.S. fast-food restaurant located in a particular government building”—makes it so that the MAC addresses are linked or linkable to other sensitive personal data, in this case precise geolocation data of the location of the fast-food restaurant that the national security-related individuals frequent with their devices. This combination of data therefore meets the definition of covered personal identifiers.
Example 2.
A U.S. company sells to a country of concern a list of residential addresses that the company describes (whether in a heading on the list or separately to the country of concern as part of the transaction) as “addresses of members of a country of concern's opposition political party in New York City” or as “addresses of active-duty military officers who live in Howard County, Maryland” without any other listed identifiers or sensitive personal data. The data disclosed by the U.S. company's description, when paired with the disclosed addresses, makes the addresses linked or linkable to other listed identifiers or to other sensitive personal data of the U.S. individuals associated with them. This combination of data therefore meets the definition of covered personal identifiers.
Example 3.
A covered person asks a U.S. company for a bulk list of birth dates for “any American who visited a Starbucks in Washington, DC, in December 2023.” The U.S. company then sells the list of birth dates, without any other listed identifiers or sensitive personal data, to the covered person. The other data disclosed by the covered person—“any American who visited a Starbucks in Washington, DC, in December 2023”—does not make the birth dates linked or linkable to other listed identifiers or to other sensitive personal data. This combination of data therefore does not meet the definition of covered personal identifiers.
Example 4.
Same as Example 3, but the covered person asks the U.S. company for a bulk list of names (rather than birth dates) for “any American who visited a Starbucks in Washington, DC in December 2023.” The other data disclosed by the covered person—“any American who visited a Starbucks in Washington, DC, in December 2023”—does not make the list of names, without more, linked or linkable to other listed identifiers or to other sensitive personal data. This combination of data therefore does not meet the definition of covered personal identifiers.
Example 5.
A U.S. company sells to a covered person a list of residential addresses that the company describes (in a heading in the list or to the covered person as part of the transaction) as “households of Americans who watched more than 50% of episodes” of a specific popular TV show, without any other listed identifiers or sensitive personal data. The other data disclosed by the U.S. company—“Americans who watched more than 50% of episodes” of a specific popular TV show—does not increase the extent to which the addresses are linked or linkable to other listed identifiers or to other sensitive personal data. This combination of data therefore does not meet the definition of covered personal identifiers.
§ 202.213 Cuba.
The term
Cuba
means the Republic of Cuba, as well as any political subdivision, agency, or instrumentality thereof.
§ 202.214 Data brokerage.
Definition.
The term
data brokerage
means the sale of data, licensing of access to data, or similar commercial transactions, excluding an employment agreement, investment agreement, or a vendor agreement, involving the transfer of data from any person (the provider) to any other person (the recipient), where the recipient did not collect or process the data directly from the individuals linked or linkable to the collected or processed data.
Examples
Example 1.
A U.S. company sells bulk U.S. sensitive personal data to an entity headquartered in a country of concern. The U.S. company engages in prohibited data brokerage.
Example 2.
A U.S. company enters into an agreement that gives a covered person a license to access government-related data held by the U.S. company. The U.S. company engages in prohibited data brokerage.
Example 3.
A U.S. organization maintains a database of bulk U.S. sensitive personal data and offers annual memberships for a fee that provide members a license to access that data. Providing an annual membership to a covered person that includes a license to access government-related data or bulk U.S. sensitive personal data would constitute prohibited data brokerage.
Example 4.
A U.S. company owns and operates a mobile app for U.S. users with available advertising space. As part of selling the advertising space, the U.S. company provides IP addresses and advertising IDs of more than 100,000 U.S. users' devices to an advertising exchange based in a country of concern in a twelve-month period. The U.S. company's provision of this data as part of the sale of advertising space is a covered data transaction involving data brokerage and is a prohibited transaction because IP addresses and advertising IDs are listed identifiers that satisfy the definition of bulk covered personal identifiers in this transaction.
Example 5.
Same as Example 4, but the U.S. company provides the data to an advertising exchange based in the United States. As part of the sale of the advertising space, the U.S. advertising exchange provides the data to advertisers headquartered in a country of concern. The U.S. company's provision of the data to the U.S. advertising exchange would not be a transaction because it is between U.S. persons. The advertising exchange's provision of this data to the country of concern-based advertisers is data brokerage because it is a commercial transaction involving the transfer of data from the U.S. advertising exchange to the advertisers headquartered in the country of concern, where those country-of-concern advertisers did not collect or process the data directly from the individuals linked or linkable to the collected or processed data. Furthermore, the U.S. advertising exchange's provision of this data to the country of concern-based advertisers is a prohibited transaction.
Example 6.
A U.S. information technology company operates an autonomous driving platform that collects the precise geolocation data of its cars operating in the United States. The U.S. company sells or otherwise licenses this bulk data to its parent company headquartered in a country of concern to help develop artificial intelligence technology and machine learning capabilities. The sale or license is data brokerage and a prohibited transaction.
Example 7.
A U.S. company owns or operates a mobile app or website for U.S. users. That mobile app or website contains one or more tracking pixels or software development kits that were knowingly installed or approved for incorporation into the app or website by the U.S. company. The tracking pixels or software development kits transfer or otherwise provide access to government-related data or bulk U.S. sensitive personal data to a country of concern or covered person-owned social media app for targeted advertising. The U.S. company engages in prohibited data brokerage.
Example 8.
A non-U.S. company is contracted to develop a mobile app for a U.S. company. In developing the mobile app for that U.S. company, the non-U.S. company knowingly incorporates tracking pixels or software development kits into the mobile app that then transfer or otherwise provide access to government-related data or bulk U.S. sensitive personal data to a country of concern or covered person for targeted advertising, at the request of the U.S. company. The non-U.S. company has caused a violation of the data brokerage prohibition. If the U.S. company knowingly arranged the transfer of such data to the country of concern or covered person by requesting incorporation of the tracking pixels or software development kits, the U.S. company has engaged in prohibited data brokerage.
Example 9.
A U.S. researcher shares bulk human `omic data on U.S. persons with a researcher in a country of concern (a covered person) with whom the U.S. researcher is drafting a paper for submission to an academic journal. The two researchers exchange country of concern and bulk U.S. human `omic data over a period of several months to analyze and describe the findings of their research for the journal article. The U.S. person does not provide to or receive from the covered person or the covered person's employer any money or other valuable consideration as part of the authors' study. The U.S. person has not engaged in a covered data transaction involving data brokerage, because the transaction does not involve the sale of data, licensing of access to data, or similar commercial transaction involving the transfer of data to the covered person.
10
Example 10.
A U.S. researcher receives a grant from a university in a country of concern to study. bulk personal health data and bulk human `omic data on U.S. persons. The grant directs the researcher to share the underlying bulk U.S. sensitive personal data with the country of concern university (a covered person). The transaction is a covered data transaction because it involves access by a covered person to bulk U.S. sensitive personal data and is data brokerage because it involves the transfer of bulk U.S. sensitive personal data to a covered person in return for a financial benefit.
§ 202.215 Directing.
The term
directing
means having any authority (individually or as part of a group) to make decisions for or on behalf of an entity and exercising that authority.
§ 202.216 Effective date.
The term
effective date
refers to the effective date of this part, which is 12:01 a.m. ET on April 8, 2025.
§ 202.217 Employment agreement.
Definition.
The term
employment agreement
means any agreement or arrangement in which an individual, other than as an independent contractor, performs work or performs job functions directly for a person in exchange for payment or other consideration, including employment on a board or committee, executive-level arrangements or services, and employment services at an operational level.
Examples
Example 1.
A U.S. company that conducts consumer human genomic testing collects and maintains bulk human genomic data from U.S. consumers. The U.S. company has global IT operations, including employing a team of individuals who are citizens of and primarily resident in a country of concern to provide back-end services. The agreements related to employing these individuals are employment agreements. Employment as part of the global IT operations team includes access to the U.S. company's systems containing the bulk human genomic data. These employment agreements would be prohibited transactions (because they involve access to bulk human genomic data).
Example 2.
A U.S. company develops its own mobile games and social media apps that collect the bulk U.S. sensitive personal data of its U.S. users. The U.S. company distributes these games and apps in the United States through U.S.-based digital distribution platforms for software applications. The U.S. company intends to hire as CEO an individual designated by the Attorney General as a covered person because of evidence the CEO acts on behalf of a country of concern. The agreement retaining the individual as CEO would be an employment agreement. The individual's authorities and responsibilities as CEO involve access to all data collected by the apps, including the bulk U.S. sensitive personal data. The CEO's employment would be a restricted transaction.
Example 3.
A U.S. company has derived U.S. persons' biometric identifiers by scraping public photos from social media platforms. The U.S. company stores the derived biometric identifiers in bulk, including face-data scans, for the purpose of training or enhancing facial-recognition software. The U.S. company intends to hire a foreign person, who primarily resides in a country of concern, as a project manager responsible for the database. The agreement retaining the project manager would be an employment agreement. The individual's employment as the lead project manager would involve access to the bulk biometric identifiers. The project manager's employment would be a restricted transaction.
Example 4.
A U.S. financial-services company seeks to hire a data scientist who is a citizen of a country of concern who primarily resides in that country of concern and who is developing a new artificial intelligence-based personal assistant that could be sold as a standalone product to the company's customers. The arrangement retaining the data scientist would be an employment agreement. As part of that individual's employment, the data scientist would have administrator rights that allow that individual to access, download, and transmit bulk quantities of personal financial data not ordinarily incident to and part of the company's underlying provision of financial services to its customers. The data scientist's employment would be a restricted transaction.
Example 5.
A U.S. company sells goods and collects bulk personal financial data about its U.S. customers. The U.S. company appoints a citizen of a country of concern, who is located in a country of concern, to its board of directors. This director would be a covered person, and the arrangement appointing the director would be an employment agreement. In connection with the board's data security and cybersecurity responsibilities, the director could access the bulk personal financial data. The director's employment would be a restricted transaction.
§ 202.218 Entity.
The term
entity
means a partnership, association, trust, joint venture, corporation, group, subgroup, or other organization.
§ 202.219 Exempt transaction.
The term
exempt transaction
means a data transaction that is subject to one or more exemptions described in
subpart E of this part
§ 202.220 Former senior official.
The term
former senior official
means either a “former senior employee” or a “former very senior employee,” as those terms are defined in
5 CFR 2641.104
§ 202.221 Foreign person.
The term
foreign person
means any person that is not a U.S. person.
§ 202.222 Government-related data.
Definition.
The term
government-related data
means the following:
Any precise geolocation data, regardless of volume, for any location within any area enumerated on the Government-Related Location Data List in
§ 202.1401
which the Attorney General has determined poses a heightened risk of being exploited by a country of concern to reveal insights about locations controlled by the Federal Government, including insights about facilities, activities, or populations in those locations, to the detriment of national security, because of the nature of those locations or the personnel who work there. Such locations may include:
The worksite or duty station of Federal Government employees or contractors who occupy a national security position as that term is defined in
5 CFR 1400.102(a)(4)
ii
A military installation as that term is defined in
10 U.S.C. 2801(c)(4)
; or
iii
Facilities or locations that otherwise support the Federal Government's national security, defense, intelligence, law enforcement, or foreign policy missions.
Any sensitive personal data, regardless of volume, that a transacting party markets as linked or linkable to current or recent former employees or contractors, or former senior officials, of the United States Government, including the military and Intelligence Community.
Examples of government-related data marketed by a transacting party
Example 1.
A U.S. company advertises the sale of a set of sensitive personal data as belonging to “active duty” personnel, “military personnel who like to read,” “DoD” personnel, “government employees,” or “communities that are heavily connected to a nearby military base.” The data is government-related data.
Example 2.
In discussing the sale of a set of sensitive personal data with a covered person, a U.S. company describes the dataset as belonging to members of a specific named organization. The identified organization restricts membership to current and former members of the military and their families. The data is government-related data.
§ 202.223 Human biospecimens.
The term
human biospecimens
means a quantity of tissue, blood, urine, or other human-derived material, including such material classified under any of the following 10-digit Harmonized System-based Schedule B numbers:
0501.00.0000 Human hair, unworked, whether or not washed or scoured; waste of human hair
3001.20.0000 Extracts of glands or other organs or of their secretions
3001.90.0115 Glands and other organs, dried, whether or not powdered
3002.12.0010 Human blood plasma
3002.12.0020 Normal human blood sera, whether or not freeze-dried
3002.12.0030 Human immune blood sera
3002.12.0090 Antisera and other blood fractions, Other
3002.51.0000 Cell therapy products
3002.59.0000 Cell cultures, whether or not modified, Other
10
3002.90.5210 Whole human blood
11
3002.90.5250 Blood, human/animal, other
12
9705.21.0000 Human specimens and parts thereof
Notwithstanding
paragraph (a)
of this section, the term
human biospecimens
does not include human biospecimens, including human blood, cell, and plasma-derived therapeutics, intended by a recipient solely for use in diagnosing, treating, or preventing any disease or medical condition.
§ 202.224 Human `omic data.
The term
human `omic data
means:
Human genomic data.
Data representing the nucleic acid sequences that constitute the entire set or a subset of the genetic instructions found in a human cell, including the result or results of an individual's “genetic test” (as defined in
42 U.S.C. 300gg-91(d)(17)
) and any related human genetic sequencing data.
Human epigenomic data.
Data derived from a systems-level analysis of human epigenetic modifications, which are changes in gene expression that do not involve alterations to the DNA sequence itself. These epigenetic modifications include modifications such as DNA methylation, histone modifications, and non-coding RNA regulation. Routine clinical measurements of epigenetic modifications for individualized patient care purposes would not be considered epigenomic data under this rule because such measurements would not entail a systems-level analysis of the epigenetic modifications in a sample.
Human proteomic data.
Data derived from a systems-level analysis of proteins expressed by a human genome, cell, tissue, or organism. Routine clinical measurements of proteins for individualized patient care purposes would not be considered proteomic data under this rule because such measurements would not entail a systems-level analysis of the proteins found in such a sample.
Human transcriptomic data.
Data derived from a systems-level analysis of RNA transcripts produced by the human genome under specific conditions or in a specific cell type. Routine clinical measurements of RNA transcripts for individualized patient care purposes would not be considered transcriptomic data under this rule because such measurements would not entail a systems-level analysis of the RNA transcripts in a sample.
The term
human `omic data
excludes pathogen-specific data embedded in human `omic data sets.
§ 202.225 IEEPA.
The term
IEEPA
means the International Emergency Economic Powers Act (
50 U.S.C. 1701
et seq.
).
§ 202.226 Information or informational materials.
Definition.
The term
information or informational materials
is limited to expressive material and includes publications, films, posters, phonograph records, photographs, microfilms, microfiche, tapes, compact disks, CD ROMs, artworks, and news wire feeds. It does not include data that is technical, functional, or otherwise non-expressive.
Exclusions.
The term
information or informational materials
does not include:
Information or informational materials not fully created and in existence at the date of the data transaction, or the substantive or artistic alteration or enhancement of information or informational materials, or the provision of marketing and business consulting services, including to market, produce or co-produce, or assist in the creation of information or informational materials;
Items that were, as of April 30, 1994, or that thereafter become, controlled for export to the extent that such controls promote the nonproliferation or antiterrorism policies of the United States, or with respect to which acts are prohibited by
18 U.S.C. chapter 37
Examples
Example 1.
A U.S. person enters into an agreement to create a customized dataset of bulk U.S. sensitive personal data that meets a covered person's specifications (such as the specific types and fields of data, date ranges, and other criteria) and to sell that dataset to the covered person. This customized dataset is not fully created and in existence at the date of the agreement, and therefore is not information or informational materials.
Example 2.
A U.S. company has access to several pre-existing databases of different bulk U.S. sensitive personal data. The U.S. company offers, for a fee, to use data analytics to link the data across these databases to the same individuals and to sell that combined dataset to a covered person. This service constitutes a substantive alteration or enhancement of the data in the pre-existing databases and therefore is not information or informational materials.
§ 202.227 Interest.
Except as otherwise provided in this part, the term
interest,
when used with respect to property (
e.g.,
“an interest in property”), means an interest of any nature whatsoever, direct or indirect.
§ 202.228 Investment agreement.
Definition.
The term
investment agreement
means an agreement or arrangement in which any person, in exchange for payment or other consideration, obtains direct or indirect ownership interests in or rights in relation to:
Real estate located in the United States; or
A U.S. legal entity.
Exclusion for passive investments.
The term
investment agreement
excludes any investment that:
Is made:
Into a publicly traded security, with “security” defined in section 3(a)(10) of the Securities Exchange Act of 1934 (
15 U.S.C. 78c(a)(10)
), denominated in any currency that trades on a securities exchange or through the method of trading that is commonly referred to as “over-the-counter,” in any jurisdiction;
ii
Into a security offered by:
Any “investment company” (as defined in section 3(a)(1) of the Investment Company Act of 1940 (
15 U.S.C. 80a-3(a)(1)
) that is registered with the United States Securities and Exchange Commission, such as index funds, mutual funds, or exchange traded funds; or
Any company that has elected to be regulated or is regulated as a business development company pursuant to section 54(a) of the Investment Company Act of 1940 (
15 U.S.C. 80a-53
), or any derivative of either of the foregoing; or
iii
As a limited partner into a venture capital fund, private equity fund, fund of funds, or other pooled investment fund, or private entity, if the limited partner's contribution is solely capital and the limited partner cannot make managerial decisions, is not responsible for any debts beyond its investment, and does not have the formal or informal ability to influence or participate in the fund's or a U.S. person's decision making or operations;
Gives the covered person less than 10% in total voting and equity interest in a U.S. person; and
Does not give a covered person rights beyond those reasonably considered to be standard minority shareholder protections, including (a) membership or observer rights on, or the right to nominate an individual to a position on, the board of directors or an equivalent governing body of the U.S. person, or (b) any other involvement, beyond the voting of shares, in substantive business decisions, management, or strategy of the U.S. person.
Examples
Example 1.
A U.S. company intends to build a data center located in a U.S. territory. The data center will store bulk personal health data on U.S. persons. A foreign private equity fund located in a country of concern agrees to provide capital for the construction of the data center in exchange for acquiring a majority ownership stake in the data center. The agreement that gives the private equity fund a stake in the data center is an investment agreement. The investment agreement is a restricted transaction.
Example 2.
A foreign technology company that is subject to the jurisdiction of a country of concern and that the Attorney General has designated as a covered person enters into a shareholders' agreement with a U.S. business that develops mobile games and social media apps, acquiring a minority equity stake in the U.S. business. The shareholders' agreement is an investment agreement. These games and apps developed by the U.S. business systematically collect bulk U.S. sensitive personal data of its U.S. users. The investment agreement explicitly gives the foreign technology company the ability to access this data and is therefore a restricted transaction.
Example 3.
Same as Example 2, but the investment agreement either does not explicitly give the foreign technology company the right to access the data or explicitly forbids that access. The investment agreement nonetheless provides the foreign technology company with the sufficient ownership interest, rights, or other involvement in substantive business decisions, management, or strategy such that the investment does not constitute a passive investment. Because it is not a passive investment, the ownership interest, rights, or other involvement in substantive business decisions, management, or strategy gives the foreign technology company the ability to obtain logical or physical access, regardless of how the agreement formally distributes those rights. The investment agreement therefore involves access to bulk U.S. sensitive personal data. The investment agreement is a restricted transaction.
Example 4.
Same as Example 3, but the U.S. business does not maintain or have access to any government-related data or bulk U.S. sensitive personal data (
e.g.,
a pre-commercial company or startup company). Because the data transaction cannot involve access to any government-related data or bulk U.S. sensitive personal data, this investment agreement does not meet the definition of a covered data transaction and is not a restricted transaction.
§ 202.229 Iran.
The term
Iran
means the Islamic Republic of Iran, as well as any political subdivision, agency, or instrumentality thereof.
§ 202.230 Knowingly.
Definition.
The term
knowingly,
with respect to conduct, a circumstance, or a result, means that a person has actual knowledge, or reasonably should have known, of the conduct, the circumstance, or the result.
Examples
Example 1.
A U.S. company sells DNA testing kits to U.S. consumers and maintains bulk human genomic data collected from those consumers. The U.S. company enters into a contract with a foreign cloud-computing company (which is not a covered person) to store the U.S. company's database of human genomic data. The foreign company hires employees from other countries, including citizens of countries of concern who primarily reside in a country of concern, to manage databases for its customers, including the U.S. company's human genomic database. There is no indication of evasion, such as the U.S. company knowingly directing the foreign company's employment agreements with covered persons, or the U.S. company engaging in and structuring these transactions to evade the regulations. The cloud-computing services agreement between the U.S. company and the foreign company would not be prohibited or restricted, because that covered data transaction is between a U.S. person and a foreign company that does not meet the definition of a covered person. The employment agreements between the foreign company and the covered persons would not be prohibited or restricted because those agreements are between foreign persons.
Example 2.
A U.S. company transmits the bulk U.S. sensitive personal data of U.S. persons to a country of concern, in violation of this part, using a fiber optic cable operated by another U.S. company. The U.S. cable operator has not knowingly engaged in a prohibited transaction or a restricted transaction solely by virtue of operating the fiber optic cable because the U.S. cable operator does not know, and reasonably should not know, the content of the traffic transmitted across the fiber optic cable.
Example 3.
A U.S. service provider provides a software platform on which a U.S. company processes the bulk U.S. sensitive personal data of its U.S.-person customers. While the U.S. service provider is generally aware of the nature of the U.S. company's business, the U.S. service provider is not aware of the kind or volume of data that the U.S. company processes on the platform, how the U.S. company uses the data, or whether the U.S. company engages in data transactions. The U.S. company also primarily controls access to its data on the platform, with the U.S. service provider accessing the data only for troubleshooting or technical support purposes, upon request by the U.S. company. Subsequently, without the actual knowledge of the U.S. service provider and without providing the U.S. service provider with any information from which the service provider should have known, the U.S. company grants access to the data on the U.S. service provider's software platform to a covered person through a covered data transaction, in violation of this part. The U.S. service provider itself, however, has not knowingly engaged in a restricted transaction by enabling the covered persons' access via its software platform.
Example 4.
Same as Example 3, but in addition to providing the software platform, the U.S. company's contract with the U.S. service provider also outsources the U.S. company's processing and handling of the data to the U.S. service provider. As a result, the U.S. service provider primarily controls access to the U.S. company's bulk U.S. sensitive personal data on the platform. The U.S. service provider employs a covered person and grants access to this data as part of this employment. Although the U.S. company's contract with the U.S. service provider is not a restricted transaction, the U.S. service provider's employment agreement with the covered person is a restricted transaction. The U.S. service provider has thus knowingly engaged in a restricted transaction by entering into an employment agreement that grants access to its employee because the U.S. service provider knew or should have known of its employee's covered person status and, as the party responsible for processing and handling the data, the U.S. service provider was aware of the kind and volume of data that the U.S. company processes on the platform.
Example 5.
A U.S. company provides cloud storage to a U.S. customer for the encrypted storage of the customer's bulk U.S. sensitive personal data. The U.S. cloud-service provider has an emergency back-up encryption key for all its customers' data, but the company is contractually limited to using the key to decrypt the data only at the customer's request. The U.S. customer's systems and access to the key become disabled, and the U.S. customer requests that the cloud-service provider use the back-up encryption key to decrypt the data and store it on a backup server while the customer restores its own systems. By having access to and using the backup encryption key to decrypt the data in accordance with the contractual limitation, the U.S. cloud-service provider does not and reasonably should not know the kind and volumes of the U.S. customer's data. If the U.S. customer later uses the cloud storage to knowingly engage in a prohibited transaction, the U.S. cloud-service provider's access to and use of the backup encryption key does not mean that the U.S. cloud-service provider has also knowingly engaged in a restricted transaction.
Example 6.
A prominent human genomics research clinic enters into a cloud-services contract with a U.S. cloud-service provider that specializes in storing and processing healthcare data to store bulk human genomic research data. The cloud-service provider hires IT personnel in a country of concern, who are thus covered persons. While the data that is stored is encrypted, the IT personnel can access the data in encrypted form. The employment agreement between the U.S. cloud-service provider and the IT professionals in the country of concern is a prohibited transaction because the agreement involves giving the IT personnel access to the encrypted data and constitutes a transfer of human genomic data. Given the nature of the research institution's work and the cloud-service provider's expertise in storing healthcare data, the cloud-service provider reasonably should have known that the encrypted data is bulk U.S. sensitive personal data covered by the regulations. The cloud-service provider has therefore knowingly engaged in a prohibited transaction (because it involves access to human genomic data).
§ 202.231 Licenses; general and specific.
General license.
The term
general license
means a written license issued pursuant to this part authorizing a class of transactions and not limited to a particular person.
Specific license.
The term
specific license
means a written license issued pursuant to this part to a particular person or persons, authorizing a particular transaction or transactions in response to a written license application.
§ 202.232 Linked.
Definition.
The term
linked
means associated.
Examples
Example 1.
A U.S. person transfers two listed identifiers in a single spreadsheet—such as a list of names of individuals and associated MAC addresses for those individuals' devices. The names and MAC addresses would be considered linked.
Example 2.
A U.S. person transfers two listed identifiers in different spreadsheets—such as a list of names of individuals in one spreadsheet and MAC addresses in another spreadsheet—to two related parties in two different covered data transactions. The names and MAC addresses would be considered linked, provided that some correlation existed between the names and MAC addresses (
e.g.,
associated employee ID number is also listed in both spreadsheets).
Example 3.
A U.S. person transfers a standalone list of MAC addresses, without any additional listed identifiers. The standalone list does not include covered personal identifiers. That standalone list of MAC addresses would not become covered personal identifiers even if the receiving party is capable of obtaining separate sets of other listed identifiers or sensitive personal data through separate covered data transactions with unaffiliated parties that would ultimately permit the association of the MAC addresses to specific persons. The MAC addresses would not be considered linked or linkable to those separate sets of other listed identifiers or sensitive personal data.
§ 202.233 Linkable.
The term
linkable
means reasonably capable of being linked.
Note to
§ 202.233
Data is considered linkable when the identifiers involved in a single covered data transaction, or in multiple covered data transactions or a course of dealing between the same or related parties, are reasonably capable of being associated with the same person(s). Identifiers are not linked or linkable when additional identifiers or data not involved in the relevant covered data transaction(s) would be necessary to associate the identifiers with the same specific person(s).
§ 202.234 Listed identifier.
The term
listed identifier
means any piece of data in any of the following data fields:
Full or truncated government identification or account number (such as a Social Security number, driver's license or State identification number, passport number, or Alien Registration Number);
Full financial account numbers or personal identification numbers associated with a financial institution or financial-services company;
Device-based or hardware-based identifier (such as International Mobile Equipment Identity (“IMEI”), Media Access Control (“MAC”) address, or Subscriber Identity Module (“SIM”) card number);
Demographic or contact data (such as first and last name, birth date, birthplace, ZIP code, residential street or postal address, phone number, email address, or similar public account identifiers);
Advertising identifier (such as Google Advertising ID, Apple ID for Advertisers, or other mobile advertising ID (“MAID”));
Account-authentication data (such as account username, account password, or an answer to security questions);
Network-based identifier (such as Internet Protocol (“IP”) address or cookie data); or
Call-detail data (such as Customer Proprietary Network Information (“CPNI”)).
§ 202.235 National Security Division.
The term
National Security Division
means the National Security Division of the United States Department of Justice.
§ 202.236 North Korea.
The term
North Korea
means the Democratic People's Republic of North Korea, and any political subdivision, agency, or instrumentality thereof.
§ 202.237 Order.
The term
Order
means Executive Order 14117 of February 28, 2024 (Preventing Access to Americans' Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern),
89 FR 15421
(March 1, 2024).
§ 202.238 Person.
The term
person
means an individual or entity.
§ 202.239 Personal communications.
The term
personal communications
means any postal, telegraphic, telephonic, or other personal communication that does not involve the transfer of anything of value, as set out under
50 U.S.C. 1702(b)(1)
§ 202.240 Personal financial data.
The term
personal financial data
means data about an individual's credit, charge, or debit card, or bank account, including purchases and payment history; data in a bank, credit, or other financial statement, including assets, liabilities, debts, or trades in a securities portfolio; or data in a credit report or in a “consumer report” (as defined in
15 U.S.C. 1681a(d)
).
§ 202.241 Personal health data.
The term
personal health data
means health information that indicates, reveals, or describes the past, present, or future physical or mental health or condition of an individual; the provision of healthcare to an individual; or the past, present, or future payment for the provision of healthcare to an individual. This term includes basic physical measurements and health attributes (such as bodily functions, height and weight, vital signs, symptoms, and allergies); social, psychological, behavioral, and medical diagnostic, intervention, and treatment history; test results; logs of exercise habits; immunization data; data on reproductive and sexual health; and data on the use or purchase of prescribed medications.
§ 202.242 Precise geolocation data.
The term
precise geolocation data
means data, whether real-time or historical, that identifies the physical location of an individual or a device with a precision of within 1,000 meters.
§ 202.243 Prohibited transaction.
The term
prohibited transaction
means a data transaction that is subject to one or more of the prohibitions described in
subpart C of this part
§ 202.244 Property; property interest.
The terms
property
and
property interest
include money; checks; drafts; bullion; bank deposits; savings accounts; debts; indebtedness; obligations; notes; guarantees; debentures; stocks; bonds; coupons; any other financial instruments; bankers acceptances; mortgages, pledges, liens, or other rights in the nature of security; warehouse receipts, bills of lading, trust receipts, bills of sale, or any other evidences of title, ownership, or indebtedness; letters of credit and any documents relating to any rights or obligations thereunder; powers of attorney; goods; wares; merchandise; chattels; stocks on hand; ships; goods on ships; real estate mortgages; deeds of trust; vendors' sales agreements; land contracts, leaseholds, ground rents, real estate and any other interest therein; options; negotiable instruments; trade acceptances; royalties; book accounts; accounts payable; judgments; patents; trademarks or copyrights; insurance policies; safe deposit boxes and their contents; annuities; pooling agreements; services of any nature whatsoever; contracts of any nature whatsoever; any other property, real, personal, or mixed, tangible or intangible, or interest or interests therein, present, future, or contingent.
§ 202.245 Recent former employees or contractors.
The terms
recent former employees
or
recent former contractors
mean employees or contractors who worked for or provided services to the United States Government, in a paid or unpaid status, within the past 2 years of a potential covered data transaction.
§ 202.246 Restricted transaction.
The term
restricted transaction
means a data transaction that is subject to
subpart D of this part
§ 202.247 Russia.
The term
Russia
means the Russian Federation, and any political subdivision, agency, or instrumentality thereof.
§ 202.248 Security requirements.
The term
security requirements
means the Cybersecurity and Infrastructure Agency (“CISA”) Security Requirements for Restricted Transactions E.O. 14117 Implementation, January 2025. This material is incorporated by reference into this section with the approval of the Director of the Federal Register under
5 U.S.C. 552(a)
and
1 CFR part 51
. This incorporation by reference (“IBR”) material is available for inspection at the Department of Justice and at the National Archives and Records Administration (“NARA”). Please contact the Foreign Investment Review Section, National Security Division, U.S. Department of Justice, 175 N St. NE, Washington, DC 20002, telephone: 202-514-8648,
NSD.FIRS.datasecurity@usdoj.gov
www.justice.gov/nsd
For information on the availability of this material at NARA, visit
www.archives.gov/federal-register/cfr/ibr-locations
or email
fr.inspection@nara.gov
The material may be obtained from the National Security Division and the Cybersecurity and Infrastructure Security Agency (CISA), Mail Stop 0380, Department of Homeland Security, 245 Murray Lane, Washington, DC 20528-0380;
central@cisa.gov
888-282-0870;
www.cisa.gov/
§ 202.249 Sensitive personal data.
Definition.
The term
sensitive personal data
means covered personal identifiers, precise geolocation data, biometric identifiers, human `omic data, personal health data, personal financial data, or any combination thereof.
Exclusions.
The term
sensitive personal data,
and each of the categories of
sensitive personal data,
excludes:
Public or nonpublic data that does not relate to an individual, including such data that meets the definition of a “trade secret” (as defined in
18 U.S.C. 1839(3)
) or “proprietary information” (as defined in
50 U.S.C. 1708(d)(7)
);
Data that is, at the time of the transaction, lawfully available to the public from a Federal, State, or local government record (such as court records) or in widely distributed media (such as sources that are generally available to the public through unrestricted and open-access repositories);
Personal communications; and
Information or informational materials and ordinarily associated metadata or metadata reasonably necessary to enable the transmission or dissemination of such information or informational materials.
§ 202.250 Special Administrative Region of Hong Kong.
The term
Special Administrative Region of Hong Kong
means the Special Administrative Region of Hong Kong, and any political subdivision, agency, or instrumentality thereof.
§ 202.251 Special Administrative Region of Macau.
The term
Special Administrative Region of Macau
means the Special Administrative Region of Macau, and any political subdivision, agency, or instrumentality thereof.
§ 202.252 Telecommunications service.
The term
telecommunications service
means the provision of voice and data communications services regardless of format or mode of delivery, including communications services delivered over cable, Internet Protocol, wireless, fiber, or other transmission mechanisms, as well as arrangements for network interconnection, transport, messaging, routing, or international voice, text, and data roaming.
§ 202.253 Transaction.
The term
transaction
means any acquisition, holding, use, transfer, transportation, exportation of, or dealing in any property in which a foreign country or national thereof has an interest.
§ 202.254 Transfer.
The term
transfer
means any actual or purported act or transaction, whether or not evidenced by writing, and whether or not done or performed within the United States, the purpose, intent, or effect of which is to create, surrender, release, convey, transfer, or alter, directly or indirectly, any right, remedy, power, privilege, or interest with respect to any property. Without limitation on the foregoing, it shall include the making, execution, or delivery of any assignment, power, conveyance, check, declaration, deed, deed of trust, power of attorney, power of appointment, bill of sale, mortgage, receipt, agreement, contract, certificate, gift, sale, affidavit, or statement; the making of any payment; the setting off of any obligation or credit; the appointment of any agent, trustee, or fiduciary; the creation or transfer of any lien; the issuance, docketing, filing, or levy of or under any judgment, decree, attachment, injunction, execution, or other judicial or administrative process or order, or the service of any garnishment; the acquisition of any interest of any nature whatsoever by reason of a judgment or decree of any foreign country; the fulfillment of any condition; the exercise of any power of appointment, power of attorney, or other power; or the acquisition, disposition, transportation, importation, exportation, or withdrawal of any security.
§ 202.255 United States.
The term
United States
means the United States, its territories and possessions, and all areas under the jurisdiction or authority thereof.
§ 202.256 United States person or U.S. person.
Definition.
The terms
United States person
and
U.S. person
mean any United States citizen, national, or lawful permanent resident; any individual admitted to the United States as a refugee under
8 U.S.C. 1157
or granted asylum under
8 U.S.C. 1158
; any entity organized solely under the laws of the United States or any jurisdiction within the United States (including foreign branches); or any person in the United States.
Examples
Example 1.
An individual is a citizen of a country of concern and is in the United States. The individual is a U.S. person.
Example 2.
An individual is a U.S. citizen. The individual is a U.S. person, regardless of location.
Example 3.
An individual is a dual citizen of the United States and a country of concern. The individual is a U.S. person, regardless of location.
Example 4.
An individual is a citizen of a country of concern, is not a permanent resident alien of the United States, and is outside the United States. The individual is a foreign person.
Example 5.
A company is organized under the laws of the United States and has a foreign branch in a country of concern. The company, including its foreign branch, is a U.S. person.
Example 6.
A parent company is organized under the laws of the United States and has a subsidiary organized under the laws of a country of concern. The subsidiary is a foreign person regardless of the degree of ownership by the parent company; the parent company is a U.S. person.
Example 7.
A company is organized under the laws of a country of concern and has a branch in the United States. The company, including its U.S. branch, is a foreign person.
Example 8.
A parent company is organized under the laws of a country of concern and has a subsidiary organized under the laws of the United States. The subsidiary is a U.S. person regardless of the degree of ownership by the parent company; the parent company is a foreign person.
§ 202.257 U.S. device.
The term
U.S. device
means any device with the capacity to store or transmit data that is linked or linkable to a U.S. person.
§ 202.258 Vendor agreement.
Definition.
The term
vendor agreement
means any agreement or arrangement, other than an employment agreement, in which any person provides goods or services to another person, including cloud-computing services, in exchange for payment or other consideration.
Examples
Example 1.
A U.S. company collects bulk precise geolocation data from U.S. users through an app. The U.S. company enters into an agreement with a company headquartered in a country of concern to process and store this data. This vendor agreement is a restricted transaction.
Example 2.
A medical facility in the United States contracts with a company headquartered in a country of concern to provide IT-related services. The contract governing the provision of services is a vendor agreement. The medical facility has bulk personal health data on its U.S. patients. The IT services provided under the contract involve access to the medical facility's systems containing the bulk personal health data. This vendor agreement is a restricted transaction.
Example 3.
A U.S. company, which is owned by an entity headquartered in a country of concern and has been designated a covered person, establishes a new data center in the United States to offer managed services. The U.S. company's data center serves as a vendor to various U.S. companies to store bulk U.S. sensitive personal data collected by those companies. These vendor agreements are restricted transactions.
Example 4.
A U.S. company develops mobile games that collect bulk precise geolocation data and biometric identifiers of U.S.-person users. The U.S. company contracts part of the software development to a foreign person who is primarily resident in a country of concern and is a covered person. The contract with the foreign person is a vendor agreement. The software-development services provided by the covered person under the contract involve access to the bulk precise geolocation data and biometric identifiers. This is a restricted transaction.
Example 5.
A U.S. multinational company maintains bulk U.S. sensitive personal data of U.S. persons. This company has a foreign branch, located in a country of concern, that has access to this data. The foreign branch contracts with a local company located in the country of concern to provide cleaning services for the foreign branch's facilities. The contract is a vendor agreement, the foreign branch is a U.S. person, and the local company is a covered person. Because the services performed under this vendor agreement do not “involve access to” the bulk U.S. sensitive personal data, the vendor agreement would not be a covered data transaction.
§ 202.259 Venezuela.
The term
Venezuela
means the Bolivarian Republic of Venezuela, and any political subdivision, agency, or instrumentality thereof.
Subpart C—Prohibited Transactions and Related Activities
§ 202.301 Prohibited data-brokerage transactions.
Prohibition.
Except as otherwise authorized pursuant to
subparts E
or
H of this part
or any other provision of this part, no U.S. person, on or after the effective date, may knowingly engage in a covered data transaction involving data brokerage with a country of concern or covered person.
Examples
Example 1.
A U.S. subsidiary of a company headquartered in a country of concern develops an artificial intelligence chatbot in the United States that is trained on the bulk U.S. sensitive personal data of U.S. persons. While not its primary commercial use, the chatbot is capable of reproducing or otherwise disclosing the bulk U.S. sensitive personal health data that was used to train the chatbot when responding to queries. The U.S. subsidiary knowingly licenses subscription-based access to that chatbot worldwide, including to covered persons such as its parent entity. Although licensing use of the chatbot itself may not necessarily “involve access” to bulk U.S. sensitive personal data, the U.S. subsidiary knows or should know that the license can be used to obtain access to the U.S. persons' bulk sensitive personal training data if prompted. The licensing of access to this bulk U.S. sensitive personal data is data brokerage because it involves the transfer of data from the U.S. company (
i.e.,
the provider) to licensees (
i.e.,
the recipients), where the recipients did not collect or process the data directly from the individuals linked or linkable to the collected or processed data. Even though the license did not explicitly provide access to the data, this is a prohibited transaction because the U.S. company knew or should have known that the use of the chatbot pursuant to the license could be used to obtain access to the training data, and because the U.S. company licensed the product to covered persons.
[Reserved]
§ 202.302 Other prohibited data-brokerage transactions involving potential onward transfer to countries of concern or covered persons.
Prohibition.
Except as otherwise authorized pursuant to this part, no U.S. person, on or after the effective date, may knowingly engage in any transaction that involves any access by a foreign person to government-related data or bulk U.S. sensitive personal data and that involves data brokerage with any foreign person that is not a covered person unless the U.S. person:
Contractually requires that the foreign person refrain from engaging in a subsequent covered data transaction involving data brokerage of the same data with a country of concern or covered person; and
Reports any known or suspected violations of this contractual requirement in accordance with
paragraph (b)
of this section.
Reporting known or suspected violations
When reports are due.
U.S. persons shall file reports within 14 days of the U.S. person becoming aware of a known or suspected violation.
Contents of reports.
Reports on known or suspected violations shall include the following, to the extent the information is known and available to the person filing the report at the time of the report:
The name and address of the U.S. person reporting the known or suspected violation of the contractual requirement in accordance with
paragraph (b)
of this section;
ii
A description of the known or suspected violation, including:
Date of known or suspected violation;
Description of the data-brokerage transaction referenced in
paragraph (a)
of this section;
Description of the contractual provision prohibiting the onward transfer of the same data to a country of concern or covered person;
Description of the known or suspected violation of the contractual obligation prohibiting the foreign person from engaging in a subsequent covered data transaction involving the same data with a country of concern or a covered person;
Any persons substantively participating in the transaction referenced in
paragraph (a)
of this section;
Information about the known or suspected persons involved in the onward data transfer transaction, including the name and location of any covered persons or countries of concern;
A copy of any relevant documentation received or created in connection with the transaction; and
iii
Any other information that the Department of Justice may require or any other information that the U.S. person filing the report believes to be pertinent to the known or suspected violation or the implicated covered person.
Additional contents; format and method of submission.
Reports required by this section must be submitted in accordance with this section and with
subpart L of this part
Examples
Example 1.
A U.S. business knowingly enters into an agreement to sell bulk human genomic data to a European business that is not a covered person. The U.S. business is required to include in that agreement a limitation on the European business' right to resell or otherwise engage in a covered data transaction involving data brokerage of that data to a country of concern or covered person. Otherwise, the agreement would be a prohibited transaction.
Example 2.
A U.S. company owns and operates a mobile app for U.S. users with available advertising space. As part of selling the advertising space, the U.S. company provides the bulk precise geolocation data, IP address, and advertising IDs of its U.S. users' devices to an advertising exchange based in Europe that is not a covered person. The U.S. company's provision of this data to the advertising exchange is data brokerage and a prohibited transaction unless the U.S. company obtains a contractual commitment from the advertising exchange not to engage in any covered data transactions involving data brokerage of that same data with a country of concern or covered person.
Example 3.
A U.S. business knowingly enters into an agreement to buy bulk human genomic data from a European business that is not a covered person. This provision does not require the U.S. business to include any contractual limitation because the transaction does not involve access by the foreign person.
§ 202.303 Prohibited human `omic data and human biospecimen transactions.
Except as otherwise authorized pursuant to this part, no U.S. person, on or after the effective date, may knowingly engage in any covered data transaction with a country of concern or covered person that involves access by that country of concern or covered person to bulk U.S. sensitive personal data that involves bulk human `omic data, or to human biospecimens from which bulk human `omic data could be derived.
§ 202.304 Prohibited evasions, attempts, causing violations, and conspiracies.
Prohibition.
Any transaction on or after the effective date that has the purpose of evading or avoiding, causes a violation of, or attempts to violate any of the prohibitions set forth in this part is prohibited. Any conspiracy formed to violate the prohibitions set forth in this part is prohibited.
Examples
Example 1.
A U.S. data broker seeks to sell bulk U.S. sensitive personal data to a foreign person who primarily resides in China. With knowledge that the foreign person is a covered person and with the intent to evade the regulations, the U.S. data broker invites the foreign person to travel to the United States to consummate the data transaction and transfer the bulk U.S. sensitive personal data in the United States. After completing the transaction, the person returns to China with the bulk U.S. sensitive personal data. The transaction in the United States is not a covered data transaction because the person who resides in China is a U.S. person while in the United States (unless that person was individually designated as a covered person pursuant to
§ 202.211(a)(5)
, in which case their covered person status would remain, even while in the United States, and the transaction would be a covered data transaction). However, the U.S. data broker has structured the transaction to evade the regulation's prohibitions on covered data transactions with covered persons. As a result, this transaction has the purpose of evading the regulations and is prohibited.
Example 2.
A Russian national, who is employed by a corporation headquartered in Russia, travels to the United States to conduct business with the Russian company's U.S. subsidiary, including with the purpose of obtaining bulk U.S. sensitive personal data from the U.S. subsidiary. The U.S. subsidiary is a U.S. person, the Russian corporation is a covered person, and the Russian employee is a covered person while outside the United States but a U.S. person while temporarily in the United States (unless that Russian employee was individually designated as a covered person pursuant to
§ 202.211(a)(5)
, in which case their covered person status would remain, even while in the United States, and the transaction would be a covered data transaction). With knowledge of these facts, the U.S. subsidiary licenses access to bulk U.S. sensitive personal data to the Russian employee while in the United States, who then returns to Russia. This transaction has the purpose of evading the regulations and is prohibited.
Example 3.
A U.S. subsidiary of a company headquartered in a country of concern collects bulk precise geolocation data from U.S. persons. The U.S. subsidiary is a U.S. person, and the parent company is a covered person. With the purpose of evading the regulations, the U.S. subsidiary enters into a vendor agreement with a foreign company that is not a covered person. The vendor agreement provides the foreign company access to the data. The U.S. subsidiary knows (or reasonably should know) that the foreign company is a shell company, and knows that it subsequently outsources the vendor agreement to the U.S. subsidiary's parent company. This transaction has the purpose of evading the regulations and is prohibited.
Example 4.
A U.S. company collects bulk personal health data from U.S. persons. With the purpose of evading the regulations, the U.S. company enters into a vendor agreement with a foreign company that is not a covered person. The agreement provides the foreign company access to the data. The U.S. company knows (or reasonably should know) that the foreign company is a front company staffed primarily by covered persons. The U.S. company has not complied with either the security requirements in
§ 202.248
or other applicable requirements for conducting restricted transactions as detailed in
subpart J of this part
. This transaction has the purpose of evading the regulations and is prohibited.
Example 5.
A U.S. online gambling company uses an artificial intelligence algorithm to analyze collected bulk covered personal identifiers to identify users based on impulsivity for targeted advertising. The algorithm is trained on bulk covered personal identifiers and may reveal that raw data. A U.S. subsidiary of a company headquartered in a country of concern knows that the algorithm can reveal the training data. For the purpose of evasion, the U.S. subsidiary licenses the derivative algorithm from the U.S. online gambling company for the purpose of accessing bulk sensitive personal identifiers from the training data that would not otherwise be accessible to the parent company and shares the algorithm with the parent company so that the parent company can obtain the bulk covered personal identifiers. The U.S. subsidiary's licensing transaction with the parent company has the purpose of evading the regulations and is prohibited.
§ 202.305 Knowingly directing prohibited or restricted transactions.
Prohibition.
Except as otherwise authorized pursuant to this part, no U.S. person, on or after the effective date, may knowingly direct any covered data transaction that would be a prohibited transaction or restricted transaction that fails to comply with the requirements of
subpart D of this part
and all other applicable requirements under this part, if engaged in by a U.S. person.
Examples
Example 1.
A U.S. person is an officer, senior manager, or equivalent senior-level employee at a foreign company that is not a covered person, and the foreign company undertakes a covered data transaction at that U.S. person's direction or with that U.S. person's approval when the covered data transaction would be prohibited if performed by a U.S. person. The U.S. person has knowingly directed a prohibited transaction.
Example 2.
Several U.S. persons launch, own, and operate a foreign company that is not a covered person, and that foreign company, under the U.S. persons' operation, undertakes covered data transactions that would be prohibited if performed by a U.S. person. The U.S. persons have knowingly directed a prohibited transaction.
Example 3.
A U.S. person is employed at a U.S.-headquartered multinational company that has a foreign affiliate that is not a covered person. The U.S. person instructs the U.S. company's compliance unit to change (or approve changes to) the operating policies and procedures of the foreign affiliate with the specific purpose of allowing the foreign affiliate to undertake covered data transactions that would be prohibited if performed by a U.S. person. The U.S. person has knowingly directed prohibited transactions.
Example 4.
A U.S. bank processes a payment from a U.S. person to a covered person, or from a covered person to a U.S. person, as part of that U.S. person's engagement in a prohibited transaction. The U.S. bank has not knowingly directed a prohibited transaction, and its activity would not be prohibited (although the U.S. person's covered data transaction would be prohibited).
Example 5.
A U.S. financial institution underwrites a loan or otherwise provides financing for a foreign company that is not a covered person, and the foreign company undertakes covered data transactions that would be prohibited if performed by a U.S. person. The U.S. financial institution has not knowingly directed a prohibited transaction, and its activity would not be prohibited.
Example 6.
A U.S. person, who is employed at a foreign company that is not a covered person, signs paperwork approving the foreign company's procurement of real estate for its operations. The same foreign company separately conducts data transactions that use or are facilitated by operations at that real estate location and that would be prohibited transactions if performed by a U.S. person, but the U.S. employee has no role in approving or directing those separate data transactions. The U.S. person has not knowingly directed a prohibited transaction, and the U.S. person's activity would not be prohibited.
Example 7.
A U.S. company owns or operates a submarine telecommunications cable with one landing point in a foreign country that is not a country of concern and one landing point in a country of concern. The U.S. company leases capacity on the cable to U.S. customers that transmit bulk U.S. sensitive personal data to the landing point in the country of concern, including transmissions as part of prohibited transactions. The U.S. company's ownership or operation of the cable does not constitute knowingly directing a prohibited transaction, and its ownership or operation of the cable would not be prohibited (although the U.S. customers' covered data transactions would be prohibited).
Example 8.
A U.S. person engages in a vendor agreement involving bulk U.S. sensitive personal data with a foreign person who is not a covered person. Such vendor agreement is not a restricted or prohibited transaction. The foreign person then employs an individual who is a covered person and grants them access to bulk U.S. sensitive personal data without the U.S. person's knowledge or direction. There is no covered data transaction between the U.S. person and the covered person, and there is no indication that the parties engaged in these transactions with the purpose of evading the regulations (such as the U.S. person having knowingly directed the foreign person's employment agreement with the covered person or the parties knowingly structuring a restricted transaction into these multiple transactions with the purpose of evading the prohibition). The U.S. person has not knowingly directed a restricted transaction.
Example 9.
A U.S. company sells DNA testing kits to U.S. consumers and maintains bulk human genomic data collected from those consumers. The U.S. company enters into a contract with a foreign cloud-computing company (which is not a covered person) to store the U.S. company's database of human genomic data. The foreign company hires employees from other countries, including citizens of countries of concern who primarily reside in a country of concern, to manage databases for its customers, including the U.S. company's human genomic database. There is no indication of evasion, such as the U.S. company knowingly directing the foreign company's employment agreements or the U.S. company knowingly engaging in and structuring these transactions to evade the regulations. The cloud-computing services agreement between the U.S. company and the foreign company would not be prohibited or restricted because that transaction is between a U.S. person and a foreign company that does not meet the definition of a covered person. The employment agreements between the foreign company and the covered persons would not be prohibited or restricted because those agreements are between foreign persons.
Subpart D—Restricted Transactions
§ 202.401 Authorization to conduct restricted transactions.
Restricted transactions.
Except as otherwise authorized pursuant to
subparts E
or
H of this part
or any other provision of this part, no U.S. person, on or after the effective date, may knowingly engage in a covered data transaction involving a vendor agreement, employment agreement, or investment agreement with a country of concern or covered person unless the U.S. person complies with the security requirements (as defined by
§ 202.248
) required by this subpart D and all other applicable requirements under this part.
This subpart D does not apply to covered data transactions involving access to bulk human `omic data or human biospecimens from which such data can be derived, and which are subject to the prohibition in
§ 202.303
Examples
Example 1.
A U.S. company engages in an employment agreement with a covered person to provide information technology support. As part of their employment, the covered person has access to personal financial data. The U.S. company implements and complies with the security requirements. The employment agreement is authorized as a restricted transaction because the company has complied with the security requirements.
Example 2.
A U.S. company engages in a vendor agreement with a covered person to store bulk personal health data. Instead of implementing the security requirements as identified by reference in this subpart D, the U.S. company implements different controls that it believes mitigate the covered person's access to the bulk personal health data. Because the U.S. person has not complied with the security requirements, the vendor agreement is not authorized and thus is a prohibited transaction.
Example 3.
A U.S. person engages in a vendor agreement involving bulk U.S. sensitive personal data with a foreign person who is not a covered person. The foreign person then employs an individual who is a covered person and grants them access to bulk U.S. sensitive personal data without the U.S. person's knowledge or direction. There is no covered data transaction between the U.S. person and the covered person, and there is no indication that the parties engaged in these transactions with the purpose of evading the regulations (such as the U.S. person having knowingly directed the foreign person's employment agreement with the covered person or the parties knowingly structuring a prohibited transaction into these multiple transactions with the purpose of evading the prohibition). As a result, neither the vendor agreement nor the employment agreement would be a restricted transaction.
90 FR 1706
, Jan. 8, 2025, as amended at
90 FR 16466
, Apr. 18, 2025]
§ 202.402 [Reserved]
Subpart E—Exempt Transactions
§ 202.501 Personal communications.
This part does not apply to data transactions to the extent that they involve any postal, telegraphic, telephonic, or other personal communication that does not involve the transfer of anything of value.
§ 202.502 Information or informational materials.
This part does not apply to data transactions to the extent that they involve the importation from any country, or the exportation to any country, whether commercial or otherwise, regardless of format or medium of transmission, of any information or informational materials.
§ 202.503 Travel.
This part does not apply to data transactions to the extent that they are ordinarily incident to travel to or from any country, including importation of accompanied baggage for personal use; maintenance within any country, including payment of living expenses and acquisition of goods or services for personal use; and arrangement or facilitation of such travel, including nonscheduled air, sea, or land voyages.
§ 202.504 Official business of the United States Government.
Exemption.
Subparts C, and D, J, and K (other than
§ 202.1102
and
§ 202.1104
) of this part do not apply to data transactions to the extent that they are for the conduct of the official business of the United States Government by its employees, grantees, or contractors; any authorized activity of any United States Government department or agency (including an activity that is performed by a Federal depository institution or credit union supervisory agency in the capacity of receiver or conservator); or transactions conducted pursuant to a grant, contract, or other agreement entered into with the United States Government.
Examples
Example 1.
A U.S. hospital receives a Federal grant to conduct human genomic research on U.S. persons. As part of that federally funded human genomic research, the U.S. hospital contracts with a foreign laboratory that is a covered person, hires a researcher that is a covered person, and gives the laboratory and researcher access to the human biospecimens and human genomic data in bulk. The contract with the foreign laboratory and the employment of the researcher are exempt transactions but would be prohibited transactions if they were not part of the federally funded research.
Example 2.
A U.S. research institution receives a Federal grant to conduct human genomic research on U.S. and foreign persons. The Federal grant directs the U.S. research institution to publicize the results of its research, including the underlying human genomic data, via an internet-accessible database open to public health researchers with valid log-in credentials who pay a small annual fee to access the database, including covered persons primarily resident in a country of concern. The Federal grant does not cover the full costs of the authorized human genomic research or creation and publication of the database. The U.S. research institution obtains funds from private institutions and donors to fund the remaining costs. The human genomic research authorized by the Federal grant and publication of the database at the direction of the Federal grant would constitute a “transaction[ ] conducted pursuant to a grant, contract, or other agreement entered into with the United States Government.” The U.S. research institution must still comply with any requirements or prohibitions on sharing bulk U.S. sensitive personal data with countries of concern or covered persons required by the Federal grantmaker.
Example 3.
Same as Example 2, but the Federal grant is limited in scope to funding the U.S. research institution's purchase of equipment needed to conduct the human genomic research and does not include funding related to publication of the data. The Federal grant does not direct or authorize the U.S. research institution to publicize the human genomic research or make it available to country of concern or covered person researchers via the database for which researchers pay an annual fee to access, or otherwise fund the conduct of the human genomic research. The U.S. research institution contracts with a foreign laboratory that is a covered person and gives the laboratory access to the bulk human genomic data. The contract with the foreign laboratory is not an exempt transaction because that transaction is not within the scope of the Federal grant.
§ 202.505 Financial services.
Exemption.
Subparts C, D, J, and K (other than
§ 202.1102
and
§ 202.1104
) of this part do not apply to data transactions, to the extent that they are ordinarily incident to and part of the provision of financial services, including:
Banking, capital-markets (including investment-management services as well as trading and underwriting of securities, commodities, and derivatives), or financial-insurance services;
A financial activity authorized for national banks by
12 U.S.C. 24
(Seventh) and rules and regulations and written interpretations of the Office of the Comptroller of the Currency thereunder;
An activity that is “financial in nature or incidental to such financial activity” or “complementary to a financial activity,” section (k)(1), as set forth in section (k)(4) of the Bank Holding Company Act of 1956 (
12 U.S.C. 1843(k)(4)
) and rules and regulations and written interpretations of the Board of Governors of the Federal Reserve System thereunder;
The transfer of personal financial data or covered personal identifiers incidental to the purchase and sale of goods and services (such as the purchase, sale, or transfer of consumer products and services through online shopping or e-commerce marketplaces);
The provision or processing of payments or funds transfers (such as person-to-person, business-to-person, and government-to-person funds transfers) involving the transfer of personal financial data or covered personal identifiers, or the provision of services ancillary to processing payments and funds transfers (such as services for payment dispute resolution, payor authentication, tokenization, payment gateway, payment fraud detection, payment resiliency, mitigation and prevention, and payment-related loyalty point program administration); and
The provision of investment-management services that manage or provide advice on investment portfolios or individual assets for compensation (such as devising strategies and handling financial assets and other investments for clients) or provide services ancillary to investment-management services (such as broker-dealers or futures commission merchants executing trades within an investment portfolio based upon instructions from an investment advisor).
Examples
Example 1.
A U.S. company engages in a data transaction to transfer personal financial data in bulk to a financial institution that is incorporated in, located in, or subject to the jurisdiction or control of a country of concern to clear and settle electronic payment transactions between U.S. individuals and merchants in a country of concern where both the U.S. individuals and the merchants use the U.S. company's infrastructure, such as an e-commerce platform. Both the U.S. company's transaction transferring bulk personal financial data and the payment transactions by U.S. individuals are exempt transactions because they involve access by a covered person to bulk personal financial data, but are ordinarily incident to and part of a financial service.
Example 2.
As ordinarily incident to and part of securitizing and selling asset-backed obligations (such as mortgage and nonmortgage loans) to a covered person, a U.S. bank provides bulk U.S. sensitive personal data to the covered person. The data transfers are exempt transactions because they involve access by a covered person to bulk personal financial data, but are ordinarily incident to and part of a financial service.
Example 3.
A U.S. bank or other financial institution, as ordinarily incident to and part of facilitating payments to U.S. persons in a country of concern, stores and processes the customers' bulk financial data using a data center operated by a third-party service provider in the country of concern. The use of this third-party service provider is a vendor agreement because it involves access by a covered person to personal financial data, but it is an exempt transaction that is ordinarily incident to and part of facilitating international payment.
Example 4.
Same as Example 3, but the underlying payments are between U.S. persons in the United States and do not involve a country of concern. The use of this third-party service provider is a vendor agreement, but it is not an exempt transaction because it involves access by a covered person to bulk personal financial data and it is not ordinarily incident to facilitating this type of financial activity.
Example 5.
As part of operating an online marketplace for the purchase and sale of goods, a U.S. company, as ordinarily incident to and part of U.S. consumers' purchase of goods on that marketplace, transfers bulk contact information, payment information (
e.g.,
credit-card account number, expiration data, and security code), and delivery address to a merchant in a country of concern. The data transfers are exempt transactions because they involve access by a covered person to bulk personal financial data, but they are ordinarily incident to and part of U.S. consumers' purchase of goods.
Example 6.
A U.S. investment adviser purchases securities of a company incorporated in a country of concern for the accounts of its clients. The investment adviser engages a broker-dealer located in a country of concern to execute the trade, and, as ordinarily incident to and part of the transaction, transfers to the broker-dealer its clients' covered personal identifiers and financial account numbers in bulk. This provision of data is an exempt transaction because it involves access by a covered person to bulk personal financial data, but it is ordinarily incident to and part of the provision of investment-management services.
Example 7.
A U.S. company that provides payment-processing services sells bulk U.S. sensitive personal data to a covered person. This sale is prohibited data brokerage and is not an exempt transaction because it involves access by a covered person to bulk personal financial data and is not ordinarily incident to and part of the payment-processing services provided by the U.S. company.
Example 8.
A U.S. bank facilitates international funds transfers to foreign persons not related to a country of concern, but through intermediaries or locations subject to the jurisdiction or control of a country of concern. These transfers result in access to bulk financial records by some covered persons to complete the transfers and manage associated risks. Providing this access as part of these transfers is ordinarily incident to the provision of financial services and is exempt.
Example 9.
A U.S. insurance company underwrites personal insurance to U.S. persons residing in foreign countries in the same region as a country of concern. The insurance company relies on its own business infrastructure and personnel in the country of concern to support its financial activity in the region, which results in access to the bulk U.S. sensitive personal data of some U.S.-person customers residing in the region, to covered persons at the insurance company supporting these activities. Providing this access is ordinarily incident to the provision of financial services and is exempt.
10
Example 10.
A U.S. financial services provider operates a foreign branch in a country of concern and provides financial services to U.S. persons living within the country of concern. The financial services provider receives a lawful request from the regulator in the country of concern to review the financial activity conducted in the country, which includes providing access to the bulk U.S. sensitive personal data of U.S. persons resident in the country or U.S. persons conducting transactions through the foreign branch. The financial services provider is also subject to ongoing and routine reporting requirements from various regulators in the country of concern. Responding to the regulator's request, including providing access to this bulk U.S. sensitive personal data, is ordinarily incident to the provision of financial services and is exempt.
11
Example 11.
A U.S. bank voluntarily shares information, including relevant bulk U.S. sensitive personal data, with financial institutions organized under the laws of a country of concern for the purposes of, and consistent with industry practices for, fraud identification, combatting money laundering and terrorism financing, and U.S. sanctions compliance. Sharing this data for these purposes involves access by a covered person to bulk personal financial data, but is ordinarily incident to the provision of financial services and is exempt.
12
Example 12.
A U.S. company provides wealth-management services and collects bulk personal financial data on its U.S. clients. The U.S. company appoints a citizen of a country of concern, who is located in a country of concern, to its board of directors. In connection with the board's data security and cybersecurity responsibilities, the director could compel company personnel or influence company policies or practices to provide the director access to the underlying bulk personal financial data the company collects on its U.S. clients. The appointment of the director, who is a covered person, is a restricted employment agreement and is not exempt because the board member does not need to access, and in normal circumstances would not be able to access, the bulk financial data to perform his or her responsibilities. The board member's access to the bulk personal financial data is not ordinarily incident to the U.S. company's provision of wealth-management services.
§ 202.506 Corporate group transactions.
Subparts C, D, J, and K (other than
§ 202.1102
and
§ 202.1104
) of this part do not apply to data transactions to the extent they are:
Between a U.S. person and its subsidiary or affiliate located in (or otherwise subject to the ownership, direction, jurisdiction, or control of) a country of concern; and
Ordinarily incident to and part of administrative or ancillary business operations, including:
Human resources;
ii
Payroll, expense monitoring and reimbursement, and other corporate financial activities;
iii
Paying business taxes or fees;
iv
Obtaining business permits or licenses;
Sharing data with auditors and law firms for regulatory compliance;
vi
Risk management;
vii
Business-related travel;
viii
Customer support;
ix
Employee benefits; and
Employees' internal and external communications.
Examples
Example 1.
A U.S. company has a foreign subsidiary located in a country of concern, and the U.S. company's U.S.-person contractors perform services for the foreign subsidiary. As ordinarily incident to and part of the foreign subsidiary's payments to the U.S.-person contractors for those services, the U.S. company engages in a data transaction that gives the subsidiary access to the U.S.-person contractors' bulk personal financial data and covered personal identifiers. This is an exempt corporate group transaction.
Example 2.
A U.S. company aggregates bulk personal financial data. The U.S. company has a subsidiary that is a covered person because it is headquartered in a country of concern. The subsidiary is subject to the country of concern's national security laws requiring it to cooperate with and assist the country's intelligence services. The exemption for corporate group transactions would not apply to the U.S. parent's grant of a license to the subsidiary to access the parent's databases containing the bulk personal financial data for the purpose of complying with a request or order by the country of concern under those national security laws to provide access to that data because granting of such a license is not ordinarily incident to and part of administrative or ancillary business operations.
Example 3.
A U.S. company's affiliate operates a manufacturing facility in a country of concern for one of the U.S. company's products. The affiliate uses employee fingerprints as part of security and identity verification to control access to that facility. To facilitate its U.S. employees' access to that facility as part of their job responsibilities, the U.S. company provides the fingerprints of those employees in bulk to its affiliate. The transaction is an exempt corporate group transaction.
Example 4.
A U.S. company has a foreign subsidiary located in a country of concern that conducts research and development for the U.S. company. The U.S. company sends bulk personal financial data to the subsidiary for the purpose of developing a financial software tool. The transaction is not an exempt corporate group transaction because it is not ordinarily incident to and part of administrative or ancillary business operations.
Example 5.
Same as Example 4, but the U.S. company has a foreign branch located in a country of concern instead of a foreign subsidiary. Because the foreign branch is a U.S. person as part of the U.S. company, the transaction occurs within the same U.S. person and is not subject to the prohibitions or restrictions. If the foreign branch allows employees who are covered persons to access the bulk personal financial data to develop the financial software tool, the foreign branch has engaged in restricted transactions.
Example 6.
A U.S. financial services provider has a subsidiary located in a country of concern. Customers of the U.S. company conduct financial transactions in the country of concern, and customers of the foreign subsidiary conduct financial transactions in the United States. To perform customer service functions related to these financial transactions, the foreign subsidiary accesses bulk U.S. sensitive personal data—specifically, personal financial data. The corporate group transactions exemption would apply to the foreign subsidiary's access to the personal financial data under these circumstances because it is ordinarily incident to and part of the provision of customer support. The foreign subsidiary's access to the personal financial data would also be covered by the financial services exemption.
§ 202.507 Transactions required or authorized by Federal law or international agreements, or necessary for compliance with Federal law.
Required or authorized by Federal law or international agreements.
Subparts C, D, J, and K (other than
§ 202.1102
and
§ 202.1104
) of this part do not apply to data transactions to the extent they are required or authorized by Federal law or pursuant to an international agreement to which the United States is a party, including relevant provisions in the following:
Annex 9 to the Convention on International Civil Aviation, International Civil Aviation Organization Doc. 7300 (2022);
Section 2 of the Convention on Facilitation of International Maritime Traffic (1965);
Articles 1, 12, 14, and 16 of the Postal Payment Services Agreement (2021);
Articles 63, 64, and 65 of the Constitution of the World Health Organization (1946);
Article 2 of the Agreement Between the Government of the United States of America and the Government of the People's Republic of China Regarding Mutual Assistance in Customs Matters (1999);
Article 7 of the Agreement Between the Government of the United States of America and the Government of the People's Republic of China on Mutual Legal Assistance in Criminal Matters (2000);
Article 25 of the Agreement Between the Government of the United States of America and the Government of the People's Republic of China for the Avoidance of Double Taxation and the Prevention of Tax Evasion with Respect to Taxes on Income (1987);
Article 2 of the Agreement Between the United States of America and the Macao Special Administrative Region of the People's Republic of China for Cooperation to Facilitate the Implementation of FATCA (2021);
The Agreement between the Government of the United States and the Government of the People's Republic of China on Cooperation in Science and Technology (1979), as amended and extended;
10
Articles II, III, VII of the Protocol to Extend and Amend the Agreement Between the Department of Health and Human Services of the United States of America and the National Health and Family Planning Commission of the People's Republic of China for Cooperation in the Science and Technology of Medicine and Public Health (2013);
11
Article III of the Treaty Between the United States and Cuba for the Mutual Extradition of Fugitives from Justice (1905);
12
Articles 3, 4, 5, 7 of the Agreement Between the Government of the United States of America and the Government of the Russian Federation on Cooperation and Mutual Assistance in Customs Matters (1994);
13
Articles 1, 2, 5, 7, 13, and 16 of the Treaty Between the United States of America and the Russian Federation on Mutual Legal Assistance in Criminal Matters (1999);
14
Articles I, IV, IX, XV, and XVI of the Treaty Between the Government of the United States of America and the Government of the Republic of Venezuela on Mutual Legal Assistance in Criminal Matters (1997); and
15
Articles 5, 6, 7, 9, 11, 19, 35, and 45 of the International Health Regulations (2005).
Global health and pandemic preparedness.
Subparts C
and
D of this part
do not apply to data transactions to the extent they are required or authorized by the following:
The Pandemic Influenza Preparedness and Response Framework; and
The Global Influenza Surveillance and Response System.
Compliance with Federal law.
Subparts C
and
D of this part
do not apply to data transactions to the extent that they are ordinarily incident to and part of ensuring compliance with any Federal laws and regulations, including the Bank Secrecy Act,
12 U.S.C. 1829b
1951
through
1960
31 U.S.C. 310
5311
through
5314
5316
through
5336
; the Securities Act of 1933,
15 U.S.C. 77a
et seq.;
the Securities Exchange Act of 1934,
15 U.S.C. 78a
et seq.;
the Investment Company Act of 1940,
15 U.S.C. 80a-1
et seq.;
the Investment Advisers Act of 1940,
15 U.S.C. 80b-1
et seq.;
the International Emergency Economic Powers Act,
50 U.S.C. 1701
et seq.;
the Export Administration Regulations,
15 CFR 730
et seq.;
or any notes, guidance, orders, directives, or additional regulations related thereto.
Examples
Example 1.
A U.S. bank or other financial institution engages in a covered data transaction with a covered person that is ordinarily incident to and part of ensuring compliance with U.S. laws and regulations (such as OFAC sanctions and anti-money laundering programs required by the Bank Secrecy Act). This is an exempt transaction.
[Reserved]
§ 202.508 Investment agreements subject to a CFIUS action.
Exemption.
Subparts C, D, J, and K (other than
§ 202.1102
and
§ 202.1104
) of this part do not apply to data transactions to the extent that they involve an investment agreement that is subject to a CFIUS action.
Examples
Example 1.
A U.S. software provider is acquired in a CFIUS covered transaction by a foreign entity in which the transaction parties sign a mitigation agreement with CFIUS. The agreement has provisions governing the acquirer's ability to access the data of the U.S. software provider and their customers. The mitigation agreement contains a provision stating that it is a CFIUS action for purposes of this part. Before the effective date of the CFIUS mitigation agreement, the investment agreement is not subject to a CFIUS action and remains subject to these regulations to the extent otherwise applicable. Beginning on the effective date of the CFIUS mitigation agreement, the investment agreement is subject to a CFIUS action and exempt from this part.
Example 2.
Same as Example 1, but CFIUS issues an interim order before entering a mitigation agreement. The interim order states that it constitutes a CFIUS action for purposes of this part. Before the effective date of the interim order, the investment agreement is not subject to a CFIUS action and remains subject to these regulations to the extent otherwise applicable. Beginning on the effective date of the interim order, the investment agreement is subject to a CFIUS action and is exempt from this part. The mitigation agreement also states that it constitutes a CFIUS action for purposes of this part. After the effective date of the mitigation agreement, the investment agreement remains subject to a CFIUS action and is exempt from this part.
Example 3.
A U.S. biotechnology company is acquired by a foreign multinational corporation. CFIUS reviews this acquisition and concludes action without mitigation. This acquisition is not subject to a CFIUS action, and the acquisition remains subject to this part to the extent otherwise applicable.
Example 4.
A U.S. manufacturer is acquired by a foreign owner in which the transaction parties sign a mitigation agreement with CFIUS. The mitigation agreement provides for supply assurances and physical access restrictions but does not address data security, and it does not contain a provision explicitly designating that it is a CFIUS action. This acquisition is not subject to a CFIUS action, and the acquisition remains subject to this part to the extent otherwise applicable.
Example 5.
As a result of CFIUS's review and investigation of a U.S. human genomic company's acquisition by a foreign healthcare company, CFIUS refers the transaction to the President with a recommendation to require the foreign acquirer to divest its interest in the U.S. company. The President issues an order prohibiting the transaction and requiring divestment of the foreign healthcare company's interests and rights in the human genomic company. The presidential order itself does not constitute a CFIUS action. Unless CFIUS takes action, such as by entering into an agreement or imposing conditions to address risk prior to completion of the divestment, the transaction remains subject to this part to the extent otherwise applicable for as long as the investment agreement remains in existence following the presidential order and prior to divestment.
Example 6.
A U.S. healthcare company and foreign acquirer announce a transaction that they believe will be subject to CFIUS jurisdiction and disclose that they intend to file a joint voluntary notice soon. No CFIUS action has occurred yet, and the transaction remains subject to this part to the extent otherwise applicable.
Example 7.
Same as Example 6, but the transaction parties file a joint voluntary notice with CFIUS. No CFIUS action has occurred yet, and the transaction remains subject to this part to the extent otherwise applicable.
Example 8.
Company A, a covered person, acquires 100% of the equity and voting interest of Company B, a U.S. business that maintains bulk U.S. sensitive personal data of U.S. persons. After completing the transaction, the parties fail to implement the security requirements and other conditions required under this part. Company A and Company B later submit a joint voluntary notice to CFIUS with respect to the transaction. Upon accepting the notice, CFIUS determines that the transaction is a covered transaction and takes measures to mitigate interim risk that may arise as a result of the transaction until such time that the Committee has completed action, pursuant to
50 U.S.C. 4565(l)(3)(A)(iii)
. The interim order states that it constitutes a CFIUS action for purposes of this part. Beginning on the effective date of these measures imposed by the interim order, the security requirements and other applicable conditions under this part no longer apply to the transaction. The Department of Justice, however, may take enforcement action under this part, in coordination with CFIUS, with respect to the violations that occurred before the effective date of the interim order issued by CFIUS.
Example 9.
Same as Example 8, but before engaging in the investment agreement for the acquisition, Company A and Company B submit the joint voluntary notice to CFIUS, CFIUS determines that the transaction is a CFIUS covered transaction, CFIUS identifies a risk related to data security arising from the transaction, and CFIUS negotiates and enters into a mitigation agreement with the parties to resolve that risk. The mitigation agreement contains a provision stating that it is a CFIUS action for purposes of this part. Because a CFIUS action has occurred before the parties engage in the investment agreement, the acquisition is exempt from this part.
10
Example 10.
Same as Example 8, but before engaging in the investment agreement for the acquisition, the parties implement the security requirements and other conditions required under these regulations. Company A and Company B then submit a joint voluntary notice to CFIUS, which determines that the transaction is a CFIUS covered transaction. CFIUS identifies a risk related to data security arising from the transaction but determines that the regulations in this part adequately resolve the risk. CFIUS concludes action with respect to the transaction without taking any CFIUS action. Because no CFIUS action has occurred, the transaction remains subject to this part.
11
Example 11.
Same facts as Example 10, but CFIUS determines that the security requirements and other conditions applicable under this part are inadequate to resolve the national security risk identified by CFIUS. CFIUS negotiates a mitigation agreement with the parties to resolve the risk, which contains a provision stating that it is a CFIUS action for purposes of this part. The transaction is exempt from this part beginning on the effective date of the CFIUS mitigation agreement.
§ 202.509 Telecommunications services.
Exemption.
Subparts C, D, J, and K (other than
§ 202.1102
and
§ 202.1104
) of this part do not apply to data transactions, other than those involving data brokerage, to the extent that they are ordinarily incident to and part of the provision of telecommunications services.
Examples
Example 1.
A U.S. telecommunications service provider collects covered personal identifiers from its U.S. subscribers. Some of those subscribers travel to a country of concern and use their mobile phone service under an international roaming agreement. The local telecommunications service provider in the country of concern shares these covered personal identifiers with the U.S. service provider for the purposes of either helping provision service to the U.S. subscriber or receiving payment for the U.S. subscriber's use of the country of concern service provider's network under that international roaming agreement. The U.S. service provider provides the country of concern service provider with network or device information for the purpose of provisioning services and obtaining payment for its subscribers' use of the local telecommunications service provider's network. Over the course of 12 months, the volume of network or device information shared by the U.S. service provider with the country of concern service provider for the purpose of provisioning services exceeds the applicable bulk threshold. These transfers of bulk U.S. sensitive personal data are ordinarily incident to and part of the provision of telecommunications services and are thus exempt transactions.
Example 2.
A U.S. telecommunications service provider collects precise geolocation data on its U.S. subscribers. The U.S. telecommunications service provider sells this precise geolocation data in bulk to a covered person for the purpose of targeted advertising. This sale is not ordinarily incident to and part of the provision of telecommunications services and remains a prohibited transaction.
§ 202.510 Drug, biological product, and medical device authorizations.
Exemption.
Except as specified in
paragraph (a)(2)
of this section, subparts C, D, J, and K (other than
§ 202.1102
and
§ 202.1104
) of this part do not apply to a data transaction that
Involves “regulatory approval data” as defined in
paragraph (b)
of this section and
Is necessary to obtain or maintain regulatory authorization or approval to research or market a drug, biological product, device, or a combination product, provided that the U.S. person complies with the recordkeeping and reporting requirements set forth in
§§ 202.1101(a)
and
202.1102
with respect to such transaction.
Regulatory approval data.
For purposes of this section, the term
regulatory approval data
means sensitive personal data that is de-identified or pseudonymized consistent with the standards of
21 CFR 314.80
and that is required to be submitted to a regulatory entity, or is required by a regulatory entity to be submitted to a covered person, to obtain or maintain authorization or approval to research or market a drug, biological product, device, or combination product, including in relation to post-marketing studies and post-marketing product surveillance activities, and supplemental product applications for additional uses. The term excludes sensitive personal data not reasonably necessary for a regulatory entity to assess the safety and effectiveness of the drug, biological product, device, or combination product.
Other terms.
For purposes of this section, the terms “drug,” “biological product,” “device,” and “combination product” have the meanings given to them in
21 U.S.C. 321(g)(1)
42 U.S.C. 262(i)(1)
21 U.S.C. 321(h)(1)
, and
21 CFR 3.2(e)
, respectively.
Examples
Example 1.
A U.S. pharmaceutical company seeks to market a new drug in a country of concern. The company submits a marketing application to the regulatory entity in the country of concern with authority to approve the drug in the country of concern. The marketing application includes the safety and effectiveness data reasonably necessary to obtain regulatory approval in that country. The transfer of data to the country of concern's regulatory entity is exempt from the prohibitions in this part.
Example 2.
Same as Example 1, except the regulatory entity in the country of concern requires that the data be de-anonymized. The transfer of data is not exempt under this section, because the data includes sensitive personal data that is identified to an individual.
Example 3.
Same as Example 1, except country of concern law requires foreign pharmaceutical companies to submit regulatory approval data using (1) a registered agent who primarily resides in the country of concern, (2) a country of concern incorporated subsidiary, or (3) an employee located in a country of concern. The U.S. pharmaceutical company enters into a vendor agreement with a registered agent in the country of concern to submit the regulatory approval data to the country of concern regulator. The U.S. pharmaceutical company provides to the registered agent only the regulatory approval data the U.S. pharmaceutical company intends the registered agent to submit to the country of concern regulator. The transaction with the registered agent is exempt, because it is necessary to obtain approval to market the drug in a country of concern. The U.S. pharmaceutical company must comply with the recordkeeping and reporting requirements set forth in
§§ 202.1101(a)
and
202.1102
with respect to such transaction, however.
Example 4.
Same as Example 1, except the U.S. company enters a vendor agreement with a covered person located in the country of concern to store and organize the bulk U.S. sensitive personal data for eventual submission to the country of concern regulator. Country of concern law does not require foreign pharmaceutical companies to enter into such vendor agreements. The transaction is not exempt under this section, because the use of a covered person to store and organize the bulk U.S. sensitive personal data for the company's regulatory submission is not necessary to obtain regulatory approval.
Example 5.
A U.S. pharmaceutical company has obtained regulatory approval to market a new drug in a country of concern. The country of concern regulator requires the U.S. pharmaceutical company to submit de-identified sensitive personal data collected as part of the company's post-marketing product surveillance activities to assess the safety and efficacy of the drug to the country of concern regulator via a country of concern registered agent to maintain the U.S. pharmaceutical company's authorization to market the drug. Sharing the de-identified sensitive personal data with the country of concern regulator via the country of concern registered agent to maintain marketing authorization is exempt from the prohibitions and restrictions in
subparts C
and
D of this part
Example 6.
A U.S. medical device manufacturer provides de-identified bulk U.S. personal health data to a country of concern regulator to obtain authorization to research the safety and effectiveness of a medical device in the country of concern. Country of concern law requires medical device manufacturers to conduct such safety research to obtain regulatory approval to market a new device. The prohibitions and restrictions of
subparts C
and
D of this part
do not apply to the de-identified regulatory approval data submitted to the country of concern regulator to obtain authorization to research the device's safety and effectiveness.
§ 202.511 Other clinical investigations and post-marketing surveillance data.
Exemption.
Subparts C, D, J, and K (other than
§ 202.1102
and
§ 202.1104
) of this part do not apply to data transactions to the extent that those transactions are:
Ordinarily incident to and part of clinical investigations regulated by the U.S. Food and Drug Administration (“FDA”) under sections 505(i) and 520(g) of the Federal Food, Drug, and Cosmetic Act (“FD&C Act”) or clinical investigations that support applications to the FDA for research or marketing permits for drugs, biological products, devices, combination products, or infant formula; or
Ordinarily incident to and part of the collection or processing of clinical care data indicating real-world performance or safety of products, or the collection or processing of post-marketing surveillance data (including pharmacovigilance and post-marketing safety monitoring), and necessary to support or maintain authorization by the FDA, provided the data is de-identified or pseudonymized consistent with the standards of
21 CFR 314.80
Other terms.
For purposes of this section, the terms “drug,” “biological product,” “device,” “combination product,” and “infant formula” have the meanings given to them in
21 U.S.C. 321(g)(1)
42 U.S.C. 262(i)(1)
21 U.S.C. 321(h)(1)
21 CFR 3.2(e)
, and
21 U.S.C. 321(z)
respectively.
Subpart F—Determination of Countries of Concern
§ 202.601 Determination of countries of concern.
Countries of concern.
Solely for purposes of the Order and this part, the Attorney General has determined, with the concurrence of the Secretaries of State and Commerce, that the following foreign governments have engaged in a long-term pattern or serious instances of conduct significantly adverse to the national security of the United States or security and safety of U.S. persons and pose a significant risk of exploiting government-related data or bulk U.S. sensitive personal data to the detriment of the national security of the United States or security and safety of U.S. persons:
China;
Cuba;
Iran;
North Korea;
Russia; and
Venezuela.
Effective date of amendments.
Any amendment to the list of countries of concern will apply to any covered data transaction that is initiated, pending, or completed on or after the effective date of the amendment.
Subpart G—Covered Persons
§ 202.701 Designation of covered persons.
Designations.
The Attorney General may designate any person as a covered person for purposes of this part if, after consultation with the Department of State and any other agencies as the Attorney General deems appropriate, the Attorney General determines the person meets any of the criteria set forth in
§ 202.211(a)(5) of this part
Information considered.
In determining whether to designate a person as a covered person, the Attorney General may consider any information or material the Attorney General deems relevant and appropriate, classified or unclassified, from any Federal department or agency or from any other source.
Covered Persons List.
The names of persons designated as a covered person for purposes of this part, transactions with whom are prohibited or restricted pursuant to this part, are published in the
Federal Register
and incorporated into the National Security Division's Covered Persons List. The Covered Persons List is accessible through the following page on the National Security Division's website at
Non-exhaustive.
The list of designated covered persons described in this section is not exhaustive of all covered persons and supplements the categories in the definition of covered persons in
§ 202.211
Effective date; actual and constructive knowledge.
Designation as a covered person will be effective from the date of any public announcement by the Department. Except as otherwise authorized in this part, a U.S. person with actual knowledge of a designated person's status is prohibited from knowingly engaging in a covered data transaction with that person on or after the date of the Department's public announcement.
Publication in the
Federal Register
is deemed to provide constructive knowledge of a person's status as a covered person.
§ 202.702 Procedures governing removal from the Covered Persons List.
Requests for removal from the Covered Persons List.
A person may petition to seek administrative reconsideration of their designation, or may assert that the circumstances resulting in the designation no longer apply, and thus seek to be removed from the Covered Persons List pursuant to the following administrative procedures:
Content of requests.
A covered person designated under
paragraph (a)
of this section may submit arguments or evidence that the person believes establish that insufficient basis exists for the designation. Such a person also may propose remedial steps on the person's part, such as corporate reorganization, resignation of persons from positions in a listed entity, or similar steps, that the person believes would negate the basis for designation.
Additional content; form and method of submission.
Requests for removal from the Covered Persons List must be submitted in accordance with this section and with
subpart L of this part
Requests for more information.
The information submitted by the listed person seeking removal will be reviewed by the Attorney General, who may request clarifying, corroborating, or other additional information.
Meetings.
A person seeking removal may request a meeting with the Attorney General; however, such meetings are not required, and the Attorney General may, in the Attorney General's discretion, decline to conduct such a meeting prior to completing a review pursuant to this section.
Decisions.
After the Attorney General has conducted a review of the request for removal, and after consultation with other agencies as the Attorney General deems appropriate, the Attorney General will provide a written decision to the person seeking removal. A covered person's status as a covered person—including its associated prohibitions and restrictions under this part—remains in effect during the pendency of any request to be removed from the Covered Persons List.
Subpart H—Licensing
§ 202.801 General licenses.
General course of procedure.
The Department may, as appropriate, issue general licenses to authorize, under appropriate terms and conditions, transactions that are subject to the prohibitions or restrictions in this part. In determining whether to issue a general license, the Attorney General may consider any information or material the Attorney General deems relevant and appropriate, classified or unclassified, from any Federal department or agency or from any other source.
Relationship with specific licenses.
It is the policy of the Department not to grant applications for specific licenses authorizing transactions to which the provisions of a general license are applicable.
Reports.
Persons availing themselves of certain general licenses may be required to file reports and statements in accordance with the instructions specified in those licenses, this part or the Order. Failure to file timely all required information in such reports or statements may nullify the authorization otherwise provided by the general license and result in apparent violations of the applicable prohibitions that may be subject to enforcement action.
§ 202.802 Specific licenses.
General course of procedure.
Transactions subject to the prohibitions or restrictions in this part or the Order, and that are not otherwise permitted under this part or a general license, may be permitted only under a specific license, under appropriate terms and conditions.
Content of applications for specific licenses.
Applications for specific licenses shall include, at a minimum, a description of the nature of the transaction, including each of the following requirements:
The types and volumes of government-related data or bulk U.S. sensitive personal data involved in the transactions;
The identity of the transaction parties, including any ownership of entities or citizenship or primary residence of individuals;
The end-use of the data and the method of data transfer; and
Any other information that the Attorney General may require.
Additional content; form and method of submissions.
Requests for specific licenses must be submitted in accordance with this section and with
subpart L of this part
Additional conditions.
Applicants should submit only one copy of a specific license application to the Department; submitting multiple copies may result in processing delays. Any person having an interest in a transaction or proposed transaction may file an application for a specific license authorizing such a transaction.
Further information to be supplied.
Applicants may be required to furnish such further information as the Department deems necessary to assist in making a determination. Any applicant or other party-in-interest desiring to present additional information concerning a specific license application may do so at any time before or after the Department makes its decision with respect to the application. In unique circumstances, the Department may determine, in its discretion, that an oral presentation regarding a license application would assist in the Department's review of the issues involved. Any requests to make such an oral presentation must be submitted electronically by emailing the National Security Division at
NSD.FIRS.datasecurity@usdoj.gov
or using another official method to make such requests, in accordance with any instructions on the National Security Division's website.
Decisions.
In determining whether to issue a specific license, the Attorney General may consider any information or material the Attorney General deems relevant and appropriate, classified or unclassified, from any Federal department or agency or from any other source. The Department will advise each applicant of the decision respecting the applicant's filed application. The Department's decision with respect to a license application shall constitute final agency action.
Time to issuance.
The Department shall endeavor to respond to any request for a specific license within 45 days after receipt of the request and of any requested additional information and documents.
Scope.
Unless otherwise specified in the license, a specific license authorizes the transaction:
Only between the parties identified in the license;
ii
Only with respect to the data described in the license; and
iii
Only to the extent the conditions specified in the license are satisfied. The applicant must inform any other parties identified in the license of the license's scope and of the specific conditions applicable to them.
The Department will determine whether to grant specific licenses in reliance on representations the applicant made or submitted in connection with the license application, letters of explanation, and other documents submitted. Any license obtained based on a false or misleading representation in the license application, in any document submitted in connection with the license application, or during an oral presentation under this section shall be deemed void as of the date of issuance.
Reports under specific licenses.
As a condition for the issuance of any specific license, the licensee may be required to file reports or statements with respect to the transaction or transactions authorized by the specific license in such form and at such times as may be prescribed in the license. Failure to file timely all required information in such reports or statements may nullify the authorization otherwise provided by the specific license and result in apparent violations of the applicable prohibitions that may be subject to enforcement action.
Effect of denial.
The denial of a specific license does not preclude the reconsideration of an application or the filing of a further application. The applicant or any other party-in-interest may at any time request, by written correspondence, reconsideration of the denial of an application based on new facts or changed circumstances.
§ 202.803 General provisions.
Effect of license.
No license issued under this subpart H, or otherwise issued by the Department, authorizes or validates any transaction effected prior to the issuance of such license or other authorization, unless specifically provided for in such license or authorization.
No license issued under this subpart H authorizes or validates any transaction prohibited under or subject to this part unless the license is properly issued by the Department and specifically refers to this part.
Any license authorizing or validating any transaction that is prohibited under or otherwise subject to this part has the effect of removing or amending those prohibitions or other requirements from the transaction, but only to the extent specifically stated by the terms of the license. Unless the license otherwise specifies, such an authorization does not create any right, duty, obligation, claim, or interest in, or with respect to, any property that would not otherwise exist under ordinary principles of law.
Nothing contained in this part shall be construed to supersede the requirements established under any other provision of law or to relieve a person from any requirement to obtain a license or authorization from another department or agency of the United States Government in compliance with applicable laws and regulations subject to the jurisdiction of that department or agency. For example, issuance of a specific license authorizing a transaction otherwise prohibited by this part does not operate as a license or authorization to conclude the transaction that is otherwise required from the U.S. Department of Commerce, U.S. Department of State, U.S. Department of the Treasury, or any other department or agency of the United States Government.
Amendment, modification, or rescission.
Except as otherwise provided by law, any licenses (whether general or specific), authorizations, instructions, or forms issued thereunder may be amended, modified, or rescinded at any time.
Consultation.
The Department will issue, amend, modify, or rescind a general or specific license in concurrence with the Departments of State, Commerce, and Homeland Security and in consultation with other relevant agencies.
Exclusion from licenses and other authorizations.
The Attorney General reserves the right to exclude any person, property, or transaction from the operation of any license or from the privileges conferred by any license. The Attorney General also reserves the right to restrict the applicability of any license to particular persons, property, transactions, or classes thereof. Such actions are binding upon all persons receiving actual or constructive notice of the exclusions or restrictions.
Subpart I—Advisory Opinions
§ 202.901 Inquiries concerning application of this part.
General.
Any U.S. person party to a transaction potentially regulated under the Order and this part, or an agent of the party to such a transaction on the party's behalf, may request from the Attorney General a statement of the present enforcement intentions of the Department of Justice under the Order with respect to that transaction that may be subject to the prohibitions or restrictions in the Order and this part (“advisory opinion”).
Anonymous, hypothetical, non-party and ex post facto review requests excluded.
The entire transaction that is the subject of the advisory opinion request must be an actual, as opposed to hypothetical, transaction and involve disclosed, as opposed to anonymous, parties to the transaction. Advisory opinion requests must be submitted by a U.S. person party to the transaction or that party's agent and have no application to a party that does not join the request. The transaction need not involve only prospective conduct, but an advisory opinion request will not be considered unless that portion of the transaction for which an opinion is sought involves only prospective conduct.
Contents.
Each advisory opinion request shall be specific and must be accompanied by all material information bearing on the conduct for which an advisory opinion is requested, and on the circumstances of the prospective conduct, including background information, complete copies of any and all operative documents, and detailed statements of all collateral or oral understandings, if any. Each request must include, at a minimum:
The identities of the transaction parties, including any ownership of entities or citizenship or primary residence of individuals;
A description of the nature of the transaction, including the types and volumes of government-related data or bulk U.S. sensitive personal data involved in the transaction, the end-use of the data, the method of data transfer, and any restrictions or requirements related to a party's right or ability to control, access, disseminate, or dispose of the data; and
Any potential basis for exempting or excluding the transaction from the prohibitions or restrictions imposed in the Order and this part.
Additional contents; format and method of submissions.
Requests for advisory opinions must be submitted in accordance with this section and with
subpart L of this part
Further information to be supplied.
Each party shall provide any additional information or documents that the Department of Justice may thereafter request in its review of the matter. Any information furnished orally shall be confirmed promptly in writing; signed by or on behalf of the party that submitted the initial review request; and certified to be a true, correct, and complete disclosure of the requested information. A request will not be deemed complete until the Department of Justice receives such additional information. In connection with an advisory opinion request, the Department of Justice may conduct any independent investigation it believes appropriate.
Outcomes.
After submission of an advisory opinion request, the Department, in its discretion, may state its present enforcement intention under the Order and this part with respect to the proposed conduct; may decline to state its present enforcement intention; or, if circumstances warrant, may take such other position or initiate such other action as it considers appropriate. Any requesting party or parties may withdraw a request at any time prior to issuance of an advisory opinion. The Department remains free, however, to submit such comments to the requesting party or parties as it deems appropriate. Failure to take action after receipt of a request, documents, or information, whether submitted pursuant to this procedure or otherwise, shall not in any way limit or stop the Department from taking any action at such time thereafter as it deems appropriate. The Department reserves the right to retain any advisory opinion request, document, or information submitted to it under this procedure or otherwise, to disclose any advisory opinion and advisory opinion request, including the identities of the requesting party and foreign parties to the transaction, the general nature and circumstances of the proposed conduct, and the action of the Department in response to any advisory opinion request, consistent with applicable law, and to use any such request, document, or information for any governmental purpose.
Time for response.
The Department shall endeavor to respond to any advisory opinion request within 30 days after receipt of the request and of any requested additional information and documents.
Written decisions only.
The requesting party or parties may rely only upon a written advisory opinion signed by the Attorney General.
Effect of advisory opinion.
Each advisory opinion can be relied upon by the requesting party or parties to the extent the disclosures made pursuant to this subpart I were accurate and complete and to the extent the disclosures continue accurately and completely to reflect circumstances after the date of the issuance of the advisory opinion. An advisory opinion will not restrict enforcement actions by any agency other than the Department of Justice. It will not affect a requesting party's obligations to any other agency or under any statutory or regulatory provision other than those specifically discussed in the advisory opinion.
Amendment or revocation of advisory opinion.
An advisory opinion may be amended or revoked at any time after it has been issued. Notice of such will be given in the same manner as notice of the advisory opinion was originally given or in the
Federal Register.
Whenever possible, a notice of amendment or revocation will state when the Department will consider a party's reliance on the superseded advisory opinion to be unreasonable, and any transition period that may be applicable.
Compliance.
Neither the submission of an advisory opinion request, nor its pendency, shall in any way alter the responsibility or obligation of a requesting party to comply with the Order, this part, or any other applicable law.
Subpart J—Due Diligence and Audit Requirements
§ 202.1001 Due diligence for restricted transactions.
Data compliance program.
By no later than October 6, 2025, U.S. persons engaging in any restricted transactions shall develop and implement a data compliance program.
Requirements.
The data compliance program shall include, at a minimum, each of the following requirements:
Risk-based procedures for verifying data flows involved in any restricted transaction, including procedures to verify and log, in an auditable manner, the following:
The types and volumes of government-related data or bulk U.S. sensitive personal data involved in the transaction;
ii
The identity of the transaction parties, including any ownership of entities or citizenship or primary residence of individuals; and
iii
The end-use of the data and the method of data transfer;
For restricted transactions that involve vendors, risk-based procedures for verifying the identity of vendors;
A written policy that describes the data compliance program and that is annually certified by an officer, executive, or other employee responsible for compliance;
A written policy that describes the implementation of the security requirements as defined in
§ 202.248
and that is annually certified by an officer, executive, or other employee responsible for compliance; and
Any other information that the Attorney General may require.
§ 202.1002 Audits for restricted transactions.
Audit required.
U.S. persons that, on or after October 6, 2025, engage in any restricted transactions under
§ 202.401
shall conduct an audit that complies with the requirements of this section.
Who may conduct the audit.
The auditor:
Must be qualified and competent to examine, verify, and attest to the U.S. person's compliance with and the effectiveness of the security requirements, as defined in
§ 202.248
, and all other applicable requirements, as defined in
§ 202.401
, implemented for restricted transactions;
Must be independent; and
Cannot be a covered person or a country of concern.
When required.
The audit must be performed once for each calendar year in which the U.S. person engages in any restricted transactions.
Timeframe.
The audit must cover the preceding 12 months.
Scope.
The audit must:
Examine the U.S. person's restricted transactions;
Examine the U.S. person's data compliance program required under
§ 202.1001
and its implementation;
Examine relevant records required under
§ 202.1101
Examine the U.S. person's security requirements, as defined by
§ 202.248
; and
Use a reliable methodology to conduct the audit.
Report.
The auditor must prepare and submit a written report to the U.S. person within 60 days of the completion of the audit.
The audit report must:
Describe the nature of any restricted transactions engaged in by the U.S. person;
ii
Describe the methodology undertaken, including the relevant policies and other documents reviewed, relevant personnel interviewed, and any relevant facilities, equipment, networks, or systems examined;
iii
Describe the effectiveness of the U.S. person's data compliance program and its implementation;
iv
Describe any vulnerabilities or deficiencies in the implementation of the security requirements that have affected or could affect the risk of access to government-related data or bulk U.S. sensitive personal data by a country of concern or covered person;
Describe any instances in which the security requirements failed or were otherwise not effective in mitigating the risk of access to government-related data or bulk U.S. sensitive personal data by a country of concern or covered person; and
vi
Recommend any improvements or changes to policies, practices, or other aspects of the U.S. person's business to ensure compliance with the security requirements.
U.S. persons engaged in restricted transactions must retain the audit report for a period of at least 10 years, consistent with the recordkeeping requirements in
§ 202.1101
Subpart K—Reporting and Recordkeeping Requirements
§ 202.1101 Records and recordkeeping requirements.
Records.
Except as otherwise provided, U.S. persons engaging in any transaction subject to the provisions of this part shall keep a full and accurate record of each such transaction engaged in, and such record shall be available for examination for at least 10 years after the date of such transaction.
Additional recordkeeping requirements.
U.S. persons engaging in any restricted transaction shall create and maintain, at a minimum, the following records in an auditable manner:
A written policy that describes the data compliance program and that is certified annually by an officer, executive, or other employee responsible for compliance;
A written policy that describes the implementation of any applicable security requirements as defined in
§ 202.248
and that is certified annually by an officer, executive, or other employee responsible for compliance;
The results of any annual audits that verify the U.S. person's compliance with the security requirements and any conditions on a license;
Documentation of the due diligence conducted to verify the data flow involved in any restricted transaction, including:
The types and volumes of government-related data or bulk U.S. sensitive personal data involved in the transaction;
ii
The identity of the transaction parties, including any direct and indirect ownership of entities or citizenship or primary residence of individuals; and
iii
A description of the end-use of the data;
Documentation of the method of data transfer;
Documentation of the dates the transaction began and ended;
Copies of any agreements associated with the transaction;
Copies of any relevant licenses or advisory opinions;
The document reference number for any original document issued by the Attorney General, such as a license or advisory opinion;
10
A copy of any relevant documentation received or created in connection with the transaction; and
11
An annual certification by an officer, executive, or other employee responsible for compliance of the completeness and accuracy of the records documenting due diligence.
§ 202.1102 Reports to be furnished on demand.
Reports.
Every person is required to furnish under oath, in the form of reports or otherwise, from time to time and at any time as may be required by the Department of Justice, complete information relative to any act or transaction or covered data transaction, regardless of whether such act, transaction, or covered data transaction is effected pursuant to a license or otherwise, subject to the provisions of this part and except as otherwise prohibited by Federal law. The Department of Justice may require that such reports include the production of any books, contracts, letters, papers, or other hard copy or electronic documents relating to any such act, transaction, or covered data transaction, in the custody or control of the persons required to make such reports. Reports may be required either before, during, or after such acts, transactions, or covered data transactions. The Department of Justice may, through any person or agency, conduct investigations, hold hearings, administer oaths, examine witnesses, receive evidence, take depositions, and require by subpoena the attendance and testimony of witnesses and the production of any books, contracts, letters, papers, and other hard copy or electronic documents relating to any matter under investigation, regardless of whether any report has been required or filed in connection therewith.
Definition of the term “document.
For purposes of
paragraph (a)
of this section, the term
document
includes any written, recorded, or graphic matter or other means of preserving thought or expression (including in electronic format), and all tangible things stored in any medium from which information can be processed, transcribed, or obtained directly or indirectly, including correspondence, memoranda, notes, messages, contemporaneous communications such as text and instant messages, letters, emails, spreadsheets, metadata, contracts, bulletins, diaries, chronological data, minutes, books, reports, examinations, charts, ledgers, books of account, invoices, air waybills, bills of lading, worksheets, receipts, printouts, papers, schedules, affidavits, presentations, transcripts, surveys, graphic representations of any kind, drawings, photographs, graphs, video or sound recordings, and motion pictures or other film.
Format.
Persons providing documents to the Department of Justice pursuant to this section must produce documents in a usable format agreed upon by the Department of Justice. For guidance, see the Department of Justice's data delivery standards available on the National Security Division's website at
§ 202.1103 Annual reports.
Who must report.
An annual report must be filed, except as otherwise prohibited by Federal law, by any U.S. person that, on or after October 6, 2025, is engaged in a restricted transaction involving cloud-computing services, and that has 25% or more of the U.S. person's equity interests owned (directly or indirectly, through any contract, arrangement, understanding, relationship, or otherwise) by a country of concern or covered person.
Primary responsibility to report.
A report may be filed on behalf of a U.S. person engaging in the data transaction described in
§ 202.1103(a)
by an attorney, agent, or other person. Primary responsibility for reporting, however, rests with the actual U.S. person engaging in the data transaction. No U.S. person is excused from filing a report by reason of the fact that another U.S. person has submitted a report with regard to the same data transaction, except where the U.S. person has actual knowledge that the other U.S. person filed the report.
When reports are due.
A report on the data transactions described in
§ 202.1103(a)
engaged in as of December 31 of the previous year shall be filed annually by March 1 of the subsequent year.
Contents of reports.
Annual reports on the data transactions described in
§ 202.1103(a)
shall include the following:
The name and address of the U.S. person engaging in the covered data transaction, and the name, telephone number, and email address of a contact from whom additional information may be obtained;
A description of the covered data transaction, including:
The date of the transaction;
ii
The types and volumes of government-related data or bulk U.S. sensitive personal data involved in the transaction;
iii
The method of data transfer; and
iv
Any persons participating in the data transaction and their respective locations, including the name and location of each data recipient, the ownership of entities or citizenship or primary residence of individuals, the name and location of any covered persons involved in the transaction, and the name of any countries of concern involved in the transaction;
A copy of any relevant documentation received or created in connection with the transaction; and
Any other information that the Department of Justice may require.
Additional contents; format and method of submission.
Reports required by this section must be submitted in accordance with this section and with
subpart L of this part
§ 202.1104 Reports on rejected prohibited transactions.
Who must report.
A report must be filed, except as otherwise prohibited by Federal law, by any U.S. person that, on or after October 6, 2025, has received and affirmatively rejected (including automatically rejected using software, technology, or automated tools) an offer from another person to engage in a prohibited transaction involving data brokerage.
When reports are due.
U.S. persons shall file reports within 14 days of rejecting a transaction prohibited by this part.
Contents of reports.
Reports on rejected transactions shall include the following, to the extent known and available to the person filing the report at the time the transaction is rejected:
The name and address of the U.S. person that rejected the prohibited transaction, and the name, telephone number, and email address of a contact from whom additional information may be obtained;
A description of the rejected transaction, including:
The date the transaction was rejected;
ii
The types and volumes of government-related data or bulk U.S. sensitive personal data involved in the transaction;
iii
The method of data transfer;
iv
Any persons attempting to participate in the transaction and their respective locations, including the name and location of each data recipient, the ownership of entities or citizenship or primary residence of individuals, the name and location of any covered persons involved in the transaction, and the name of any countries of concern involved in the transaction;
A copy of any relevant documentation received or created in connection with the transaction; and
vi
Any other information that the Department of Justice may require.
Additional contents; format and method of submission.
Reports required by this section must be submitted in accordance with this section and with
subpart L of this part
Subpart L—Submitting Applications, Requests, Reports, and Responses
§ 202.1201 Procedures.
Application of this subpart.
This subpart L applies to any submissions required or permitted by this part, including reports of known or suspected violations submitted pursuant to
§ 202.302
, requests for removal from the Covered Persons List submitted pursuant to
subpart G of this part
, requests for specific licenses submitted pursuant to
§ 202.802
, advisory opinion requests submitted pursuant to
subpart I of this part
, annual reports submitted pursuant to
§ 202.1103
, reports on rejected prohibited transactions submitted pursuant to
§ 202.1104
, and responses to pre-penalty notices and findings of violations submitted pursuant to
§ 202.1306
(collectively, “submissions”).
Form of submissions.
Submissions must follow the instructions in this part and any instructions on the National Security Division's website. With the exception of responses to pre-penalty notices or findings of violations submitted pursuant to
subpart M of this part
, submissions must use the forms on the National Security Division's website or another official reporting option as specified by the National Security Division.
Method of submissions.
Submissions must be made to the National Security Division electronically by emailing the National Security Division at
NSD.FIRS.datasecurity@usdoj.gov
or using another official electronic reporting option, in accordance with any instructions on the National Security Division's website.
Certification.
If the submitting party is an individual, the submission must be signed by the individual or the individual's attorney. If the submitting party is not an individual, the submission must be signed on behalf of each submitting party by an officer, director, a person performing the functions of an officer or a director of, or an attorney for, the submitting party. Annual reports submitted pursuant to
§ 202.1103
, and reports on rejected transactions submitted pursuant to
§ 202.1104
, must be signed by an officer, a director, a person performing the functions of an officer or a director, or an employee responsible for compliance. In appropriate cases, the Department of Justice may require the chief executive officer of a requesting party to sign the request. Each such person signing a submission must certify that the submission is true, accurate, and complete.
Subpart M—Penalties and Finding of Violation
§ 202.1301 Penalties for violations.
Civil and criminal penalties.
Section 206 of IEEPA,
50 U.S.C. 1705
, is applicable to violations of the provisions of any license, ruling, regulation, order, directive, or instruction issued by or pursuant to the direction or authorization of the Attorney General pursuant to this part or otherwise under IEEPA.
A civil penalty not to exceed the amount set forth in section 206 of IEEPA may be imposed on any person who violates, attempts to violate, conspires to violate, or causes a violation of any license, order, regulation, or prohibition issued under IEEPA.
IEEPA provides for a maximum civil penalty not to exceed the greater of $368,136 or an amount that is twice the amount of the transaction that is the basis of the violation with respect to which the penalty is imposed.
A person who willfully commits, willfully attempts to commit, willfully conspires to commit, or aids or abets in the commission of a violation of any license, order, regulation, or prohibition issued under IEEPA shall, upon conviction, be fined not more than $1,000,000, or if a natural person, may be imprisoned for not more than 20 years, or both.
Adjustment of civil penalties.
The civil penalties provided in IEEPA are subject to adjustment pursuant to the Federal Civil Penalties Inflation Adjustment Act of 1990 (Public Law 101-410, as amended,
28 U.S.C. 2461 note
).
Adjustment of criminal penalties.
The criminal penalties provided in IEEPA are subject to adjustment pursuant to
18 U.S.C. 3571
False statements.
Pursuant to
18 U.S.C. 1001
, whoever, in any matter within the jurisdiction of the executive, legislative, or judicial branch of the Government of the United States, knowingly and willfully falsifies, conceals, or covers up by any trick, scheme, or device a material fact; or makes any materially false, fictitious, or fraudulent statement or representation; or makes or uses any false writing or document knowing the same to contain any materially false, fictitious, or fraudulent statement or entry shall be fined under title 18, United States Code, imprisoned, or both.
Other applicable laws.
Violations of this part may also be subject to other applicable laws.
§ 202.1302 Process for pre-penalty notice.
When and how issued.
If the Department of Justice has reason to believe that there has occurred a violation of any provision of this part or a violation of the provisions of any license, ruling, regulation, order, directive, or instruction issued by or pursuant to the direction or authorization of the Attorney General pursuant to this part or otherwise under IEEPA and determines that a civil monetary penalty is warranted, the Department of Justice will issue a pre-penalty notice informing the alleged violator of the agency's intent to impose a monetary penalty.
The pre-penalty notice shall be in writing.
The pre-penalty notice may be issued whether or not another agency has taken any action with respect to the matter.
The Department shall provide the alleged violator with the relevant information that is not privileged, classified, or otherwise protected, and that forms the basis for the pre-penalty notice, including a description of the alleged violation and proposed penalty amount.
Opportunity to respond.
An alleged violator has the right to respond to a pre-penalty notice in accordance with
§ 202.1306
Settlement.
Settlement discussion may be initiated by the Department of Justice, the alleged violator, or the alleged violator's authorized representative.
Representation.
A representative of the alleged violator may act on behalf of the alleged violator, but any oral communication with the Department of Justice prior to a written submission regarding the specific allegations contained in the pre-penalty notice must be preceded by a written letter of representation, unless the pre-penalty notice was served upon the alleged violator in care of the representative.
§ 202.1303 Penalty imposition.
If, after considering any written response to the pre-penalty notice and any relevant facts, the Department of Justice determines that there was a violation by the alleged violator named in the pre-penalty notice and that a civil monetary penalty is appropriate, the Department of Justice may issue a penalty notice to the violator containing a determination of the violation and the imposition of the monetary penalty. The Department shall provide the violator with any relevant, non-classified information that forms the basis of the penalty. The issuance of the penalty notice shall constitute final agency action. The violator has the right to seek judicial review of that final agency action in Federal district court.
§ 202.1304 Administrative collection and litigation.
In the event that the violator does not pay the penalty imposed pursuant to this part or make payment arrangements acceptable to the Department of Justice, the Department of Justice may refer the matter to the Department of the Treasury for administrative collection measures or take appropriate action to recover the penalty in any civil suit in Federal district court.
§ 202.1305 Finding of violation.
When and how issued.
The Department of Justice may issue an initial finding of violation that identifies a violation if the Department of Justice:
Determines that there has occurred a violation of any provision of this part, or a violation of the provisions of any license, ruling, regulation, order, directive, or instruction issued by or pursuant to the direction or authorization of the Attorney General pursuant to this part or otherwise under IEEPA;
ii
Considers it important to document the occurrence of a violation; and
iii
Concludes that an administrative response is warranted but that a civil monetary penalty is not the most appropriate response.
An initial finding of violation shall be in writing and may be issued whether or not another agency has taken any action with respect to the matter.
The Department shall provide the alleged violator with the relevant information that is not privileged, classified, or otherwise protected, that forms the basis for the finding of violation, including a description of the alleged violation.
Opportunity to respond.
An alleged violator has the right to contest an initial finding of violation in accordance with
§ 202.1306
Determination
Determination that a finding of violation is warranted.
If, after considering the response, the Department of Justice determines that a final finding of violation should be issued, the Department of Justice will issue a final finding of violation that will inform the violator of its decision. The Department shall provide the violator with the relevant information that is not privileged, classified, or otherwise protected, that forms the basis for the finding of violation. A final finding of violation shall constitute final agency action. The violator has the right to seek judicial review of that final agency action in Federal district court.
Determination that a finding of violation is not warranted.
If, after considering the response, the Department of Justice determines a finding of violation is not warranted, then the Department of Justice will inform the alleged violator of its decision not to issue a final finding of violation. A determination by the Department of Justice that a final finding of violation is not warranted does not preclude the Department of Justice from pursuing other enforcement actions.
Representation.
A representative of the alleged violator may act on behalf of the alleged violator, but any oral communication with the Department of Justice prior to a written submission regarding the specific alleged violations contained in the initial finding of violation must be preceded by a written letter of representation, unless the initial finding of violation was served upon the alleged violator in care of the representative.
§ 202.1306 Opportunity to respond to a pre-penalty notice or finding of violation.
Right to respond.
An alleged violator has the right to respond to a pre-penalty notice or finding of violation by making a written presentation to the Department of Justice.
Deadline for response.
A response to a pre-penalty notice or finding of violation must be electronically submitted within 30 days of electronic service of the notice or finding. The failure to submit a response within 30 days shall be deemed to be a waiver of the right to respond.
Extensions of time for response.
Any extensions of time will be granted, at the discretion of the Department of Justice, only upon specific request to the Department of Justice.
Contents of response.
Any response should set forth in detail why the alleged violator either believes that a violation of the regulations did not occur or why a finding of violation or penalty is otherwise unwarranted under the circumstances. The response should include all documentary or other evidence available to the alleged violator that supports the arguments set forth in the response. The Department of Justice will consider all relevant materials submitted in the response.
Subpart N—Government-Related Location Data List
§ 202.1401 Government-Related Location Data List.
For each Area ID listed in this section, each of the latitude/longitude coordinate pairs forms a corner of the geofenced area.
Table 1 to
§ 202.1401
Area ID
Latitude/longitude coordinates of geofenced areas
38.935624, −77.207888
38.931674, −77.199387
38.929289, −77.203229
38.932939, −77.209328.
38.950446, −77.125592
38.952077, −77.120947
38.947468, −77.120060
38.947135, −77.122809.
38.953191, −77.372792
38.953174, −77.369764
38.951148, −77.369759
38.951152, −77.372781.
39.113546, −76.777053
39.131086, −76.758527
39.100086, −76.749715
39.093304, −76.760882.
33.416299, −82.172772
33.416666, −82.164366
33.406350, −82.163645
33.406261, −82.172947.
21.525093, −158.019139
21.525362, −158.002575
21.518161, −158.002233
21.518010, −158.018364.
21.475012, −158.061844
21.483357, −158.057568
21.479226, −158.049881
21.472695, −158.052371.
29.449322, −98.646174
29.452872, −98.637623
29.448069, −98.637303
29.444547, −98.640607.
39.273162771, −76.362684384
39.508996774, −76.362684384
39.508996774, −76.049235582
39.273162771, −76.049235582.
10
39.0258436940001, −76.9680962199999
39.0402111820001, −76.9680962199999
39.0402111820001, −76.9506770369999
39.0258436940001, −76.9506770369999.
11
20.7457155230001, −156.440726997
20.7494410490001, −156.440726997
20.7494410490001, −156.431116699
20.7457155230001, −156.431116699.
12
38.8805363480001, −77.1090209989999
38.8811994730001, −77.1090209989999
38.8811994730001, −77.1082027119999
38.8805363480001, −77.1082027119999.
13
32.765632877, −97.460085871
32.786292692, −97.460085871
32.786292692, −97.445002478
32.765632877, −97.445002478.
14
34.602177924, −118.126219217
34.652496869, −118.126219217
34.652496869, −118.040871203
34.602177924, −118.040871203.
15
32.0905440820001, −110.959444035
32.1053229630001, −110.959444035
32.1053229630001, −110.922377001
32.0905440820001, −110.922377001.
16
33.8999448750001, −84.540445929
33.9364828150001, −84.540445929
33.9364828150001, −84.511508719
33.8999448750001, −84.511508719.
17
36.6657671500001, −76.163567934
36.7187899800001, −76.163567934
36.7187899800001, −76.098012048
36.6657671500001, −76.098012048.
18
27.8761052880001, −98.061583281
27.9157840450001, −98.061583281
27.9157840450001, −98.0214386
27.8761052880001, −98.0214386.
19
21.3545686960001, −157.926772605
21.3700858780001, −157.926772605
21.3700858780001, −157.89962502
21.3545686960001, −157.89962502.
20
39.529701323, −78.871120656
39.566862548, −78.871120656
39.566862548, −78.819110448
39.529701323, −78.819110448.
21
31.227908115, −85.654625655
31.235020282, −85.654625655
31.235020282, −85.646160343
31.227908115, −85.646160343.
22
45.0576284000001, −83.5785134019999
45.0972929400001, −83.5785134019999
45.0972929400001, −83.5582903029999
45.0576284000001, −83.5582903029999.
23
34.6379009080001, −99.303633301
34.6889874940001, −99.303633301
34.6889874940001, −99.25506291
34.6379009080001, −99.25506291.
24
32.6375106470001, −117.168353987
32.6816990190001, −117.168353987
32.6816990190001, −117.138279193
32.6375106470001, −117.138279193.
25
32.666935251, −117.172352209
32.675675627, −117.172352209
32.675675627, −117.163035197
32.666935251, −117.163035197.
26
13.5479750120001, 144.840656045
13.6479224930001, 144.840656045
13.6479224930001, 144.956626971
13.5479750120001, 144.956626971.
27
33.610199773, −86.013461889
33.688770568, −86.013461889
33.688770568, −85.910594886
33.610199773, −85.910594886.
28
27.6372285040001, −81.364060357
27.6776476600001, −81.364060357
27.6776476600001, −81.326061341
27.6372285040001, −81.326061341.
29
38.869169115, −77.079135005
38.887908934, −77.079135005
38.887908934, −77.058113411
38.869169115, −77.058113411.
30
38.865964869, −77.081320445
38.869010908, −77.081320445
38.869010908, −77.07688713
38.865964869, −77.07688713.
31
30.268965988, −97.74101039
30.26898402, −97.74101039
30.26898402, −97.74098961
30.268965988, −97.74098961.
32
28.585892605, −81.197868843
28.58638835, −81.197868843
28.58638835, −81.197094434
28.585892605, −81.197094434.
33
35.9939351130001, −78.8988567119999
35.9939531280001, −78.8988567119999
35.9939531280001, −78.8988345369999
35.9939351130001, −78.8988345369999.
34
35.290658975, −86.1900228969999
35.448152643, −86.1900228969999
35.448152643, −85.9565678559999
35.290658975, −85.9565678559999.
35
39.668741192, −74.486379079
39.735566472, −74.486379079
39.735566472, −74.38985998
39.668741192, −74.38985998.
36
27.5433418430001, −81.440651203
27.7481014920001, −81.440651203
27.7481014920001, −81.140127987
27.5433418430001, −81.140127987.
37
43.329662741, −89.768817729
43.3804415840001, −89.768817729
43.3804415840001, −89.704814972
43.329662741, −89.704814972.
38
32.7213462890001, −117.147436521
32.7304327800001, −117.147436521
32.7304327800001, −117.142819245
32.7213462890001, −117.142819245.
39
44.810736596, −68.845190583
44.824436067, −68.845190583
44.824436067, −68.817759555
44.810736596, −68.817759555.
40
30.378935891, −87.651017989
30.406043932, −87.651017989
30.406043932, −87.616693181
30.378935891, −87.616693181.
41
32.460689648, −93.692932035
32.533707929, −93.692932035
32.533707929, −93.531044113
32.460689648, −93.531044113.
42
42.1637746650001, −72.721474954
42.1737587120001, −72.721474954
42.1737587120001, −72.713127559
42.1637746650001, −72.713127559.
43
32.234848137, −114.563241999
32.74030585, −114.563241999
32.74030585, −113.597922719
32.234848137, −113.597922719.
44
32.8717587680001, −112.742209944
32.9055316810001, −112.742209944
32.9055316810001, −112.715649106
32.8717587680001, −112.715649106.
45
70.118081036, −143.649422567
70.13677672, −143.649422567
70.13677672, −143.549196508
70.118081036, −143.549196508.
46
39.0718274430001, −121.477278056
39.1737524000001, −121.477278056
39.1737524000001, −121.321123307
39.0718274430001, −121.321123307.
47
21.3446919420001, −157.715961149
21.3801950850001, −157.715961149
21.3801950850001, −157.704152283
21.3446919420001, −157.704152283.
48
39.320337941, −80.27238984
39.332562421, −80.27238984
39.332562421, −80.257518209
39.320337941, −80.257518209.
49
64.3151851490001, −146.65232338
64.3202659380001, −146.65232338
64.3202659380001, −146.642748991
64.3151851490001, −146.642748991.
50
33.564586567, −86.7593074919999
33.577571506, −86.7593074919999
33.577571506, −86.749335831
33.564586567, −86.749335831.
51
33.979025715, −77.920042096
33.98353888, −77.920042096
33.98353888, −77.911945012
33.979025715, −77.911945012.
52
37.6569067660001, −84.2697493539999
37.7403075720001, −84.2697493539999
37.7403075720001, −84.1739063399999
37.6569067660001, −84.1739063399999.
53
43.549701982, −116.23995646
43.565222364, −116.23995646
43.565222364, −116.203444555
43.549701982, −116.203444555.
54
41.928394165, −72.706470888
41.940084218, −72.706470888
41.940084218, −72.6950519379999
41.928394165, −72.6950519379999.
55
41.5399982100001, −81.628180911
41.5451316070001, −81.628180911
41.5451316070001, −81.623066892
41.5399982100001, −81.623066892.
56
38.259480861, −119.65128069
38.488443466, −119.65128069
38.488443466, −119.46086144
38.259480861, −119.46086144.
57
32.7116821270001, −117.172842204
32.7155456210001, −117.172842204
32.7155456210001, −117.171235129
32.7116821270001, −117.171235129.
58
40.5796208020001, −73.881158344
40.5851822330001, −73.881158344
40.5851822330001, −73.875044844
40.5796208020001, −73.875044844.
59
31.3815422060001, −85.978073125
31.3912525150001, −85.978073125
31.3912525150001, −85.96646119
31.3815422060001, −85.96646119.
60
39.6792307960001, −104.791155246
39.7256386980001, −104.791155246
39.7256386980001, −104.732681808
39.6792307960001, −104.732681808.
61
44.465375824, −73.165872108
44.481431105, −73.165872108
44.481431105, −73.138589437
44.465375824, −73.138589437.
62
18.246447926, −65.580288041
18.250653732, −65.580288041
18.250653732, −65.57513189
18.246447926, −65.57513189.
63
31.2653802660001, −85.730112602
31.2900770820001, −85.730112602
31.2900770820001, −85.701272345
31.2653802660001, −85.701272345.
64
13.488847714, 144.8237902
13.650804937, 144.8237902
13.650804937, 144.882806074
13.488847714, 144.882806074.
65
41.613354353, −93.9831494479999
42.134619451, −93.9831494479999
42.134619451, −93.625230214
41.613354353, −93.625230214.
66
34.6199016640001, −84.1105367119999
34.6357614130001, −84.1105367119999
34.6357614130001, −84.0950752379999
34.6199016640001, −84.0950752379999.
67
44.5103232180001, −85.0727276169999
44.8976058610001, −85.0727276169999
44.8976058610001, −84.4513643499999
44.5103232180001, −84.4513643499999.
68
35.0011406840001, −79.523939868
35.0683094360001, −79.523939868
35.0683094360001, −79.442653881
35.0011406840001, −79.442653881.
69
32.641816556, −116.466773316
32.70380767, −116.466773316
32.70380767, −116.419479903
32.641816556, −116.419479903.
70
32.707519441, −116.520980841
32.714794633, −116.520980841
32.714794633, −116.509578866
32.707519441, −116.509578866.
71
35.1488975340001, −111.913136629
35.2519317510001, −111.913136629
35.2519317510001, −111.772220092
35.1488975340001, −111.772220092.
72
35.688234999, −120.85951023
35.893098334, −120.85951023
35.893098334, −120.711509738
35.688234999, −120.711509738.
73
30.91049165, −89.245591473
31.215207751, −89.245591473
31.215207751, −88.825853545
30.91049165, −88.825853545.
74
40.3878151230001, −112.116737638
40.4646164020001, −112.116737638
40.4646164020001, −111.91331559
40.3878151230001, −111.91331559.
75
34.40563345, −103.337070541
34.412489823, −103.337070541
34.412489823, −103.319797859
34.40563345, −103.319797859.
76
34.3614483640001, −103.354726446
34.4053770780001, −103.354726446
34.4053770780001, −103.295530382
34.3614483640001, −103.295530382.
77
28.410293461, −80.611521457
28.569239286, −80.611521457
28.569239286, −80.525040895
28.410293461, −80.525040895.
78
58.6207566940001, −162.088477025
58.6671382160001, −162.088477025
58.6671382160001, −162.051955173
58.6207566940001, −162.051955173.
79
39.843911672, −89.673153301
39.853707959, −89.673153301
39.853707959, −89.664434939
39.843911672, −89.664434939.
80
40.1998354450001, −77.1813079679999
40.2155193840001, −77.1813079679999
40.2155193840001, −77.1567188819999
40.1998354450001, −77.1567188819999.
81
48.720965666, −97.91415126
48.732224729, −97.91415126
48.732224729, −97.892530954
48.720965666, −97.892530954.
82
30.3692267820001, −89.145003244
30.3839136300001, −89.145003244
30.3839136300001, −89.1029689419999
30.3692267820001, −89.1029689419999.
83
34.133132274, −119.113804625
34.1468546850001, −119.113804625
34.1468546850001, −119.107499465
34.133132274, −119.107499465.
84
35.2130798650001, −80.93434288
35.2209434880001, −80.93434288
35.2209434880001, −80.924747233
35.2130798650001, −80.924747233.
85
37.268469865, −76.6497831579999
37.300168225, −76.6497831579999
37.300168225, −76.5808454679999
37.268469865, −76.5808454679999.
86
38.652772446, −76.537514883
38.665190459, −76.537514883
38.665190459, −76.526755785
38.652772446, −76.526755785.
87
38.730266928, −104.854175709
38.748479779, −104.854175709
38.748479779, −104.830998169
38.730266928, −104.830998169.
88
41.1585808, −104.827282882
41.163962628, −104.827282882
41.163962628, −104.811583526
41.1585808, −104.811583526.
89
33.0433918000001, −115.769002927
33.561860554, −115.769002927
33.561860554, −114.937048224
33.0433918000001, −114.937048224.
90
64.256937909, −149.271311872
64.318532807, −149.271311872
64.318532807, −149.078782527
64.256937909, −149.078782527.
91
48.0181544170001, −122.749058066
48.0882406420001, −122.749058066
48.0882406420001, −122.699833714
48.0181544170001, −122.699833714.
92
55.260399471, −162.892009844
55.266039599, −162.892009844
55.266039599, −162.882133146
55.260399471, −162.882133146.
93
32.9238514580001, −88.597781493
33.6613396510001, −88.597781493
33.6613396510001, −88.419408536
32.9238514580001, −88.419408536.
94
42.2857517910001, −71.366797532
42.2934966590001, −71.366797532
42.2934966590001, −71.355575286
42.2857517910001, −71.355575286.
95
30.396955129, −87.301358539
30.41034727, −87.301358539
30.41034727, −87.278142462
30.396955129, −87.278142462.
96
36.8832992170001, −76.3808126719999
36.8943868090001, −76.3808126719999
36.8943868090001, −76.3390713729999
36.8832992170001, −76.3390713729999.
97
36.4941214200001, −115.88042321
36.7385429400001, −115.88042321
36.7385429400001, −115.4868387
36.4941214200001, −115.4868387.
98
21.299764458, −158.073065748
21.327294536, −158.073065748
21.327294536, −158.044610628
21.299764458, −158.044610628.
99
36.779547069, −119.702471155
36.782099199, −119.702471155
36.782099199, −119.701514522
36.779547069, −119.701514522.
100
42.15393814, −70.9374754149999
42.158515225, −70.9374754149999
42.158515225, −70.9301741339999
42.15393814, −70.9301741339999.
101
48.4214595020001, −117.41300542
48.5515751880001, −117.41300542
48.5515751880001, −117.35926532
48.4214595020001, −117.35926532.
102
26.091587869, −80.111818708
26.092584016, −80.111818708
26.092584016, −80.108205835
26.091587869, −80.108205835.
103
35.6459372400001, −75.991669019
35.7768890170001, −75.991669019
35.7768890170001, −75.771652698
35.6459372400001, −75.771652698.
104
32.1193109110001, −110.909314221
32.1962087390001, −110.909314221
32.1962087390001, −110.789766372
32.1193109110001, −110.789766372.
105
37.408487704, −77.453738162
37.439266805, −77.453738162
37.439266805, −77.435618651
37.408487704, −77.435618651.
106
38.8781991000001, −77.109040482
38.8792949460001, −77.109040482
38.8792949460001, −77.108174294
38.8781991000001, −77.108174294.
107
40.1972506380001, −76.853865245
40.2226551520001, −76.853865245
40.2226551520001, −76.8221857039999
40.1972506380001, −76.8221857039999.
108
39.974582163, −82.913383443
39.985122185, −82.913383443
39.985122185, −82.884325098
39.974582163, −82.884325098.
109
41.537901628, −93.674402705
41.549978514, −93.674402705
41.549978514, −93.657102163
41.537901628, −93.657102163.
110
30.40946552, −86.500613385
30.412738745, −86.500613385
30.412738745, −86.4971744769999
30.40946552, −86.4971744769999.
111
37.9630717110001, −122.027819871
38.0227201040001, −122.027819871
38.0227201040001, −121.939142028
37.9630717110001, −121.939142028.
112
39.8839370650001, −75.190933843
39.8984743260001, −75.190933843
39.8984743260001, −75.16306509
39.8839370650001, −75.16306509.
113
42.4914812000001, −83.046418438
42.5026695230001, −83.046418438
42.5026695230001, −83.037544269
42.4914812000001, −83.037544269.
114
42.4694829900001, −71.691664547
42.5765892500001, −71.691664547
42.5765892500001, −71.603764233
42.4694829900001, −71.603764233.
115
46.9314271700001, −67.8969077639999
46.9342671660001, −67.8969077639999
46.9342671660001, −67.8923200479999
46.9314271700001, −67.8923200479999.
116
21.567863645, −158.21347981
21.581952858, −158.21347981
21.581952858, −158.180039671
21.567863645, −158.180039671.
117
28.0671354250001, −98.778173769
28.1245884970001, −98.778173769
28.1245884970001, −98.685192869
28.0671354250001, −98.685192869.
118
33.8969244250001, −84.542380856
33.9367576460001, −84.542380856
33.9367576460001, −84.495305955
33.8969244250001, −84.495305955.
119
39.10595655, −75.494449085
39.152386899, −75.494449085
39.152386899, −75.436634728
39.10595655, −75.436634728.
120
24.568031467, −81.781745689
24.585123807, −81.781745689
24.585123807, −81.765170818
24.568031467, −81.765170818.
121
32.674333394, −117.133765
32.692839739, −117.133765
32.692839739, −117.108967938
32.674333394, −117.108967938.
122
46.8330442210001, −92.21102751
46.8510308170001, −92.21102751
46.8510308170001, −92.165423416
46.8330442210001, −92.165423416.
123
32.3941914100001, −99.867572545
32.4478988670001, −99.867572545
32.4478988670001, −99.808678428
32.3941914100001, −99.808678428.
124
52.7044712040001, 174.053643507
52.7410254930001, 174.053643507
52.7410254930001, 174.156518998
52.7044712040001, 174.156518998.
125
34.762486344, −118.140763438
35.017611389, −118.140763438
35.017611389, −117.525081645
34.762486344, −117.525081645.
126
30.381138945, −86.8509824239999
30.405275435, −86.8509824239999
30.405275435, −86.6331687359999
30.381138945, −86.6331687359999.
127
30.6217855130001, −86.7554594279999
30.6494843350001, −86.7554594279999
30.6494843350001, −86.7303715759999
30.6217855130001, −86.7303715759999.
128
27.0764966720001, −86.983116121
30.7497294690001, −86.983116121
30.7497294690001, −82.448862506
27.0764966720001, −82.448862506.
129
64.6012802210001, −147.165786418
64.7480079510001, −147.165786418
64.7480079510001, −146.938371648
64.6012802210001, −146.938371648.
130
36.8644398160001, −76.3344377989999
36.8708429060001, −76.3344377989999
36.8708429060001, −76.3299793119999
36.8644398160001, −76.3299793119999.
131
29.5899224830001, −95.17474779
29.6230511860001, −95.17474779
29.6230511860001, −95.16633921
29.5899224830001, −95.16633921.
132
44.112997566, −103.129144564
44.176511165, −103.129144564
44.176511165, −103.060660125
44.112997566, −103.060660125.
133
31.325926945, −92.549004972
31.34466339, −92.549004972
31.34466339, −92.532050872
31.325926945, −92.532050872.
134
39.4012000000001, −77.9954
39.4140000010001, −77.9954
39.4140000010001, −77.9708
39.4012000000001, −77.9708.
135
47.5887747180001, −117.693058242
47.6428480860001, −117.693058242
47.6428480860001, −117.623082729
47.5887747180001, −117.623082729.
136
33.3291382400001, −117.313779432
33.3984247810001, −117.313779432
33.3984247810001, −117.249241913
33.3291382400001, −117.249241913.
137
38.826363557, −118.950589204
39.942237, −118.950589204
39.942237, −117.125199131
38.826363557, −117.125199131.
138
36.9206436430001, −76.324596591
36.9225983950001, −76.324596591
36.9225983950001, −76.321048116
36.9206436430001, −76.321048116.
139
30.395125636, −81.633046236
30.406669179, −81.633046236
30.406669179, −81.613437212
30.395125636, −81.613437212.
140
24.567441214, −81.801443736
24.594738599, −81.801443736
24.594738599, −81.79382837
24.567441214, −81.79382837.
141
38.9355059150001, −95.6866671779999
38.9672269680001, −95.6866671779999
38.9672269680001, −95.6739997489999
38.9355059150001, −95.6739997489999.
142
32.7263297590001, −117.225651967
32.7323354850001, −117.225651967
32.7323354850001, −117.215769817
32.7263297590001, −117.215769817.
143
41.4732485420001, −71.3429884129999
41.4772592680001, −71.3429884129999
41.4772592680001, −71.3354651549999
41.4732485420001, −71.3354651549999.
144
38.6728683430001, −77.202015081
38.7484680470001, −77.202015081
38.7484680470001, −77.1209734769999
38.6728683430001, −77.1209734769999.
145
39.855326909, −86.028620872
39.864369447, −86.028620872
39.864369447, −86.003845091
39.855326909, −86.003845091.
146
31.7888139250001, −106.581474459
32.6965880790001, −106.581474459
32.6965880790001, −105.524846042
31.7888139250001, −105.524846042.
147
18.4046924090001, −66.1341755349999
18.4221096420001, −66.1341755349999
18.4221096420001, −66.1054899209999
18.4046924090001, −66.1054899209999.
148
36.5354833810001, −87.820914236
36.7268240330001, −87.820914236
36.7268240330001, −87.423400866
36.5354833810001, −87.423400866.
149
38.418237328, −104.967064928
38.765149965, −104.967064928
38.765149965, −104.717754537
38.418237328, −104.717754537.
150
30.7215072980001, −97.913021062
31.3927951710001, −97.913021062
31.3927951710001, −97.382600936
30.7215072980001, −97.382600936.
151
21.277988357, −157.837039889
21.28553417, −157.837039889
21.28553417, −157.831141168
21.277988357, −157.831141168.
152
39.428600294, −77.437471934
39.450390568, −77.437471934
39.450390568, −77.410819037
39.428600294, −77.410819037.
153
39.0020859900001, −77.060006807
39.0129141590001, −77.060006807
39.0129141590001, −77.05003399
39.0020859900001, −77.05003399.
154
39.0320227890001, −77.04385429
39.0346693610001, −77.04385429
39.0346693610001, −77.03866628
39.0320227890001, −77.03866628.
155
44.010913031, −75.842125669
44.256536804, −75.842125669
44.256536804, −75.386367945
44.010913031, −75.386367945.
156
33.274519335, −82.379611728
33.440619771, −82.379611728
33.440619771, −82.096232277
33.274519335, −82.096232277.
157
33.6089633770001, −84.35154274
33.6319158920001, −84.35154274
33.6319158920001, −84.307486309
33.6089633770001, −84.307486309.
158
63.9388112670001, −145.772613518
64.0231208060001, −145.772613518
64.0231208060001, −145.655809936
63.9388112670001, −145.655809936.
159
37.213516865, −77.358595158
37.298684924, −77.358595158
37.298684924, −77.307488144
37.213516865, −77.307488144.
160
40.604582683, −74.034049003
40.613167841, −74.034049003
40.613167841, −74.0206090659999
40.604582683, −74.0206090659999.
161
31.434363842, −110.449131361
31.686859773, −110.449131361
31.686859773, −110.188946087
31.434363842, −110.188946087.
162
35.7935092910001, −121.426498813
36.1147194860001, −121.426498813
36.1147194860001, −121.031600619
35.7935092910001, −121.031600619.
163
35.082504812, −117.084003937
35.627708795, −117.084003937
35.627708795, −116.163545882
35.082504812, −116.163545882.
164
33.9829769470001, −80.959251815
34.0836392030001, −80.959251815
34.0836392030001, −80.704124579
33.9829769470001, −80.704124579.
165
30.921870988, −93.579998793
31.490503162, −93.579998793
31.490503162, −92.862745164
30.921870988, −92.862745164.
166
37.78807672, −86.056877114
38.0073711200001, −86.056877114
38.0073711200001, −85.747574551
37.78807672, −85.747574551.
167
39.3284266840001, −94.949264706
39.3922569280001, −94.949264706
39.3922569280001, −94.880745646
39.3284266840001, −94.880745646.
168
37.6037963470001, −92.2500513099999
37.7999725520001, −92.2500513099999
37.7999725520001, −92.0408380759999
37.6037963470001, −92.0408380759999.
169
35.039462073, −79.38062969
35.274563988, −79.38062969
35.274563988, −78.901879671
35.039462073, −78.901879671.
170
43.90284867, −90.765375865
44.159924233, −90.765375865
44.159924233, −90.587856675
43.90284867, −90.587856675.
171
39.071479147, −76.776616336
39.130981819, −76.776616336
39.130981819, −76.709232204
39.071479147, −76.709232204.
172
40.2844597280001, −74.096750839
40.3390552010001, −74.096750839
40.3390552010001, −74.026249284
40.2844597280001, −74.026249284.
173
37.000205414, −76.3170219039999
37.035192566, −76.3170219039999
37.035192566, −76.2925912169999
37.000205414, −76.2925912169999.
174
32.2387118290001, −85.021200904
32.5517604030001, −85.021200904
32.5517604030001, −84.637054935
32.2387118290001, −84.637054935.
175
31.314144049, −85.865695246
31.505687537, −85.865695246
31.505687537, −85.612193512
31.314144049, −85.612193512.
176
39.0366899860001, −96.962729439
39.3067854380001, −96.962729439
39.3067854380001, −96.681803847
39.0366899860001, −96.681803847.
177
21.3344869650001, −157.894073145
21.3570876230001, −157.894073145
21.3570876230001, −157.87189508
21.3344869650001, −157.87189508.
178
42.203459073, −87.8100502569999
42.216029281, −87.8100502569999
42.216029281, −87.7987031449999
42.203459073, −87.7987031449999.
179
34.637509069, −98.755961597
34.768015017, −98.755961597
34.768015017, −98.282396833
34.637509069, −98.282396833.
180
35.247127112, −94.374048025
35.345197662, −94.374048025
35.345197662, −94.080609487
35.247127112, −94.080609487.
181
31.8490945500001, −81.889069385
32.1248422650001, −81.889069385
32.1248422650001, −81.304927888
31.8490945500001, −81.304927888.
182
63.495426454, −148.652607873
64.877948104, −148.652607873
64.877948104, −145.011700164
63.495426454, −145.011700164.
183
38.018142733, −77.395133849
38.2229469870001, −77.395133849
38.2229469870001, −77.136746906
38.018142733, −77.136746906.
184
35.4225141090001, −108.629517745
35.5234010050001, −108.629517745
35.5234010050001, −108.546488603
35.4225141090001, −108.546488603.
185
66.558440788, −145.217198219
66.562635721, −145.217198219
66.562635721, −145.196865879
66.558440788, −145.196865879.
186
41.131595797, −104.888175803
41.201251583, −104.888175803
41.201251583, −104.839386748
41.131595797, −104.839386748.
187
40.8317168790001, −72.646569509
40.8404590060001, −72.646569509
40.8404590060001, −72.637878307
40.8317168790001, −72.637878307.
188
36.7652210320001, −119.726849268
36.7866408030001, −119.726849268
36.7866408030001, −119.702290588
36.7652210320001, −119.702290588.
189
39.046072102, −76.689705918
39.068500337, −76.689705918
39.068500337, −76.660214864
39.046072102, −76.660214864.
190
42.9373147850001, −87.891735357
42.9447209110001, −87.891735357
42.9447209110001, −87.88532841
42.9373147850001, −87.88532841.
191
40.6559953350001, −89.713436026
40.6713177760001, −89.713436026
40.6713177760001, −89.691898535
40.6559953350001, −89.691898535.
192
42.297663631, −87.8562319869999
42.303204758, −87.8562319869999
42.303204758, −87.8518457849999
42.297663631, −87.8518457849999.
193
42.0902179130001, −87.8412161049999
42.0929537750001, −87.8412161049999
42.0929537750001, −87.8329821559999
42.0902179130001, −87.8329821559999.
194
31.410361906, −85.4658208399999
31.419467447, −85.4658208399999
31.419467447, −85.4610573259999
31.410361906, −85.4610573259999.
195
33.422394339, −112.015046889
33.427659719, −112.015046889
33.427659719, −112.006740103
33.422394339, −112.006740103.
196
31.4211524990001, −100.421423136
31.4502936180001, −100.421423136
31.4502936180001, −100.386562872
31.4211524990001, −100.386562872.
197
41.5355012680001, −71.3460647429999
41.5398354990001, −71.3460647429999
41.5398354990001, −71.3433558969999
41.5355012680001, −71.3433558969999.
198
47.921128756, −97.4238744209999
48.00111753, −97.4238744209999
48.00111753, −97.3251566139999
47.921128756, −97.3251566139999.
199
32.7378756470001, −96.960057831
32.7421326520001, −96.960057831
32.7421326520001, −96.951545219
32.7378756470001, −96.951545219.
200
47.471916874, −111.370342141
47.482136373, −111.370342141
47.482136373, −111.35856852
47.471916874, −111.35856852.
201
38.935411516, −110.143618375
38.983389468, −110.143618375
38.983389468, −110.064497018
38.935411516, −110.064497018.
202
40.629836335, −86.175582897
40.6784136910001, −86.175582897
40.6784136910001, −86.124933251
40.629836335, −86.124933251.
203
30.404753499, −89.06446994
30.416012997, −89.06446994
30.416012997, −89.05803309
30.404753499, −89.05803309.
204
62.384524694, −145.202752458
62.438701327, −145.202752458
62.438701327, −145.108315
62.384524694, −145.108315.
205
43.0985925350001, −76.1175710329999
43.1204055300001, −76.1175710329999
43.1204055300001, −76.0811541549999
43.0985925350001, −76.0811541549999.
206
42.449141119, −71.2922332959999
42.477596104, −71.2922332959999
42.477596104, −71.263228187
42.449141119, −71.263228187.
207
32.728744878, −117.208959019
32.730100028, −117.208959019
32.730100028, −117.205155926
32.728744878, −117.205155926.
208
44.220163461, −90.111781241
44.249174018, −90.111781241
44.249174018, −89.996184064
44.220163461, −89.996184064.
209
38.229497861, −118.850468214
38.675823329, −118.850468214
38.675823329, −118.465402259
38.229497861, −118.465402259.
210
46.9082501180001, −96.813335915
46.9192707510001, −96.813335915
46.9192707510001, −96.797905722
46.9082501180001, −96.797905722.
211
21.530784666, −158.026158574
21.541312201, −158.026158574
21.541312201, −158.012928076
21.530784666, −158.012928076.
212
21.4521601660001, −158.036478816
21.4580696550001, −158.036478816
21.4580696550001, −158.032403386
21.4521601660001, −158.032403386.
213
31.1479145100001, −85.744240415
31.1546432720001, −85.744240415
31.1546432720001, −85.729933472
31.1479145100001, −85.729933472.
214
41.0983339530001, −112.024399889
41.1651189630001, −112.024399889
41.1651189630001, −111.942395214
41.0983339530001, −111.942395214.
215
32.7930228270001, −106.204383402
33.0771885310001, −106.204383402
33.0771885310001, −106.049512667
32.7930228270001, −106.049512667.
216
36.4958650950001, −82.684996348
36.5518898770001, −82.684996348
36.5518898770001, −82.546522187
36.4958650950001, −82.546522187.
217
32.828679521, −115.288498013
32.846906967, −115.288498013
32.846906967, −115.14568048
32.828679521, −115.14568048.
218
25.4901310220001, −80.4045291039999
25.5181528940001, −80.4045291039999
25.5181528940001, −80.3779792709999
25.4901310220001, −80.3779792709999.
219
39.446631245, −87.304009056
39.458100621, −87.304009056
39.458100621, −87.290668741
39.446631245, −87.290668741.
220
31.3751890450001, −85.5828701299999
31.3850761720001, −85.5828701299999
31.3850761720001, −85.5773414419999
31.3751890450001, −85.5773414419999.
221
31.9832369490001, −81.198805141
32.0349005460001, −81.198805141
32.0349005460001, −81.113375475
31.9832369490001, −81.113375475.
222
30.406119645, −86.74211065
30.45486409, −86.74211065
30.45486409, −86.655360926
30.406119645, −86.655360926.
223
32.5545594160001, −117.133035356
32.5724338440001, −117.133035356
32.5724338440001, −117.089509557
32.5545594160001, −117.089509557.
224
65.9646785140001, −153.812691683
66.1009999220001, −153.812691683
66.1009999220001, −153.662067587
65.9646785140001, −153.662067587.
225
38.435308005, −85.627248303
38.4668353, −85.627248303
38.4668353, −85.584713152
38.435308005, −85.584713152.
226
40.7516430220001, −91.325065862
40.8294821280001, −91.325065862
40.8294821280001, −91.178786412
40.7516430220001, −91.178786412.
227
32.311624454, −90.0879237459999
32.328439256, −90.0879237459999
32.328439256, −90.0778932449999
32.311624454, −90.0778932449999.
228
30.402512915, −81.628884649
30.408229141, −81.628884649
30.408229141, −81.613589029
30.402512915, −81.613589029.
229
29.9570817420001, −81.972797144
30.4921986090001, −81.972797144
30.4921986090001, −81.69382023
29.9570817420001, −81.69382023.
230
38.8109873670001, −85.4822157569999
39.0601368300001, −85.4822157569999
39.0601368300001, −85.3594923629999
38.8109873670001, −85.3594923629999.
231
48.1670940830001, −121.958243024
48.2248098330001, −121.958243024
48.2248098330001, −121.887559225
48.1670940830001, −121.887559225.
232
43.5700133340001, −96.7515566289999
43.5962111540001, −96.7515566289999
43.5962111540001, −96.7347550689999
43.5700133340001, −96.7347550689999.
233
38.823559833, −77.026428621
38.867319001, −77.026428621
38.867319001, −77.002855219
38.823559833, −77.002855219.
234
38.7822985190001, −76.90343143
38.829021577, −76.90343143
38.829021577, −76.8490210659999
38.7822985190001, −76.8490210659999.
235
41.6372929940001, −70.5993199659999
41.7708974620001, −70.5993199659999
41.7708974620001, −70.4886883249999
41.6372929940001, −70.4886883249999.
236
32.873792952, −81.104787366
33.621879998, −81.104787366
33.621879998, −79.90958174
32.873792952, −79.90958174.
237
61.1317682310001, −149.879980832
61.4090492570001, −149.879980832
61.4090492570001, −149.522914627
61.1317682310001, −149.522914627.
238
37.063373746, −76.627940713
37.182586941, −76.627940713
37.182586941, −76.336599693
37.063373746, −76.336599693.
239
45.8002376150001, −122.802079191
47.2187487550001, −122.802079191
47.2187487550001, −119.30029009
45.8002376150001, −119.30029009.
240
39.9443860000001, −74.661412648
40.0586108630001, −74.661412648
40.0586108630001, −74.304547511
39.9443860000001, −74.304547511.
241
38.8611352610001, −77.084491842
38.8880351040001, −77.084491842
38.8880351040001, −77.013817583
38.8611352610001, −77.013817583.
242
21.2966123480001, −158.17382288
21.6863899190001, −158.17382288
21.6863899190001, −157.850223188
21.2966123480001, −157.850223188.
243
29.346205018, −98.690308725
29.893089367, −98.690308725
29.893089367, −97.884281333
29.346205018, −97.884281333.
244
36.892714836, −76.1925524759999
36.932892732, −76.1925524759999
36.932892732, −75.9873603089999
36.892714836, −75.9873603089999.
245
37.8190118270001, −75.514689614
37.9512715100001, −75.514689614
37.9512715100001, −75.413609963
37.8190118270001, −75.413609963.
246
40.6939221220001, −84.148196529
40.7086310680001, −84.148196529
40.7086310680001, −84.127525454
40.6939221220001, −84.127525454.
247
41.3409958870001, −88.082958084
41.3733639960001, −88.082958084
41.3733639960001, −88.046036417
41.3409958870001, −88.046036417.
248
41.4073674850001, −88.187831293
41.4365859010001, −88.187831293
41.4365859010001, −88.107459928
41.4073674850001, −88.107459928.
249
21.560298554, −158.266932035
21.572360392, −158.266932035
21.572360392, −158.237835914
21.560298554, −158.237835914.
250
21.6027392400001, −158.033515202
21.6936355750001, −158.033515202
21.6936355750001, −157.95298898
21.6027392400001, −157.95298898.
251
22.035974347, −159.75916373
22.042080758, −159.75916373
22.042080758, −159.750865139
22.035974347, −159.750865139.
252
20.0291620130001, −155.834320072
20.0374297880001, −155.834320072
20.0374297880001, −155.823440805
20.0291620130001, −155.823440805.
253
30.398126636, −88.9508689469999
30.420139346, −88.9508689469999
30.420139346, −88.896527048
30.398126636, −88.896527048.
254
36.7153178120001, −98.128361282
36.7547185190001, −98.128361282
36.7547185190001, −98.110051089
36.7153178120001, −98.110051089.
255
60.558793666, −151.257835885
60.560759837, −151.257835885
60.560759837, −151.254274297
60.558793666, −151.254274297.
256
19.4318712580001, −155.27720251
19.4367646340001, −155.27720251
19.4367646340001, −155.271614951
19.4318712580001, −155.271614951.
257
58.638365343, −156.693447262
58.708746999, −156.693447262
58.708746999, −156.459187473
58.638365343, −156.459187473.
258
42.1444655070001, −121.753628091
42.1707914760001, −121.753628091
42.1707914760001, −121.727677654
42.1444655070001, −121.727677654.
259
21.4148860290001, −158.014284187
21.4580033840001, −158.014284187
21.4580033840001, −157.991853913
21.4148860290001, −157.991853913.
260
34.9471711320001, −106.613226109
35.0673284870001, −106.613226109
35.0673284870001, −106.360768374
34.9471711320001, −106.360768374.
261
57.816486609, −152.341066882
57.826001907, −152.341066882
57.826001907, −152.325036589
57.816486609, −152.325036589.
262
66.837046801, −162.617184378
66.856648663, −162.617184378
66.856648663, −162.565302627
66.837046801, −162.565302627.
263
36.900584673, −76.30409839
36.903859448, −76.30409839
36.903859448, −76.300769409
36.900584673, −76.300769409.
264
39.080371583, −94.283657449
39.111476783, −94.283657449
39.111476783, −94.21198472
39.080371583, −94.21198472.
265
38.0785775370001, −92.6119067879999
38.0962204240001, −92.6119067879999
38.0962204240001, −92.5989103479999
38.0785775370001, −92.5989103479999.
266
29.1085864770001, −100.811107299
29.3792559920001, −100.811107299
29.3792559920001, −100.460775759
29.1085864770001, −100.460775759.
267
39.979501278, −77.766381881
40.061676766, −77.766381881
40.061676766, −77.627738092
39.979501278, −77.627738092.
268
40.8367062990001, −96.759207222
40.8453505060001, −96.759207222
40.8453505060001, −96.74825231
40.8367062990001, −96.74825231.
269
68.865164727, −166.153805131
68.877996761, −166.153805131
68.877996761, −166.053355378
68.865164727, −166.053355378.
270
34.881841514, −92.178033909
34.928710282, −92.178033909
34.928710282, −92.097368909
34.881841514, −92.097368909.
271
33.7407601990001, −118.234788427
33.7451476500001, −118.234788427
33.7451476500001, −118.232155662
33.7407601990001, −118.232155662.
272
32.646434739, −94.170119305
32.694891651, −94.170119305
32.694891651, −94.10955796
32.646434739, −94.10955796.
273
33.916514003, −118.449299679
34.057048416, −118.449299679
34.057048416, −118.378717014
33.916514003, −118.378717014.
274
33.8581476250001, −118.23660337
33.8593838490001, −118.23660337
33.8593838490001, −118.235035273
33.8581476250001, −118.235035273.
275
38.173833589, −85.7272245249999
38.181490413, −85.7272245249999
38.181490413, −85.7200947549999
38.173833589, −85.7200947549999.
276
31.812802193, −85.654704728
31.818371904, −85.654704728
31.818371904, −85.646082241
31.812802193, −85.646082241.
277
18.439120508, −65.9970120469999
18.446769386, −65.9970120469999
18.446769386, −65.9877331199999
18.439120508, −65.9877331199999.
278
33.5136616820001, −112.545349748
33.7241408570001, −112.545349748
33.7241408570001, −112.319683167
33.5136616820001, −112.319683167.
279
27.821277411, −82.537659279
27.869304053, −82.537659279
27.869304053, −82.469154309
27.821277411, −82.469154309.
280
22.127046405, −159.731450362
22.13630275, −159.731450362
22.13630275, −159.71827724
22.127046405, −159.71827724.
281
21.5127546910001, −158.239749591
21.5514708600001, −158.239749591
21.5514708600001, −158.173991939
21.5127546910001, −158.173991939
282
47.4870471620001, −111.21562151
47.5233762890001, −111.21562151
47.5233762890001, −111.152194907
47.4870471620001, −111.152194907.
283
47.562267374, −122.556511461
47.570404086, −122.556511461
47.570404086, −122.531291341
47.562267374, −122.531291341.
284
40.8062092000001, −82.5260369709999
40.8156897690001, −82.5260369709999
40.8156897690001, −82.5130393979999
40.8062092000001, −82.5130393979999.
285
33.855508925, −117.319151995
33.916474896, −117.319151995
33.916474896, −117.239122083
33.855508925, −117.239122083.
286
34.2011154190001, −116.717969816
34.7339793100001, −116.717969816
34.7339793100001, −115.720717569
34.2011154190001, −115.720717569.
287
32.280961146, −80.76567248
32.510825803, −80.76567248
32.510825803, −80.65947492
32.280961146, −80.65947492.
288
34.6814644040001, −77.2763334639999
35.076192102, −77.2763334639999
35.076192102, −76.3302441729999
34.6814644040001, −76.3302441729999.
289
32.833111095, −117.188623475
32.920651119, −117.188623475
32.920651119, −116.984937219
32.833111095, −116.984937219.
290
34.558215246, −77.4842054699999
34.746048414, −77.4842054699999
34.746048414, −77.370277147
34.558215246, −77.370277147.
291
32.622994906, −114.64004722
32.679820865, −114.64004722
32.679820865, −114.578207704
32.622994906, −114.578207704.
292
34.4950770080001, −77.6073096539999
34.7485511280001, −77.6073096539999
34.7485511280001, −77.177756721
34.4950770080001, −77.177756721.
293
33.205532089, −117.596249485
33.503658101, −117.596249485
33.503658101, −117.249972307
33.205532089, −117.249972307.
294
21.4274913960001, −157.778625985
21.4626192360001, −157.778625985
21.4626192360001, −157.722086618
21.4274913960001, −157.722086618.
295
21.38026423, −157.914545183
21.392788317, −157.914545183
21.392788317, −157.897882367
21.38026423, −157.897882367.
296
38.4790113490001, −77.609862936
38.6440896410001, −77.609862936
38.6440896410001, −77.283059322
38.4790113490001, −77.283059322.
297
31.5437915750001, −84.095978531
31.5617240260001, −84.095978531
31.5617240260001, −84.007643854
31.5437915750001, −84.007643854.
298
34.8434594240001, −116.97121195
34.8817582680001, −116.97121195
34.8817582680001, −116.909128396
34.8434594240001, −116.909128396.
299
38.5154624990001, −77.3711151099999
38.5235364690001, −77.3711151099999
38.5235364690001, −77.3589766939999
38.5154624990001, −77.3589766939999.
300
30.391006078, −81.537656096
30.413437169, −81.537656096
30.413437169, −81.509630857
30.391006078, −81.509630857.
301
38.828254514, −77.120041471
38.831963061, −77.120041471
38.831963061, −77.114666209
38.828254514, −77.114666209.
302
39.32514001, −76.4241855929999
39.337202481, −76.4241855929999
39.337202481, −76.4075152099999
39.32514001, −76.4075152099999.
303
48.1206874690001, −122.17350321
48.1263336970001, −122.17350321
48.1263336970001, −122.168283314
48.1206874690001, −122.168283314.
304
32.365364879, −86.376531674
32.415623844, −86.376531674
32.415623844, −86.232684034
32.365364879, −86.232684034.
305
21.3463596610001, −157.732313131
21.3809869910001, −157.732313131
21.3809869910001, −157.706839578
21.3463596610001, −157.706839578.
306
34.75300134, −96.021930066
34.887500702, −96.021930066
34.887500702, −95.825334438
34.75300134, −95.825334438.
307
38.6375594030001, −121.429181885
38.6902393680001, −121.429181885
38.6902393680001, −121.382899272
38.6375594030001, −121.382899272.
308
37.5874487990001, −97.29929204
37.6560529930001, −97.29929204
37.6560529930001, −97.2134855509999
37.5874487990001, −97.2134855509999.
309
33.90292894, −80.822110255
33.94386779, −80.822110255
33.94386779, −80.780803864
33.90292894, −80.780803864.
310
35.800297926, −84.013675843
35.822581272, −84.013675843
35.822581272, −83.989979889
35.800297926, −83.989979889.
311
38.36798888, −81.594851531
38.378026582, −81.594851531
38.378026582, −81.58529054
38.36798888, −81.58529054.
312
32.7348147280001, −117.209483129
32.7455697900001, −117.209483129
32.7455697900001, −117.184267844
32.7348147280001, −117.184267844.
313
34.214686409, −103.863834999
34.383336857, −103.863834999
34.383336857, −103.668558352
34.214686409, −103.668558352.
314
35.021000852, −89.9701571149999
35.030015831, −89.9701571149999
35.030015831, −89.9638125029999
35.021000852, −89.9638125029999.
315
35.815792593, −88.754286881
35.946160368, −88.754286881
35.946160368, −88.646037805
35.815792593, −88.646037805.
316
38.015441735, −122.065438909
38.095180461, −122.065438909
38.095180461, −121.969625159
38.015441735, −121.969625159.
317
33.9560292030001, −78.0749530269999
34.2460740690001, −78.0749530269999
34.2460740690001, −77.9056468759999
33.9560292030001, −77.9056468759999.
318
44.8853655020001, −93.222511412
44.8980690540001, −93.222511412
44.8980690540001, −93.19773597
44.8853655020001, −93.19773597.
319
48.3955222490001, −101.391958779
48.4441800980001, −101.391958779
48.4441800980001, −101.29967086
48.3955222490001, −101.29967086.
320
32.792070847, −117.105638208
32.815502529, −117.105638208
32.815502529, −117.081336656
32.792070847, −117.081336656.
321
32.302879454, −86.410672153
32.306804183, −86.410672153
32.306804183, −86.3958063469999
32.302879454, −86.3958063469999.
322
30.935302703, −83.219069939
31.014479318, −83.219069939
31.014479318, −83.1288484929999
30.935302703, −83.1288484929999.
323
43.0246506180001, −115.895653384
43.0755981900001, −115.895653384
43.0755981900001, −115.836219587
43.0246506180001, −115.836219587.
324
39.041961471, −85.545884974
39.059126926, −85.545884974
39.059126926, −85.502112731
39.041961471, −85.502112731.
325
32.8074254250001, −115.698918811
32.8401116740001, −115.698918811
32.8401116740001, −115.646437997
32.8074254250001, −115.646437997.
326
28.5876565020001, −97.628083873
28.6265345250001, −97.628083873
28.6265345250001, −97.584907879
28.5876565020001, −97.584907879.
327
71.310648094, −156.674424861
71.344323368, −156.674424861
71.344323368, −156.617754628
71.310648094, −156.617754628.
328
43.8597372520001, −69.95330606
43.9103207020001, −69.95330606
43.9103207020001, −69.909873769
43.8597372520001, −69.909873769.
329
32.743470873, −97.44549275
32.787133199, −97.44549275
32.787133199, −97.413267401
32.743470873, −97.413267401.
330
30.1941004770001, −81.7076006299999
30.2458023780001, −81.7076006299999
30.2458023780001, −81.6593342339999
30.1941004770001, −81.6593342339999.
331
40.1857296150001, −75.164926593
40.2167846540001, −75.164926593
40.2167846540001, −75.134209434
40.1857296150001, −75.134209434.
332
24.5560839770001, −81.722408305
24.5971158050001, −81.722408305
24.5971158050001, −81.653518462
24.5560839770001, −81.653518462.
333
27.4674233900001, −97.832157771
27.5231989330001, −97.832157771
27.5231989330001, −97.788047634
27.4674233900001, −97.788047634.
334
36.255073843, −119.977147505
36.386386503, −119.977147505
36.386386503, −119.869576662
36.255073843, −119.869576662.
335
30.326507308, −87.352445013
30.375924031, −87.352445013
30.375924031, −87.257235015
30.326507308, −87.257235015.
336
30.683881264, −87.043781272
30.738102029, −87.043781272
30.738102029, −86.997376436
30.683881264, −86.997376436.
337
36.106696485, −86.67860059
36.114637747, −86.67860059
36.114637747, −86.67190118
36.106696485, −86.67190118.
338
32.6696509240001, −117.114230685
32.6740385570001, −117.114230685
32.6740385570001, −117.111967973
32.6696509240001, −117.111967973.
339
38.9746589920001, −76.4937690629999
39.0026084470001, −76.4937690629999
39.0026084470001, −76.4487817289999
38.9746589920001, −76.4487817289999.
340
27.61946242, −97.4505952709999
27.718208017, −97.4505952709999
27.718208017, −97.2437083949999
27.61946242, −97.2437083949999.
341
29.8014398060001, −90.0485449769999
29.8575240390001, −90.0485449769999
29.8575240390001, −89.9938950499999
29.8014398060001, −89.9938950499999.
342
32.499252175, −88.6318691439999
32.602832677, −88.6318691439999
32.602832677, −88.5064742839999
32.499252175, −88.5064742839999.
343
36.7852781730001, −76.063232016
36.8386906080001, −76.063232016
36.8386906080001, −75.99817255
36.7852781730001, −75.99817255.
344
36.760031462, −75.9846076869999
36.818318534, −75.9846076869999
36.818318534, −75.9490831369999
36.760031462, −75.9490831369999.
345
38.2488191400001, −76.46369128
38.3093935480001, −76.46369128
38.3093935480001, −76.373549279
38.2488191400001, −76.373549279.
346
48.311418739, −122.708096597
48.369700655, −122.708096597
48.369700655, −122.617753395
48.311418739, −122.617753395.
347
35.2654343400001, −117.8902031
36.2318077000001, −117.8902031
36.2318077000001, −116.9249447
35.2654343400001, −116.9249447.
348
13.3091094070001, 144.618332428
13.5883222610001, 144.618332428
13.5883222610001, 144.916357575
13.3091094070001, 144.916357575.
349
47.6909210600001, −122.628044406
47.705184112, −122.628044406
47.705184112, −122.613798201
47.6909210600001, −122.613798201.
350
47.6767991730001, −122.747424327
47.7726169310001, −122.747424327
47.7726169310001, −122.691878973
47.6767991730001, −122.691878973.
351
47.5449361660001, −122.671768178
47.5653870590001, −122.671768178
47.5653870590001, −122.623883723
47.5449361660001, −122.623883723.
352
32.675119312, −117.256218377
32.713082807, −117.256218377
32.713082807, −117.234025189
32.675119312, −117.234025189.
353
32.6582935910001, −117.135977498
32.6884541840001, −117.135977498
32.6884541840001, −117.112975083
32.6582935910001, −117.112975083.
354
34.088069982, −119.160456826
34.13946678, −119.160456826
34.13946678, −119.064184636
34.088069982, −119.064184636.
355
34.142955882, −119.221480878
34.175763756, −119.221480878
34.175763756, −119.195140105
34.142955882, −119.195140105.
356
55.5394297110001, −131.764707731
55.5429794870001, −131.764707731
55.5429794870001, −131.755720856
55.5394297110001, −131.755720856.
357
46.3564572000001, −98.3483000209999
46.3745994580001, −98.3483000209999
46.3745994580001, −98.3233449679999
46.3564572000001, −98.3233449679999.
358
28.581333934, −81.200124825
28.586585157, −81.200124825
28.586585157, −81.194259644
28.581333934, −81.194259644.
359
18.392254736, −67.185834374
18.405878229, −67.185834374
18.405878229, −67.170701901
18.392254736, −67.170701901.
360
44.6232594310001, −67.328272859
44.7036300010001, −67.328272859
44.7036300010001, −67.254518602
44.6232594310001, −67.254518602.
361
38.9186807040001, −77.070549603
38.9241721890001, −77.070549603
38.9241721890001, −77.063519892
38.9186807040001, −77.063519892.
362
38.8200046750001, −77.027450812
38.8300043240001, −77.027450812
38.8300043240001, −77.017462058
38.8200046750001, −77.017462058.
363
38.406152209, −77.110740786
38.43740876, −77.110740786
38.43740876, −77.0729468369999
38.406152209, −77.0729468369999.
364
30.33369265, −89.64817211
30.417826484, −89.64817211
30.417826484, −89.557854425
30.33369265, −89.557854425.
365
38.6769074200001, −76.34415482
38.6792870940001, −76.34415482
38.6792870940001, −76.343227801
38.6769074200001, −76.343227801.
366
42.3047750280001, −87.845909294
42.3249165520001, −87.845909294
42.3249165520001, −87.828493071
42.3047750280001, −87.828493071.
367
41.503275973, −71.330843392
41.554006671, −71.330843392
41.554006671, −71.30062478
41.503275973, −71.30062478.
368
36.9170290100001, −76.335615748
36.9640415810001, −76.335615748
36.9640415810001, −76.2618193489999
36.9170290100001, −76.2618193489999.
369
30.748875362, −81.576797991
30.837030033, −81.576797991
30.837030033, −81.479993971
30.748875362, −81.479993971.
370
41.3859700670001, −72.09385059
41.4104621860001, −72.09385059
41.4104621860001, −72.07728596
41.3859700670001, −72.07728596.
371
36.8809746540001, −76.427321462
36.8890977200001, −76.427321462
36.8890977200001, −76.419013745
36.8809746540001, −76.419013745.
372
38.74493505, −86.905209651
38.919755352, −86.905209651
38.919755352, −86.6788119869999
38.74493505, −86.6788119869999.
373
30.158883738, −85.760741626
30.188382598, −85.760741626
30.188382598, −85.738993885
30.158883738, −85.738993885.
374
40.0361710110001, −75.101397768
40.0471374300001, −75.101397768
40.0471374300001, −75.088731354
40.0361710110001, −75.088731354.
375
38.871230644, −76.9994186819999
38.876356839, −76.9994186819999
38.876356839, −76.9912418639999
38.871230644, −76.9912418639999.
376
38.9719405210001, −77.203514559
38.9783021020001, −77.203514559
38.9783021020001, −77.180406372
38.9719405210001, −77.180406372.
377
38.3186054830001, −77.051455995
38.3591595940001, −77.051455995
38.3591595940001, −77.014266139
38.3186054830001, −77.014266139.
378
38.5619658580001, −77.2103647979999
38.6069805630001, −77.2103647979999
38.6069805630001, −77.1602485849999
38.5619658580001, −77.1602485849999.
379
47.9738990070001, −116.566365931
47.9810063290001, −116.566365931
47.9810063290001, −116.520622995
47.9738990070001, −116.520622995.
380
40.2250093260001, −74.214186736
40.2823128210001, −74.214186736
40.2823128210001, −74.101728286
40.2250093260001, −74.101728286.
381
33.9177546080001, −117.576534598
33.9314446460001, −117.576534598
33.9314446460001, −117.562312486
33.9177546080001, −117.562312486.
382
37.208022726, −76.633932842
37.273612882, −76.633932842
37.273612882, −76.522493597
37.208022726, −76.522493597.
383
45.6322259620001, −119.895359741
45.8065550300001, −119.895359741
45.8065550300001, −119.455477367
45.6322259620001, −119.455477367.
384
32.681825013, −117.229713083
32.715125046, −117.229713083
32.715125046, −117.180755171
32.681825013, −117.180755171.
385
36.842303428, −76.3151234269999
36.849661128, −76.3151234269999
36.849661128, −76.3024406369999
36.842303428, −76.3024406369999.
386
35.180398117, −111.749899909
35.195319693, −111.749899909
35.195319693, −111.736545714
35.180398117, −111.736545714.
387
40.6710820530001, −112.091693872
40.6820119650001, −112.091693872
40.6820119650001, −112.057868517
40.6710820530001, −112.057868517.
388
37.4104380160001, −122.031548936
37.4153630160001, −122.031548936
37.4153630160001, −122.025261936
37.4104380160001, −122.025261936.
389
47.966605751, −122.271045712
47.994496312, −122.271045712
47.994496312, −122.21398207
47.966605751, −122.21398207.
390
30.361267243, −81.4636657189999
30.400329774, −81.4636657189999
30.400329774, −81.392276891
30.361267243, −81.392276891.
391
38.976796961, −76.4937690629999
38.986732986, −76.4937690629999
38.986732986, −76.4761382759999
38.976796961, −76.4761382759999.
392
38.9970659050001, −77.097142558
39.0074154440001, −77.097142558
39.0074154440001, −77.083297186
38.9970659050001, −77.083297186.
393
36.9181778190001, −76.317281615
36.933520845, −76.317281615
36.933520845, −76.2811604669999
36.9181778190001, −76.2811604669999.
394
40.216016376, −77.001594842
40.239975455, −77.001594842
40.239975455, −76.970791628
40.216016376, −76.970791628.
395
35.3183642820001, −89.890382347
35.3408744740001, −89.890382347
35.3408744740001, −89.85751768
35.3183642820001, −89.85751768.
396
36.593508146, −121.878756787
36.600645199, −121.878756787
36.600645199, −121.867184688
36.593508146, −121.867184688.
397
36.8096651020001, −76.311406446
36.8288368000001, −76.311406446
36.8288368000001, −76.291685476
36.8096651020001, −76.291685476.
398
32.384281554, −80.685725766
32.394141164, −80.685725766
32.394141164, −80.678089804
32.384281554, −80.678089804.
399
33.729669684, −118.099622184
33.774096004, −118.099622184
33.774096004, −118.041605831
33.729669684, −118.041605831.
400
36.5872707780001, −121.866360531
36.5945029280001, −121.866360531
36.5945029280001, −121.851862108
36.5872707780001, −121.851862108.
401
36.2034528880001, −115.073249953
36.3992515790001, −115.073249953
36.3992515790001, −114.91920859
36.2034528880001, −114.91920859.
402
36.4668551030001, −117.094718948
37.9076912670001, −117.094718948
37.9076912670001, −115.3004082
36.4668551030001, −115.3004082.
403
42.919235051, −71.671337464
42.952654138, −71.671337464
42.952654138, −71.616026331
42.919235051, −71.616026331.
404
39.6829375310001, −75.600492457
39.6923952360001, −75.600492457
39.6923952360001, −75.593307553
39.6829375310001, −75.593307553.
405
43.10473267, −70.797901469
43.107704771, −70.797901469
43.107704771, −70.7919169979999
43.10473267, −70.7919169979999.
406
33.568962911, −86.751872966
33.57308195, −86.751872966
33.57308195, −86.748821474
33.568962911, −86.748821474.
407
61.599438526, −149.390055835
61.606721914, −149.390055835
61.606721914, −149.35973238
61.599438526, −149.35973238.
408
36.013579803, −115.202476334
36.020786485, −115.202476334
36.020786485, −115.198858962
36.013579803, −115.198858962.
409
45.079114062, −93.178546539
45.108075439, −93.178546539
45.108075439, −93.147375066
45.079114062, −93.147375066.
410
33.7189514350001, −84.361650185
33.7254539750001, −84.361650185
33.7254539750001, −84.356222295
33.7189514350001, −84.356222295.
411
44.080835533, −70.290540358
44.094617619, −70.290540358
44.094617619, −70.272902712
44.080835533, −70.272902712.
412
42.546251763, −71.589424731
42.551133712, −71.589424731
42.551133712, −71.5781617369999
42.546251763, −71.5781617369999.
413
44.8040301450001, −68.8467649249999
44.8172629220001, −68.8467649249999
44.8172629220001, −68.8068680369999
44.8040301450001, −68.8068680369999.
414
30.354065667, −91.146045237
30.360422127, −91.146045237
30.360422127, −91.1353207689999
30.354065667, −91.1353207689999.
415
31.4025019330001, −92.335343385
31.4795765740001, −92.335343385
31.4795765740001, −92.245795576
31.4025019330001, −92.245795576.
416
40.0877668460001, −83.068853255
40.0907737950001, −83.068853255
40.0907737950001, −83.066002311
40.0877668460001, −83.066002311.
417
44.022196352, −121.133291583
44.029392756, −121.133291583
44.029392756, −121.123271772
44.022196352, −121.123271772.
418
30.173439579, −97.674627878
30.178958121, −97.674627878
30.178958121, −97.668747043
30.173439579, −97.668747043.
419
38.5445306760001, −75.0682735199999
38.5510787900001, −75.0682735199999
38.5510787900001, −75.0589773919999
38.5445306760001, −75.0589773919999.
420
44.1016551610001, −121.17360693
44.3272733540001, −121.17360693
44.3272733540001, −121.058161787
44.1016551610001, −121.058161787.
421
46.827120683, −100.725445186
46.832772324, −100.725445186
46.832772324, −100.715045706
46.827120683, −100.715045706.
422
44.392304805, −70.947124474
44.402273905, −70.947124474
44.402273905, −70.928234819
44.392304805, −70.928234819.
423
47.549068751, −122.684072241
47.556350796, −122.684072241
47.556350796, −122.678571789
47.549068751, −122.678571789.
424
33.4426391850001, −112.60836981
33.4939449270001, −112.60836981
33.4939449270001, −112.590831261
33.4426391850001, −112.590831261.
425
41.788965498, −80.0518139389999
41.798009108, −80.0518139389999
41.798009108, −80.0425795319999
41.788965498, −80.0425795319999.
426
44.708559069, −123.281143191
44.72023512, −123.281143191
44.72023512, −123.259641857
44.708559069, −123.259641857.
427
41.056686573, −96.34425821
41.096850084, −96.34425821
41.096850084, −96.326681639
41.056686573, −96.326681639.
428
39.2163393430001, −86.1037530039999
39.3929446850001, −86.1037530039999
39.3929446850001, −85.9785740709999
39.2163393430001, −85.9785740709999.
429
31.3661086110001, −92.4083963209999
31.3916242780001, −92.4083963209999
31.3916242780001, −92.3608840609999
31.3661086110001, −92.3608840609999.
430
31.6146126890001, −98.960277256
31.6667772080001, −98.960277256
31.6667772080001, −98.901021764
31.6146126890001, −98.901021764.
431
41.607753723, −71.505549174
41.623638419, −71.505549174
41.623638419, −71.491180453
41.607753723, −71.491180453.
432
47.6525289910001, −98.9417105379999
48.0636008830001, −98.9417105379999
48.0636008830001, −98.6003789309999
47.6525289910001, −98.6003789309999.
433
35.5952678190001, −95.22118754
35.7838291280001, −95.22118754
35.7838291280001, −95.126697455
35.5952678190001, −95.126697455.
434
41.9394829350001, −72.670901858
41.9441994120001, −72.670901858
41.9441994120001, −72.661211157
41.9394829350001, −72.661211157.
435
34.8124732220001, −92.3897548209999
34.9614877180001, −92.3897548209999
34.9614877180001, −92.2396274969999
34.8124732220001, −92.2396274969999.
436
30.3094558060001, −97.768694553
30.3273409100001, −97.768694553
30.3273409100001, −97.756391927
30.3094558060001, −97.756391927.
437
33.774194279, −95.606477742
33.832753059, −95.606477742
33.832753059, −95.526066382
33.774194279, −95.526066382.
438
32.5353248810001, −93.475517374
32.5878534930001, −93.475517374
32.5878534930001, −93.320012082
32.5353248810001, −93.320012082.
439
41.328015147, −72.192567648
41.334274179, −72.192567648
41.334274179, −72.18300523
41.328015147, −72.18300523.
440
43.2872218000001, −116.090973157
43.3084647600001, −116.090973157
43.3084647600001, −116.006279152
43.2872218000001, −116.006279152.
441
41.5296110640001, −83.029247488
41.5564763520001, −83.029247488
41.5564763520001, −83.011583492
41.5296110640001, −83.011583492.
442
44.0771040870001, −103.272190023
44.0820854380001, −103.272190023
44.0820854380001, −103.262202287
44.0771040870001, −103.262202287.
443
41.1628317710001, −81.1929117339999
41.2310363250001, −81.1929117339999
41.2310363250001, −80.97584481
41.1628317710001, −80.97584481.
444
46.07222877, −94.558733336
46.331943757, −94.558733336
46.331943757, −94.325692646
46.07222877, −94.325692646.
445
39.34839557, −82.9650961519999
39.360752962, −82.9650961519999
39.360752962, −82.9383779209999
39.34839557, −82.9383779209999.
446
41.29766305, −73.975066263
41.324571403, −73.975066263
41.324571403, −73.930650098
41.29766305, −73.930650098.
447
30.2132250780001, −97.335768978
30.310193057, −97.335768978
30.310193057, −97.247469425
30.2132250780001, −97.247469425.
448
30.310456754, −89.821504134
30.336315048, −89.821504134
30.336315048, −89.7963621059999
30.310456754, −89.7963621059999.
449
43.922486604, −90.276809935
43.932735952, −90.276809935
43.932735952, −90.261339487
43.922486604, −90.261339487.
450
45.4105970370001, −122.564234834
45.4146313790001, −122.564234834
45.4146313790001, −122.546020519
45.4105970370001, −122.546020519.
451
30.192979226, −91.136406361
30.209958464, −91.136406361
30.209958464, −91.120742129
30.192979226, −91.120742129.
452
33.671756665, −86.017370951
33.757794604, −86.017370951
33.757794604, −85.882188551
33.671756665, −85.882188551.
453
40.2117159210001, −75.432393416
40.2164501770001, −75.432393416
40.2164501770001, −75.42374491
40.2117159210001, −75.42374491.
454
33.6765084310001, −89.7534024129999
33.7542460250001, −89.7534024129999
33.7542460250001, −89.6202355929999
33.6765084310001, −89.6202355929999.
455
39.378532207, −79.708317675
39.454188743, −79.708317675
39.454188743, −79.639802717
39.378532207, −79.639802717.
456
42.27527302, −85.3763242809999
42.336654723, −85.3763242809999
42.336654723, −85.2764495459999
42.27527302, −85.2764495459999.
457
34.222785926, −84.1147041419999
34.225953578, −84.1147041419999
34.225953578, −84.1115279319999
34.222785926, −84.1115279319999.
458
46.8328736340001, −92.1598417499999
46.8345283600001, −92.1598417499999
46.8345283600001, −92.1578269679999
46.8328736340001, −92.1578269679999.
459
43.14072293, −115.657766227
43.147995984, −115.657766227
43.147995984, −115.647820427
43.14072293, −115.647820427.
460
38.949813614, −79.985745343
38.958420468, −79.985745343
38.958420468, −79.972014372
38.949813614, −79.972014372.
461
31.3824479420001, −92.317091139
31.4098514070001, −92.317091139
31.4098514070001, −92.279692875
31.3824479420001, −92.279692875.
462
44.4989956200001, −73.174626073
44.5216654230001, −73.174626073
44.5216654230001, −73.151341101
44.4989956200001, −73.151341101.
463
33.05649478, −111.387806148
33.118281303, −111.387806148
33.118281303, −111.318954206
33.05649478, −111.318954206.
464
36.276929619, −115.061711815
36.307014017, −115.061711815
36.307014017, −115.024997297
36.276929619, −115.024997297.
465
36.9652916110001, −78.019676053
37.1220791840001, −78.019676053
37.1220791840001, −77.838557255
36.9652916110001, −77.838557255.
466
35.177556168, −94.342568303
35.36254474, −94.342568303
35.36254474, −94.026321036
35.177556168, −94.026321036.
467
40.3805917540001, −76.740923494
40.4828843550001, −76.740923494
40.4828843550001, −76.526125382
40.3805917540001, −76.526125382.
468
33.7233962760001, −85.799971241
33.7412047100001, −85.799971241
33.7412047100001, −85.77787227
33.7233962760001, −85.77787227.
469
32.8348369830001, −98.0657312119999
32.8906953370001, −98.0657312119999
32.8906953370001, −97.9964332349999
32.8348369830001, −97.9964332349999.
470
32.775847904, −97.4626718379999
32.781682325, −97.4626718379999
32.781682325, −97.4528046649999
32.775847904, −97.4528046649999.
471
38.1716157600001, −84.921448944
38.1966283680001, −84.921448944
38.1966283680001, −84.894209462
38.1716157600001, −84.894209462.
472
18.002735849, −66.5139236319999
18.025884249, −66.5139236319999
18.025884249, −66.4942110159999
18.002735849, −66.4942110159999.
473
21.2573388270001, −157.811868495
21.2696069680001, −157.811868495
21.2696069680001, −157.793708924
21.2573388270001, −157.793708924.
474
33.910428789, −84.5361533929999
33.916196229, −84.5361533929999
33.916196229, −84.522565546
33.910428789, −84.522565546.
475
40.959663633, −98.301445179
40.964149849, −98.301445179
40.964149849, −98.296290336
40.959663633, −98.296290336.
476
40.515397589, −98.298239402
40.567785704, −98.298239402
40.567785704, −98.259993615
40.515397589, −98.259993615.
477
13.471680227, 144.807392696
13.476445623, 144.807392696
13.476445623, 144.812949999
13.471680227, 144.812949999.
478
30.4045289490001, −89.065284316
30.4205257120001, −89.065284316
30.4205257120001, −89.059168989
30.4045289490001, −89.059168989.
479
30.520223183, −90.417497467
30.526889408, −90.417497467
30.526889408, −90.406882911
30.520223183, −90.406882911.
480
39.528072455, −76.1100913129999
39.536739552, −76.1100913129999
39.536739552, −76.0982416589999
39.528072455, −76.0982416589999.
481
46.6059564510001, −111.975646726
46.6106942060001, −111.975646726
46.6106942060001, −111.967693583
46.6059564510001, −111.967693583.
482
40.4376721520001, −78.4170869339999
40.4407479890001, −78.4170869339999
40.4407479890001, −78.4124497679999
40.4376721520001, −78.4124497679999.
483
43.659487912, −70.674869746
43.67992728, −70.674869746
43.67992728, −70.654823081
43.659487912, −70.654823081.
484
39.7424976190001, −86.230956444
39.7462615480001, −86.230956444
39.7462615480001, −86.225390797
39.7424976190001, −86.225390797.
485
35.3048305680001, −120.756679866
35.3717978880001, −120.756679866
35.3717978880001, −120.664040578
35.3048305680001, −120.664040578.
486
35.594877598, −88.916399526
35.601416549, −88.916399526
35.601416549, −88.909521524
35.594877598, −88.909521524.
487
29.9497813040001, −90.0120117979999
29.9740232620001, −90.0120117979999
29.9740232620001, −89.9987827089999
29.9497813040001, −89.9987827089999.
488
38.8833909860001, −81.8464996549999
38.905765642, −81.8464996549999
38.905765642, −81.8170444439999
38.8833909860001, −81.8170444439999.
489
39.01630591, −95.6872730109999
39.022374526, −95.6872730109999
39.022374526, −95.6797306829999
39.01630591, −95.6797306829999.
490
36.4178126140001, −82.493381518
36.4246402130001, −82.493381518
36.4246402130001, −82.484291574
36.4178126140001, −82.484291574.
491
21.3142785630001, −158.069986235
21.3240454770001, −158.069986235
21.3240454770001, −158.056465611
21.3142785630001, −158.056465611.
492
39.764279425, −85.527190456
39.778947386, −85.527190456
39.778947386, −85.508361982
39.764279425, −85.508361982.
493
44.0647301270001, −122.982252253
44.0670417360001, −122.982252253
44.0670417360001, −122.973786312
44.0647301270001, −122.973786312.
494
42.766389845, −84.576207556
42.769800145, −84.576207556
42.769800145, −84.567413358
42.766389845, −84.567413358.
495
32.270748628, −106.939138534
32.280280019, −106.939138534
32.280280019, −106.930519974
32.270748628, −106.930519974.
496
40.2658142980001, −74.748095306
40.2734112650001, −74.748095306
40.2734112650001, −74.740257715
40.2658142980001, −74.740257715.
497
35.0150424290001, −97.239011654
35.0295356340001, −97.239011654
35.0295356340001, −97.223711786
35.0150424290001, −97.223711786.
498
40.8356006820001, −96.758767006
40.8404020610001, −96.758767006
40.8404020610001, −96.749174181
40.8356006820001, −96.749174181.
499
33.7812372280001, −118.067627933
33.8016134000001, −118.067627933
33.8016134000001, −118.032767969
33.7812372280001, −118.032767969.
500
32.8597198360001, −83.6073436619999
32.8630748340001, −83.6073436619999
32.8630748340001, −83.6039690959999
32.8597198360001, −83.6039690959999.
501
39.636663701, −92.534704178
39.721017576, −92.534704178
39.721017576, −92.464676968
39.636663701, −92.464676968.
502
41.267041534, −88.7046910729999
41.305913573, −88.7046910729999
41.305913573, −88.6608137729999
41.267041534, −88.6608137729999.
503
29.426494618, −98.3843199139999
29.437625079, −98.3843199139999
29.437625079, −98.3746227379999
29.426494618, −98.3746227379999.
504
39.6487077620001, −81.847046613
39.6734994180001, −81.847046613
39.6734994180001, −81.831592537
39.6487077620001, −81.831592537.
505
44.9048285740001, −123.003047071
44.9170262920001, −123.003047071
44.9170262920001, −122.995194144
44.9048285740001, −122.995194144.
506
41.1829986970001, −96.49160163
41.2049128990001, −96.49160163
41.2049128990001, −96.425755553
41.1829986970001, −96.425755553.
507
43.7601885300001, −98.047917175
43.7638707560001, −98.047917175
43.7638707560001, −98.039102093
43.7601885300001, −98.039102093.
508
32.4031817050001, −86.263631114
32.4082452810001, −86.263631114
32.4082452810001, −86.2557011
32.4031817050001, −86.2557011.
509
36.1649285010001, −78.833628877
36.2232305700001, −78.833628877
36.2232305700001, −78.75963967
36.1649285010001, −78.75963967.
510
37.81235573, −94.3097107569999
37.828354979, −94.3097107569999
37.828354979, −94.2731087829999
37.81235573, −94.2731087829999.
511
36.7579974450001, −94.387727354
36.8328900980001, −94.387727354
36.8328900980001, −94.326852463
36.7579974450001, −94.326852463.
512
42.5267790020001, −71.08203514
42.5603767370001, −71.08203514
42.5603767370001, −71.063291358
42.5267790020001, −71.063291358.
513
39.4912259380001, −76.8607346809999
39.5046787930001, −76.8607346809999
39.5046787930001, −76.8318924949999
39.4912259380001, −76.8318924949999.
514
46.1080148720001, −123.964495138
46.1501140200001, −123.964495138
46.1501140200001, −123.92502133
46.1080148720001, −123.92502133.
515
17.9872158480001, −66.333706182
18.0695436220001, −66.333706182
18.0695436220001, −66.240579825
17.9872158480001, −66.240579825.
516
33.780577163, −82.2952040439999
33.807394959, −82.2952040439999
33.807394959, −82.26292394
33.780577163, −82.26292394.
517
46.6005921770001, −112.190250013
46.6592451280001, −112.190250013
46.6592451280001, −112.094472322
46.6005921770001, −112.094472322.
518
39.423596381, −76.51081268
39.439023401, −76.51081268
39.439023401, −76.496156333
39.423596381, −76.496156333.
519
46.220510372, −111.635118944
46.337394743, −111.635118944
46.337394743, −111.504109039
46.220510372, −111.504109039.
520
42.1437413450001, −104.948278987
42.4788211760001, −104.948278987
42.4788211760001, −104.703889369
42.1437413450001, −104.703889369.
521
35.656031539, −95.375341077
35.664828514, −95.375341077
35.664828514, −95.369972431
35.656031539, −95.369972431.
522
36.0958233040001, −86.7615681459999
36.1023428190001, −86.7615681459999
36.1023428190001, −86.7562354
36.0958233040001, −86.7562354.
523
40.9786701780001, −80.325759923
40.9800945050001, −80.325759923
40.9800945050001, −80.323839076
40.9786701780001, −80.323839076.
524
35.2622862810001, −97.4851407689999
35.2681205800001, −97.4851407689999
35.2681205800001, −97.4768490759999
35.2622862810001, −97.4768490759999.
525
33.6157453390001, −84.3128273029999
33.6193347170001, −84.3128273029999
33.6193347170001, −84.3074772369999
33.6157453390001, −84.3074772369999.
526
33.4618850200001, −111.969623276
33.4727567890001, −111.969623276
33.4727567890001, −111.952212294
33.4618850200001, −111.952212294.
527
32.6578846960001, −111.495190228
32.6688813430001, −111.495190228
32.6688813430001, −111.481955968
32.6578846960001, −111.481955968.
528
35.804791455, −78.715406802
35.81355058, −78.715406802
35.81355058, −78.707216709
35.804791455, −78.707216709.
529
39.8002476090001, −82.9570252779999
39.8098625370001, −82.9570252779999
39.8098625370001, −82.94567622
39.8002476090001, −82.94567622.
530
35.3683435470001, −106.65493619
35.3777845520001, −106.65493619
35.3777845520001, −106.648878128
35.3683435470001, −106.648878128.
531
39.627394171, −75.6147487649999
39.639382105, −75.6147487649999
39.639382105, −75.6006753489999
39.627394171, −75.6006753489999.
532
43.9963073710001, −92.433533997
43.9977499120001, −92.433533997
43.9977499120001, −92.428949024
43.9963073710001, −92.428949024.
533
44.7463851480001, −93.12881708
44.7488195410001, −93.12881708
44.7488195410001, −93.125978095
44.7463851480001, −93.125978095.
534
32.284284584, −86.3990584479999
32.295043619, −86.3990584479999
32.295043619, −86.392323549
32.284284584, −86.392323549.
535
32.847954014, −97.3530685539999
32.861579522, −97.3530685539999
32.861579522, −97.3432426939999
32.847954014, −97.3432426939999.
536
37.030464438, −113.549169301
37.037578732, −113.549169301
37.037578732, −113.544639
37.030464438, −113.544639.
537
38.7817203050001, −97.642976177
38.7897490390001, −97.642976177
38.7897490390001, −97.633242512
38.7817203050001, −97.633242512.
538
37.49085725, −77.3171608389999
37.498350787, −77.3171608389999
37.498350787, −77.3077128829999
37.49085725, −77.3077128829999.
539
35.5622835610001, −106.10286838
35.5754168170001, −106.10286838
35.5754168170001, −106.071788538
35.5622835610001, −106.071788538.
540
40.1177429000001, −74.044914025
40.1299027480001, −74.044914025
40.1299027480001, −74.030081087
40.1177429000001, −74.030081087.
541
39.576923987, −85.816200007
39.580378098, −85.816200007
39.580378098, −85.807738311
39.576923987, −85.807738311.
542
32.519546491, −111.340100133
32.527987523, −111.340100133
32.527987523, −111.325196238
32.519546491, −111.325196238.
543
43.5730602740001, −96.6930749859999
43.5983048400001, −96.6930749859999
43.5983048400001, −96.6759672029999
43.5730602740001, −96.6759672029999.
544
25.9569713660001, −80.31070355
25.9681289730001, −80.31070355
25.9681289730001, −80.298558922
25.9569713660001, −80.298558922.
545
38.131120233, −89.745599204
38.190313565, −89.745599204
38.190313565, −89.703313722
38.131120233, −89.703313722.
546
40.1880831510001, −75.561069736
40.1918052850001, −75.561069736
40.1918052850001, −75.552580986
40.1880831510001, −75.552580986.
547
39.8160693520001, −89.673473292
39.8306927080001, −89.673473292
39.8306927080001, −89.664369884
39.8160693520001, −89.664369884.
548
37.2490490960001, −93.395772062
37.2571610570001, −93.395772062
37.2571610570001, −93.384982394
37.2490490960001, −93.384982394.
549
45.5372774640001, −94.060060866
45.5419761270001, −94.060060866
45.5419761270001, −94.051145099
45.5372774640001, −94.051145099.
550
45.5645070200001, −94.179496597
45.5652420030001, −94.179496597
45.5652420030001, −94.175345802
45.5645070200001, −94.175345802.
551
36.8110053980001, −75.9894743689999
36.8227442360001, −75.9894743689999
36.8227442360001, −75.9659250589999
36.8110053980001, −75.9659250589999.
552
41.3451753470001, −72.293373883
41.3813569730001, −72.293373883
41.3813569730001, −72.253317667
41.3451753470001, −72.253317667.
553
36.285694226, −95.309758124
36.300130892, −95.309758124
36.300130892, −95.278470963
36.285694226, −95.278470963.
554
43.2708696780001, −71.1288204539999
43.2848092560001, −71.1288204539999
43.2848092560001, −71.1155219099999
43.2708696780001, −71.1155219099999.
555
44.4965394450001, −73.168838485
44.5034995140001, −73.168838485
44.5034995140001, −73.160140825
44.4965394450001, −73.160140825.
556
44.442952367, −72.960320316
44.500157333, −72.960320316
44.500157333, −72.836710736
44.442952367, −72.836710736.
557
38.546453582, −92.080098162
38.556080633, −92.080098162
38.556080633, −92.055385571
38.546453582, −92.055385571.
558
19.696784098, −155.052848025
19.715068265, −155.052848025
19.715068265, −155.023635733
19.696784098, −155.023635733.
559
36.8796769900001, −90.310798339
36.9046015270001, −90.310798339
36.9046015270001, −90.255783907
36.8796769900001, −90.255783907.
560
39.441791832, −79.6837218599999
39.464465755, −79.6837218599999
39.464465755, −79.6475069149999
39.441791832, −79.6475069149999.
561
34.9067538520001, −85.070727678
34.9506642170001, −85.070727678
34.9506642170001, −85.045031881
34.9067538520001, −85.045031881.
562
35.814732012, −88.7542933719999
35.923989023, −88.7542933719999
35.923989023, −88.6437411839999
35.814732012, −88.6437411839999.
563
36.006276454, −86.516501852
36.027518046, −86.516501852
36.027518046, −86.492335009
36.006276454, −86.492335009.
564
44.067527784, −103.325214534
44.0784787400001, −103.325214534
44.0784787400001, −103.287313773
44.067527784, −103.287313773.
565
43.0833898060001, −72.4562338169999
43.0889316040001, −72.4562338169999
43.0889316040001, −72.4474520169999
43.0833898060001, −72.4474520169999.
566
37.2459669690001, −87.264708566
37.3155568590001, −87.264708566
37.3155568590001, −87.143105234
37.2459669690001, −87.143105234.
567
39.3487643610001, −81.448406511
39.3590411380001, −81.448406511
39.3590411380001, −81.437125672
39.3487643610001, −81.437125672.
568
43.230983715, −78.987693814
43.244098627, −78.987693814
43.244098627, −78.957641634
43.230983715, −78.957641634.
569
38.414110285, −90.4008158519999
38.51933631, −90.4008158519999
38.51933631, −89.8873624389999
38.414110285, −89.8873624389999.
570
43.1058774480001, −78.9722862359999
43.1213964380001, −78.9722862359999
43.1213964380001, −78.9269798539999
43.1058774480001, −78.9269798539999.
571
38.8465829040001, −76.9406129989999
38.8511023340001, −76.9406129989999
38.8511023340001, −76.9338436309999
38.8465829040001, −76.9338436309999.
572
36.799812242, −76.299262352
36.806581273, −76.299262352
36.806581273, −76.291663588
36.799812242, −76.291663588.
573
36.824516203, −76.2911109619999
36.82654125, −76.2911109619999
36.82654125, −76.2870895149999
36.824516203, −76.2870895149999.
574
31.0389879680001, −87.076766692
31.0572498550001, −87.076766692
31.0572498550001, −87.053283792
31.0389879680001, −87.053283792.
575
30.486569113, −86.966743959
30.523283452, −86.966743959
30.523283452, −86.940434633
30.486569113, −86.940434633.
576
31.4033835660001, −87.057347927
31.4251772980001, −87.057347927
31.4251772980001, −87.022039826
31.4033835660001, −87.022039826.
577
30.417555556, −86.9026103099999
30.432862018, −86.9026103099999
30.432862018, −86.8837180249999
30.417555556, −86.8837180249999.
578
30.599791442, −86.950876547
30.619098213, −86.950876547
30.619098213, −86.9265002429999
30.599791442, −86.9265002429999.
579
30.5546267450001, −87.8164634139999
30.5687059560001, −87.8164634139999
30.5687059560001, −87.8015463849999
30.5546267450001, −87.8015463849999.
580
30.617963515, −87.148395847
30.632703528, −87.148395847
30.632703528, −87.131141293
30.617963515, −87.131141293.
581
30.499075884, −87.6626447849999
30.520323757, −87.6626447849999
30.520323757, −87.6311911829999
30.499075884, −87.6311911829999.
582
30.338386572, −87.5495986079999
30.351971261, −87.5495986079999
30.351971261, −87.5332728869999
30.338386572, −87.5332728869999.
583
35.3381397860001, −89.875828209
35.3503400000001, −89.875828209
35.3503400000001, −89.848676466
35.3381397860001, −89.848676466.
584
36.535830635, −76.292027831
36.580439287, −76.292027831
36.580439287, −76.243039727
36.535830635, −76.243039727.
585
33.891359251, −118.072946629
33.894991619, −118.072946629
33.894991619, −118.067394654
33.891359251, −118.067394654.
586
38.3285014350001, −76.4841629759999
38.3442330700001, −76.4841629759999
38.3442330700001, −76.4639193759999
38.3285014350001, −76.4639193759999.
587
43.077684909, −73.823802707
43.082196982, −73.823802707
43.082196982, −73.818216923
43.077684909, −73.818216923.
588
18.4266523270001, −66.188700669
18.4276186450001, −66.188700669
18.4276186450001, −66.187788338
18.4266523270001, −66.187788338.
589
35.086256399, −90.1438097929999
35.090263498, −90.1438097929999
35.090263498, −90.138466962
35.086256399, −90.138466962.
590
42.4740966470001, −71.292022302
42.4801271500001, −71.292022302
42.4801271500001, −71.286586841
42.4740966470001, −71.286586841.
591
41.0982621430001, −95.9280611469999
41.1364452900001, −95.9280611469999
41.1364452900001, −95.8780365989999
41.0982621430001, −95.8780365989999.
592
32.7452306660001, −117.200217282
32.7528565660001, −117.200217282
32.7528565660001, −117.192605845
32.7452306660001, −117.192605845.
593
32.783231948, −88.8532491779999
32.814254912, −88.8532491779999
32.814254912, −88.8124127399999
32.783231948, −88.8124127399999.
594
30.37231968, −87.429057305
30.394059181, −87.429057305
30.394059181, −87.396697185
30.37231968, −87.396697185.
595
48.1708872200001, −122.648186576
48.2120255960001, −122.648186576
48.2120255960001, −122.615173447
48.1708872200001, −122.615173447.
596
30.338350216, −81.889129182
30.377897748, −81.889129182
30.377897748, −81.84492402
30.338350216, −81.84492402.
597
70.488162834, −149.926235024
70.509905742, −149.926235024
70.509905742, −149.855544128
70.488162834, −149.855544128.
598
43.098523582, −116.31428757
43.37173967, −116.31428757
43.37173967, −115.957075202
43.098523582, −115.957075202.
599
38.0231563570001, −122.170412652
38.0284346090001, −122.170412652
38.0284346090001, −122.162692799
38.0231563570001, −122.162692799.
600
21.979075729, −159.787895529
22.073530219, −159.787895529
22.073530219, −159.750843749
21.979075729, −159.750843749.
601
37.709457716, −121.91515472
37.747451286, −121.91515472
37.747451286, −121.871676143
37.709457716, −121.871676143.
602
28.2124892410001, −80.6189925959999
28.2719774110001, −80.6189925959999
28.2719774110001, −80.5967212699999
28.2124892410001, −80.5967212699999.
603
21.3812730710001, −157.972837384
21.3857579590001, −157.972837384
21.3857579590001, −157.969830103
21.3812730710001, −157.969830103.
604
43.0830098340001, −70.8265315799999
43.095680228, −70.8265315799999
43.095680228, −70.8118178159999
43.0830098340001, −70.8118178159999.
605
38.8665872170001, −77.06187689
38.8804333410001, −77.06187689
38.8804333410001, −77.0457741439999
38.8665872170001, −77.0457741439999.
606
38.805877954, −104.720171001
38.838836254, −104.720171001
38.838836254, −104.673427575
38.805877954, −104.673427575.
607
40.9140682660001, −74.590780383
40.9956152640001, −74.590780383
40.9956152640001, −74.494014259
40.9140682660001, −74.494014259.
608
18.26752057, −65.759072139
18.26922761, −65.759072139
18.26922761, −65.757502273
18.26752057, −65.757502273.
609
37.495160689, −122.500638613
37.504255663, −122.500638613
37.504255663, −122.494186302
37.495160689, −122.494186302.
610
34.2702027120001, −92.13996888
34.3785932240001, −92.13996888
34.3785932240001, −92.033468658
34.2702027120001, −92.033468658.
611
18.2467234310001, −65.600381523
18.2570859030001, −65.600381523
18.2570859030001, −65.5822592889999
18.2467234310001, −65.5822592889999.
612
37.339590329, −104.173059108
37.644554428, −104.173059108
37.644554428, −103.576450075
37.339590329, −103.576450075.
613
40.489967456, −80.215160815
40.497923194, −80.215160815
40.497923194, −80.205677052
40.489967456, −80.205677052.
614
40.4899753650001, −80.215361211
40.4979311050001, −80.215361211
40.4979311050001, −80.205680084
40.4899753650001, −80.205680084.
615
19.580002141, −155.753584385
19.935340889, −155.753584385
19.935340889, −155.482149063
19.580002141, −155.482149063.
616
33.737668318, −80.5168304859999
33.849728431, −80.5168304859999
33.849728431, −80.4450008049999
33.737668318, −80.4450008049999.
617
38.887515787, −123.552272552
38.895551718, −123.552272552
38.895551718, −123.538718114
38.887515787, −123.538718114.
618
71.323665191, −156.649567453
71.336534761, −156.649567453
71.336534761, −156.601540334
71.323665191, −156.601540334.
619
45.57436111, −122.604832246
45.583315392, −122.604832246
45.583315392, −122.585382407
45.57436111, −122.585382407.
620
42.9087822710001, −71.4221747879999
43.0870732990001, −71.4221747879999
43.0870732990001, −70.722436956
42.9087822710001, −70.722436956.
621
36.594597106, −121.926941695
36.608467628, −121.926941695
36.608467628, −121.894607972
36.594597106, −121.894607972.
622
38.263930139, −104.386297178
38.360999196, −104.386297178
38.360999196, −104.275724057
38.263930139, −104.275724057.
623
38.290060253, −77.0671300829999
38.31683736, −77.0671300829999
38.31683736, −77.0170631189999
38.290060253, −77.0170631189999.
624
21.3139823400001, −157.992793478
21.3226045200001, −157.992793478
21.3226045200001, −157.982066252
21.3139823400001, −157.982066252.
625
41.5907533440001, −71.42348666
41.6007626130001, −71.42348666
41.6007626130001, −71.41187911
41.5907533440001, −71.41187911.
626
37.163382287, −80.5791188709999
37.207412609, −80.5791188709999
37.207412609, −80.5101282629999
37.163382287, −80.5101282629999.
627
18.5087916470001, −67.099861576
18.5101598370001, −67.099861576
18.5101598370001, −67.098621282
18.5087916470001, −67.098621282.
628
33.397278645, −94.4116859869999
33.464838472, −94.4116859869999
33.464838472, −94.3047919909999
33.397278645, −94.3047919909999.
629
44.9551877580001, −70.513638005
45.0169721250001, −70.513638005
45.0169721250001, −70.379987151
44.9551877580001, −70.379987151.
630
34.550284843, −86.7237782349999
34.710900354, −86.7237782349999
34.710900354, −86.5815630549999
34.550284843, −86.5815630549999.
631
39.4978523080001, −119.778804811
39.5024544730001, −119.778804811
39.5024544730001, −119.771926612
39.4978523080001, −119.771926612.
632
39.806889794, −82.949783742
39.819444408, −82.949783742
39.819444408, −82.937417355
39.806889794, −82.937417355.
633
38.1508457090001, −78.418005901
38.1586875990001, −78.418005901
38.1586875990001, −78.409329548
38.1508457090001, −78.409329548.
634
37.7110124880001, −120.921809782
37.7227924600001, −120.921809782
37.7227924600001, −120.9168393
37.7110124880001, −120.9168393.
635
32.5734846130001, −83.613041736
32.6644753900001, −83.613041736
32.6644753900001, −83.555394419
32.5734846130001, −83.555394419.
636
41.5101975790001, −90.566624136
41.5236820390001, −90.566624136
41.5236820390001, −90.515679261
41.5101975790001, −90.515679261.
637
39.816797712, −104.880637268
39.895272909, −104.880637268
39.895272909, −104.796958344
39.816797712, −104.796958344.
638
61.756264087, −166.062507434
61.799913075, −166.062507434
61.799913075, −165.913701567
61.756264087, −165.913701567.
639
43.2183336890001, −75.415282906
43.2263537340001, −75.415282906
43.2263537340001, −75.407014028
43.2183336890001, −75.407014028.
640
39.762626991, −94.904952104
39.769793541, −94.904952104
39.769793541, −94.897835881
39.762626991, −94.897835881.
641
31.3342942350001, −86.0977289259999
31.3453725330001, −86.0977289259999
31.3453725330001, −86.085558079
31.3342942350001, −86.085558079.
642
40.7838318330001, −111.959489583
40.7949147800001, −111.959489583
40.7949147800001, −111.953751907
40.7838318330001, −111.953751907.
643
32.8003673640001, −118.606292107
33.0377362220001, −118.606292107
33.0377362220001, −118.348994062
32.8003673640001, −118.348994062.
644
33.2121599560001, −119.582134532
33.29062044, −119.582134532
33.29062044, −119.418213784
33.2121599560001, −119.418213784.
645
33.7662733170001, −118.309268541
33.7813000720001, −118.309268541
33.7813000720001, −118.293960351
33.7662733170001, −118.293960351.
646
33.991029047, −119.635878529
33.997444378, −119.635878529
33.997444378, −119.625797527
33.991029047, −119.625797527.
647
30.458179069, −87.351595059
30.481667064, −87.351595059
30.481667064, −87.33104122
30.458179069, −87.33104122.
648
42.1757726720001, −90.4077834729999
42.284196191, −90.4077834729999
42.284196191, −90.2282601739999
42.1757726720001, −90.2282601739999.
649
32.119801635, −81.1976294959999
32.13505162, −81.1976294959999
32.13505162, −81.1837630719999
32.119801635, −81.1837630719999.
650
42.5925001000001, −115.678838723
42.8511848830001, −115.678838723
42.8511848830001, −115.453730372
42.5925001000001, −115.453730372.
651
42.8436851000001, −73.932567765
42.8583933770001, −73.932567765
42.8583933770001, −73.917508999
42.8436851000001, −73.917508999.
652
38.7843530810001, −104.551986183
38.8241032480001, −104.551986183
38.8241032480001, −104.48867271
38.7843530810001, −104.48867271.
653
38.524439918, −89.882877352
38.558372905, −89.882877352
38.558372905, −89.822791153
38.524439918, −89.822791153.
654
41.402655098, −75.6679100109999
41.405858099, −75.6679100109999
41.405858099, −75.6641420559999
41.402655098, −75.6641420559999.
655
36.9172616480001, −76.320386974
36.9234795100001, −76.320386974
36.9234795100001, −76.310890414
36.9172616480001, −76.310890414.
656
48.26740571, −122.645903557
48.3084303770001, −122.645903557
48.3084303770001, −122.555529232
48.26740571, −122.555529232.
657
42.5944000000001, −82.8511999999999
42.6303400000001, −82.8511999999999
42.6303400000001, −82.8038799999999
42.5944000000001, −82.8038799999999.
658
36.237894413, −119.894821285
36.250497998, −119.894821285
36.250497998, −119.869682611
36.237894413, −119.869682611.
659
60.1318770720001, −149.434449035
60.1347511870001, −149.434449035
60.1347511870001, −149.431802327
60.1318770720001, −149.431802327.
660
35.3214638170001, −77.997073351
35.368940398, −77.997073351
35.368940398, −77.930639313
35.3214638170001, −77.930639313.
661
33.9530524190001, −80.494323712
33.9954038330001, −80.494323712
33.9954038330001, −80.441564645
33.9530524190001, −80.441564645.
662
31.3582318730001, −85.856088056
31.3677829840001, −85.856088056
31.3677829840001, −85.84143832
31.3582318730001, −85.84143832.
663
33.956330827, −98.528137592
34.017271784, −98.528137592
34.017271784, −98.4775551939999
33.956330827, −98.4775551939999.
664
40.1402214060001, −120.185906595
40.2702161240001, −120.185906595
40.2702161240001, −120.074522544
40.1402214060001, −120.074522544.
665
32.585610327, −117.134530157
32.609517949, −117.134530157
32.609517949, −117.121573696
32.585610327, −117.121573696.
666
42.3865801530001, −96.377733927
42.3986855140001, −96.377733927
42.3986855140001, −96.3700527519999
42.3865801530001, −96.3700527519999.
667
31.2790279390001, −86.135253897
31.2921867390001, −86.135253897
31.2921867390001, −86.12630462
31.2790279390001, −86.12630462.
668
38.5971126590001, −97.891769008
38.7549420740001, −97.891769008
38.7549420740001, −97.731700038
38.5971126590001, −97.731700038.
669
32.665275626, −117.245056924
32.670651139, −117.245056924
32.670651139, −117.237168313
32.665275626, −117.237168313.
670
61.088401402, −155.608677328
61.118439774, −155.608677328
61.118439774, −155.558809541
61.088401402, −155.558809541.
671
39.8435710260001, −83.84415892
39.8525313250001, −83.84415892
39.8525313250001, −83.827046603
39.8435710260001, −83.827046603.
672
36.7792288150001, −76.316870104
36.7960357240001, −76.316870104
36.7960357240001, −76.304641406
36.7792288150001, −76.304641406.
673
38.5886024650001, −90.211334345
38.5936509870001, −90.211334345
38.5936509870001, −90.205345975
38.5886024650001, −90.205345975.
674
41.491597375, −74.096301663
41.493603532, −74.096301663
41.493603532, −74.09231513
41.491597375, −74.09231513.
675
41.4957478590001, −74.093456875
41.5071142860001, −74.093456875
41.5071142860001, −74.076705335
41.4957478590001, −74.076705335.
676
31.3556919110001, −86.019020089
31.3632965050001, −86.019020089
31.3632965050001, −86.009368893
31.3556919110001, −86.009368893.
677
38.5366165980001, −77.2462204349999
38.5562248710001, −77.2462204349999
38.5562248710001, −77.1968327609999
38.5366165980001, −77.1968327609999.
678
43.093425804, −76.13209217
43.105369507, −76.13209217
43.105369507, −76.117106326
43.093425804, −76.117106326.
679
31.1194852620001, −85.983038227
31.1263987840001, −85.983038227
31.1263987840001, −85.975130114
31.1194852620001, −85.975130114.
680
32.90171336, −115.830667748
33.00155658, −115.830667748
33.00155658, −115.679781585
32.90171336, −115.679781585.
681
62.864848431, −156.051764799
62.942582989, −156.051764799
62.942582989, −155.664968137
62.864848431, −155.664968137.
682
32.418304849, −113.683744005
32.912746437, −113.683744005
32.912746437, −112.306115231
32.418304849, −112.306115231.
683
38.9884924360001, −105.010363219
39.0140804660001, −105.010363219
39.0140804660001, −104.991241919
38.9884924360001, −104.991241919.
684
65.5522801760001, −168.013053723
65.5830229910001, −168.013053723
65.5830229910001, −167.912258962
65.5522801760001, −167.912258962.
685
35.384500001, −97.4236999999999
35.4497, −97.4236999999999
35.4497, −97.3502865429999
35.384500001, −97.3502865429999.
686
41.1825353090001, −75.443820828
41.2131432310001, −75.443820828
41.2131432310001, −75.411887882
41.1825353090001, −75.411887882.
687
41.58166204, −83.799456627
41.59389898, −83.799456627
41.59389898, −83.786432604
41.58166204, −83.786432604.
688
40.2607276530001, −112.497273742
40.5755204400001, −112.497273742
40.5755204400001, −112.279088302
40.2607276530001, −112.279088302.
689
31.2251159510001, −85.564347313
31.2323695170001, −85.564347313
31.2323695170001, −85.553616915
31.2251159510001, −85.553616915.
690
31.3753255780001, −81.894810498
31.6654206230001, −81.894810498
31.6654206230001, −81.52596687
31.3753255780001, −81.52596687.
691
38.231289094, −121.98346892
38.294736015, −121.98346892
38.294736015, −121.881230384
38.231289094, −121.881230384.
692
38.3228969080001, −121.933846122
38.3283655290001, −121.933846122
38.3283655290001, −121.915378048
38.3228969080001, −121.915378048.
693
21.351128573, −157.898178476
21.367812054, −157.898178476
21.367812054, −157.879404163
21.351128573, −157.879404163.
694
21.4642480200001, −158.148373992
21.5218182430001, −158.148373992
21.5218182430001, −157.901772211
21.4642480200001, −157.901772211.
695
43.1244504040001, −89.341539911
43.1368306370001, −89.341539911
43.1368306370001, −89.328466326
43.1244504040001, −89.328466326.
696
24.5433363610001, −81.811655077
24.5555222860001, −81.811655077
24.5555222860001, −81.797521593
24.5433363610001, −81.797521593.
697
24.5614307340001, −81.798222455
24.5672092190001, −81.798222455
24.5672092190001, −81.782640081
24.5614307340001, −81.782640081.
698
32.127406367, −110.955077243
32.133937736, −110.955077243
32.133937736, −110.945092818
32.127406367, −110.945092818.
699
36.2121647440001, −95.878742446
36.2203832320001, −95.878742446
36.2203832320001, −95.868966625
36.2121647440001, −95.868966625.
700
45.07910944, −93.181911062
45.104247148, −93.181911062
45.104247148, −93.166136656
45.07910944, −93.166136656.
701
29.953597589, −85.6870879419999
30.141953697, −85.6870879419999
30.141953697, −85.444996611
29.953597589, −85.444996611.
702
38.983678555, −76.5010465079999
38.992477092, −76.5010465079999
38.992477092, −76.4868322629999
38.983678555, −76.4868322629999.
703
21.469739594, −158.057058607
21.479496623, −158.057058607
21.479496623, −158.050204602
21.469739594, −158.050204602.
704
38.750330283, −104.304283339
38.795708158, −104.304283339
38.795708158, −104.298582551
38.750330283, −104.298582551.
705
38.9545078850001, −104.910763947
39.0421097770001, −104.910763947
39.0421097770001, −104.830835276
38.9545078850001, −104.830835276.
706
33.2114718620001, −117.39895734
33.2146081990001, −117.39895734
33.2146081990001, −117.395706525
33.2114718620001, −117.395706525.
707
40.339366355, −114.13239866
41.187663286, −114.13239866
41.187663286, −112.775026182
40.339366355, −112.775026182.
708
36.3075026230001, −97.932652751
36.3645349300001, −97.932652751
36.3645349300001, −97.890961956
36.3075026230001, −97.890961956.
709
34.5107894400001, −120.645844615
34.9069803380001, −120.645844615
34.9069803380001, −120.439765984
34.5107894400001, −120.439765984.
710
43.125429819, −75.5932489149999
43.128384246, −75.5932489149999
43.128384246, −75.5892130629999
43.125429819, −75.5892130629999.
711
18.093746783, −65.5171222009999
18.099320238, −65.5171222009999
18.099320238, −65.5081834699999
18.093746783, −65.5081834699999.
712
43.9198868560001, −90.281512146
44.2491740180001, −90.281512146
44.2491740180001, −89.9961840639999
43.9198868560001, −89.9961840639999.
713
42.308018614, −85.261730616
42.319058737, −85.261730616
42.319058737, −85.241088866
42.308018614, −85.241088866.
714
43.1194738070001, −87.9811739899999
43.1294331440001, −87.9811739899999
43.1294331440001, −87.969765633
43.1194738070001, −87.969765633.
715
21.444134852, −158.193880164
21.449106118, −158.193880164
21.449106118, −158.188834873
21.444134852, −158.188834873.
716
33.30623532, −116.726204555
33.348258648, −116.726204555
33.348258648, −116.681746107
33.30623532, −116.681746107.
717
40.416741642, −74.074863319
40.428227856, −74.074863319
40.428227856, −74.066019589
40.416741642, −74.066019589.
718
42.715762833, −73.715197659
42.723757367, −73.715197659
42.723757367, −73.7014418059999
42.715762833, −73.7014418059999.
719
38.131610059, −76.4415151439999
38.158782096, −76.4415151439999
38.158782096, −76.4141914209999
38.131610059, −76.4141914209999.
720
29.9448494910001, −90.0376652149999
29.9527562370001, −90.0376652149999
29.9527562370001, −90.028618848
29.9448494910001, −90.028618848.
721
39.905374947, −113.701870713
40.419222199, −113.701870713
40.419222199, −112.723055564
39.905374947, −112.723055564.
722
41.3164009720001, −74.104566558
41.4138497160001, −74.104566558
41.4138497160001, −73.950569356
41.3164009720001, −73.950569356.
723
42.1732117120001, −72.560346443
42.2183966200001, −72.560346443
42.2183966200001, −72.513149263
42.1732117120001, −72.513149263.
724
21.4548202730001, −158.05113405
21.4906567190001, −158.05113405
21.4906567190001, −158.023893229
21.4548202730001, −158.023893229.
725
47.6996152880001, −117.582780473
47.7046436220001, −117.582780473
47.7046436220001, −117.571913796
47.6996152880001, −117.571913796.
726
32.3256631690001, −106.751912813
33.9110868210001, −106.751912813
33.9110868210001, −106.097200035
32.3256631690001, −106.097200035.
727
38.7024149040001, −93.5961699699999
38.7611248150001, −93.5961699699999
38.7611248150001, −93.530993696
38.7024149040001, −93.530993696.
728
35.403434766, −97.615579224
35.411418204, −97.615579224
35.411418204, −97.607653269
35.403434766, −97.607653269.
729
30.5215171080001, −88.98512068
30.5592917870001, −88.98512068
30.5592917870001, −88.952736979
30.5215171080001, −88.952736979.
730
39.7790113880001, −84.122505244
39.8514988460001, −84.122505244
39.8514988460001, −84.013795999
39.7790113880001, −84.013795999.
731
28.235254233, −98.748507381
28.257299957, −98.748507381
28.257299957, −98.699312525
28.235254233, −98.699312525.
732
34.8723464400001, −116.88720812
34.9011810040001, −116.88720812
34.9011810040001, −116.849270991
34.8723464400001, −116.849270991.
733
37.211273261, −76.4914782399999
37.220744848, −76.4914782399999
37.220744848, −76.4804938719999
37.211273261, −76.4804938719999.
734
41.2592384490001, −80.6956297689999
41.2720857920001, −80.6956297689999
41.2720857920001, −80.6669307879999
41.2592384490001, −80.6669307879999.
735
64.7319686270001, −147.051773314
64.8134110040001, −147.051773314
64.8134110040001, −146.755123322
64.7319686270001, −146.755123322.
736
32.765238373, −114.588551663
33.551544978, −114.588551663
33.551544978, −113.648148435
32.765238373, −113.648148435.
eCFR Content
Pages
Titles
Recent Changes
Corrections
Reader Aids
Using the eCFR Point-in-Time System
Understanding the eCFR
Government Policy and OFR Procedures
Developer Resources
Recent Site Updates
Information
About This Site
Legal Status
FOIA
No Fear Act
Continuity Information
My eCFR
My Subscriptions
Sign In / Sign Up