Access Restrictions Under DOJ Data Security Program

PhysioNet has introduced updated access policies for certain datasets to comply with the U.S. Department of Justice’s Data Security Program (DSP) under Executive Order 14117. The DSP final rule took effect on April 8, 2025 and full enforcement began July 8, 2025: https://www.justice.gov/opa/media/1396351/dl

The DSP imposes export-control–style restrictions on U.S. persons sharing or transferring bulk sensitive personal data (e.g., genomic, biometric, health, financial, geolocation) and U.S. government-related data with specified countries or "covered persons". The rule applies to interactions with countries including: China (including Hong Kong and Macau), Cuba, Iran, North Korea, Russia, and Venezuela, as well as individuals or entities connected to them.

PhysioNet now prevents access to certain controlled-access datasets for users connecting from IP addresses or affiliations in those regions, or for those classified as “covered persons”. These steps are taken to satisfy legal obligations and are not a judgment on your work as researchers.

We understand these changes may affect ongoing research. PhysioNet is committed to supporting your efforts to understand the policy and explore compliant access options.

Further information

• DOJ DSP Compliance Guide and FAQs: https://www.justice.gov/opa/media/1396351/dl
• NIH Notice NOT‑OD‑25‑083, which imposes similar NIH-specific restrictions: https://grants.nih.gov/grants/guide/notice-files/NOT-OD-25-083.html