Meridian › Archive › 2026-08-26

This page is the permanent record — kept in English by design. Every Meridian entry lives at one canonical URL, in one authoritative language, so it can be cited, linked, and verified years from now without translation drift. Translated editions of today’s coverage are available in the daily brief. → Read today’s brief in your language

2026-08-26 · Logged by the Meridian desk

CISA Finalizes Security Requirements for Restricted Data Transactions

US-FEDMAJORRegulation in forceData protectionSecurity & incidents

What changed

CISA published finalized security requirements for restricted transactions under Executive Order 14117, following an October 2024 proposal and public comment period, and responded to that feedback in the notice.

Who this touches

Entities engaging in restricted data transactions as classified under DOJ regulations implementing Executive Order 14117.

Why it matters

The proposed-to-final shift means the specific security requirements companies must meet for restricted transactions are now settled rather than open for comment.

Suggested next step — and why

Organizations with restricted transactions under the DOJ classification may want to compare their current security postures against the finalized CISA requirements rather than the October 2024 proposal.

The clock

CISA published proposed requirements in October 2024; the finalized requirements are now published, incorporating responses to that comment period.

Primary source: FR: data minimization — read in the original, not from coverage. Source ID: us-fr-data-minim

Permanent record: this page is public forever. "When did we know?" always has a URL.

Curated nightly by Dr. Ivan Del Valle — AI governance architect, editor of The Compact. Disagree with a reading? Write ivan.delvalle@rsit.ai — every message is read, most are answered. Corrections are published, not buried. · Today's brief · Method · Reporting free forever; the desk is sustained by its data plans.