US privacy laws do not impose restrictions on cross-border data transfer but the entities exporting it remain liable in case of misuse. Some sector-specific restrictions exist with respect to financial services, insurance and health care. Moreover, in 2024, the White House released an  Executive Order that directs several new regulatory steps to limit the transfer of sensitive personal data outside of the United States to “countries of concern.”