“Plaintiffs may take the BSDR, intended as a national security tool, and ‘stretch its original intent’ as part of a broader litigation strategy as the lawsuits ramp up, said R Street Institute Resident Fellow of Cybersecurity and Emerging Threats Haiman Wong said.

How judges rule in these early cases ‘could have significant implications not only for how companies interpret their compliance obligations, but also for how national security-driven data governance rules evolve going forward,’ she said.”