This bill makes it unlawful for a data broker to sell, license, rent, trade, transfer, release, disclose, or otherwise make available specified personally identifiable sensitive data of individuals who reside in the United States to North Korea, China, Russia, or Iran or an entity controlled by such a country (e.g., headquartered in or owned by a person in the country). Sensitive data includes government-issued identifiers (e.g., Social Security numbers), financial account numbers, biometric information, genetic information, precise geolocation information, and private communications (e.g., texts or emails). A data broker generally includes an entity that sells or otherwise provides data of individuals that the entity did not collect directly from the individuals. A data broker does not include an entity that transmits an individual's data or communications at the request or direction of the individual or an entity that makes news or information available to the general public. The bill provides for enforcement by the Federal Trade Commission.