Major news from the Department of Justice this week is the indictment of New York Attorney General Letitia James on charges of bank fraud and false statements to a financial institution. This development comes after sustained pressure from President Trump, who recently called for James and the judge in her previous case against him to be “arrested and punished accordingly.” Federal prosecutors allege that James lied on her mortgage application in 2020, benefitting from favorable terms, but James has publicly blasted the charge as “baseless” and described it as a “grave violation of our Constitutional order,” calling the prosecution a weaponization of federal law enforcement. DOJ’s spokesperson Lindsey Halligan responded, “No one is above the law. The charges… represent intentional, criminal acts and tremendous breaches of the public’s trust. The facts and the law in this case are clear, and we will continue… to ensure that justice is served.”

But there’s more behind the headlines. This week also marked the critical October 6 compliance deadline for the DOJ’s sweeping Data Security Program. Now, any American company or individual handling sensitive bulk personal data—or US government-related information—must have written programs detailing how they audit, report, and keep records about their data transactions. These rules usher in tougher standards for cross-border data flows and require due diligence, especially impacting small businesses that handle customer or government data. During the ongoing federal shutdown, the DOJ’s National Security Division emphasized that cybersecurity, export control, and sanctions enforcement remain top priorities in its contingency plans.

Adding to this, DOJ is moving forward with new white-collar enforcement priorities announced by Criminal Division head Matthew Galeotti. Galeotti’s memo this May emphasized a “focus on high-impact waste, fraud, and abuse,” naming health care fraud and federal procurement fraud as top targets. New policies also encourage alternatives to criminal prosecution and reward companies for cooperation and voluntary self-disclosure. Notably, the DOJ’s whistleblower pilot program has been revised to cover more offenses like customs fraud, immigration violations, and helping transnational criminal organizations.

For Americans, these developments mean greater protections against data misuse, especially as regulators crack down on breaches and fraud. For businesses, especially in tech, financial, and health care sectors, the new compliance and enforcement rules require immediate attention to cybersecurity and corporate governance. State and local governments must brace for more federal scrutiny—and for disruptions in case of shutdowns affecting DOJ operations. On the global stage, expanded civil forfeiture proceedings signal harsher measures against transnational criminal groups and sanctions evaders, with likely impacts on foreign tech and finance companies.

Attorney General Pam Bondi urges, “We are committed to rooting out insidious conduct, but determined to balance enforcement without harming U.S. business interests.” According to DOJ’s latest timeline, companies who fail to meet the new Data Security Program criteria risk enforcement actions starting immediately. Experts also warn to watch for possible court decisions on pending government funding and shutdowns, which could affect DOJ enforcement activity and legal deadlines.

Citizens should take note: if you handle sensitive data, review new compliance requirements. For whistleblowers, new incentives are available for reports that lead to asset forfeitures in priority areas. You can find resources, program details, and guidance at justice.gov.

Keep your eye on DOJ’s next steps, especially any rulings in the James case and additional enforcement guidance. For more on these stories, check out official DOJ news and policy updates. Be sure to subscribe...