1. Short title This Act may be cited as the Protecting Personal Data from Foreign Adversaries Act . 2. Authorities to regulate or prohibit transactions using mobile applications or software programs that engage in the theft of user data on behalf of a communist country, foreign adversary, or state sponsor of terrorism Section 203 of the International Emergency Economic Powers Act ( 50 U.S.C. 1702 ) is amended— (1) by redesignating subsection (c) as subsection (d); and (2) by inserting after subsection (b) the following new subsection: (c) (1) Notwithstanding subsection (b), the authority granted to the President by this section includes the authority to regulate or prohibit transactions using mobile applications or software programs that— (A) engage in the theft of or transmits a user’s data in an unauthorized manner; and (B) provide to a covered country, or covered foreign political party, access to such data. (2) In this subsection, the term covered country means any of the following: (A) A Communist country. (B) A foreign adversary. (C) A state sponsor of terrorism. (3) In this subsection: (A) The term communist country has the meaning given such term in section 620(f)(1) of the Foreign Assistance Act of 1961 ( 22 U.S.C. 2370(f)(1) ). (B) The term foreign adversary has the meaning given such term in Executive Order 13920, issued on May 1, 2020, entitled Securing the United States BulkPower System , and including the list of foreign adversaries identified by the Department of Energy’s Office of Electricity pursuant to such Executive Order on July 7, 2020, as in effect on January 19, 2021. (C) The term state sponsor of terrorism means a country the government of which the Secretary of State determines has repeatedly provided support for international terrorism pursuant to— (i) section 1754(c)(1)(A) of the Export Control Reform Act of 2018 ( 50 U.S.C. 4813(c)(1)(A) ); (ii) section 620A of the Foreign Assistance Act of 1961 ( 22 U.S.C. 2371 ); (iii) section 40 of the Arms Export Control Act ( 22 U.S.C. 2780 )