The Data Rules Project

As AI transforms pharmaceutical research and biotechnology, the data powering these breakthroughs has become as strategically significant as the discoveries themselves. Yet the rules governing how that data is accessed, used, and shared across borders remain fragmented, contested, and increasingly caught up in broader geopolitical rivalries. The Data Rules Project is committed to changing that.

About the Data Rules Project

The Data Rules Project examines how global data governance—particularly controls on access, use, and cross-border transfer—shapes the development and deployment of artificial intelligence (AI) in pharmaceutical research and development and biotechnology. As health data becomes central to the next generation of medical breakthroughs, the rules governing that data are increasingly entangled with questions of economic competitiveness, patient privacy, and national security.

Led by Nitansha Bansal, the Data Rules Project will pursue four interconnected workstreams: mapping the global landscape of data restrictions and their impact on AI-driven drug discovery; developing country profiles for the US, EU, China, India, and Japan; convening senior policymakers and industry leaders for candid, closed-door dialogue; and socializing the project’s recommendations at influential global forums. The goal is to ensure that pharmaceutical and biotech companies, along with the governments that set the rules they operate under, are equipped to strike the right balance between protecting sensitive health data and unlocking its potential to transform medicine.

Events

Publications

Issue Brief

May 13, 2026

The US AI health data collision: Charting the future of US cross-border data flow policy, health data, and health and biopharma AI policy 

By Justin Sherman

The race to control America’s most sensitive data is already underway, and most people have no idea.

Artificial Intelligence Cybersecurity

Issue Brief

Apr 10, 2026

Navigating the European Union’s AI and health data framework

By Mark Scott

The EU is strengthening AI and health data governance, creating a more secure and trusted framework for innovation.

Artificial Intelligence Cybersecurity

Explore the program

The Atlantic Council’s Cyber Statecraft Initiative, part of the Atlantic Council Technology Programs, works at the nexus of geopolitics and cybersecurity to craft strategies to help shape the conduct of statecraft and to better inform and secure users of technology.