There would be no restrictions applied to personal information transferred to trustworthy states, and no restrictions on individual internet users’ own transfers of their personal data, but companies seeking to transfer Americans’ personal information to countries outside of the trustworthy list would be required to apply for a license. The newest version, the Wyden aide said, includes fresh language that targets TikTok indirectly by prohibiting data transfers from one company to a parent company that may receive data requests by a hostile foreign government, when the company holds data on more than one million users.