A U.S. company can engage in restricted transactions, such as employment agreements, if it complies with specific security requirements. However, transactions involving access to sensitive personal data, especially with individuals from countries of concern, may be prohibited, leading to potential civil and criminal penalties for violations. Companies must prepare for increased scrutiny and compliance obligations under the proposed rule.