Export Controls for Government Contractors: ITAR and EAR Compliance

U.S. export controls restrict the export, re-export, and transfer of certain goods, software, technology, and technical data to protect national security and foreign policy interests.

Why export controls matter for contractors:

• Required for defense and dual-use technology contracts
• Violations carry severe civil and criminal penalties
• Non-compliance can result in debarment
• Due diligence demonstrates contractor responsibility
• Protects U.S. technological advantage

Two primary regimes:

• ITAR (International Traffic in Arms Regulations) — Defense articles, services, and technical data
• EAR (Export Administration Regulations) — Dual-use items (commercial and military applications)

Regulatory agencies:

• State Department (DDTC) — Administers ITAR
• Commerce Department (BIS) — Administers EAR
• Treasury Department (OFAC) — Economic sanctions and embargoes

What constitutes an "export":

• Physical shipment outside the U.S.
• Electronic transmission to foreign persons (email, cloud storage)
• Visual or oral disclosure to foreign nationals in the U.S. ("deemed export")
• Release of technology or source code abroad

What is ITAR:

ITAR controls the export and temporary import of defense articles, defense services, and related technical data as defined in the United States Munitions List (USML).

USML categories (21 total):

• Category I — Firearms, close assault weapons, combat shotguns
• Category II — Guns and armament
• Category III — Ammunition and ordnance
• Category IV — Launch vehicles, missiles, rockets
• Category V — Explosives and energetic materials
• Category VI — Vessels of war and special naval equipment
• Category VII — Tanks and military vehicles
• Category VIII — Aircraft and related articles
• Category IX — Military training equipment
• Category X — Protective personnel equipment
• Category XI — Military electronics
• Category XII — Fire control, range finder, optical, guidance and control equipment
• Category XIII — Auxiliary military equipment
• Category XIV — Toxicological agents
• Category XV — Spacecraft systems and associated equipment
• Category XVI — Nuclear weapons related articles
• Category XVII — Classified articles
• Category XVIII — Directed energy weapons
• Category XIX — Gas turbine engines and associated equipment
• Category XX — Submersible vessels and oceanographic equipment
• Category XXI — Miscellaneous articles

ITAR registration requirement:

Companies engaged in manufacturing, exporting, or brokering defense articles must register with DDTC:

• Annual registration fee: $3,000
• Registration valid for one year
• Must designate empowered official
• Update within 60 days of changes

Types of ITAR authorizations:

• License — Formal authorization for specific transaction
• Agreement — Manufacturing license agreements, technical assistance agreements, warehouse distribution agreements
• License exemptions — Canada exemption, limited exceptions for NATO allies

Technical data controls:

Technical data includes:

• Blueprints, drawings, plans, instructions
• Software directly related to defense articles
• Information required for design, development, production, operation, or maintenance

Deemed exports:

Release of ITAR-controlled technical data to foreign persons in the U.S. requires authorization:

• Includes foreign national employees, visitors, consultants
• Visual inspection of ITAR hardware
• Oral exchanges of technical information
• Use Technology Control Plans (TCP) to manage access

What is EAR:

EAR controls the export of dual-use items (commercial products with potential military applications) and purely commercial items. Administered by the Bureau of Industry and Security (BIS).

Commerce Control List (CCL):

Items subject to EAR are classified using Export Control Classification Numbers (ECCNs) organized into 10 categories:

• 0 — Nuclear materials, facilities, equipment
• 1 — Materials, chemicals, microorganisms, toxins
• 2 — Materials processing
• 3 — Electronics
• 4 — Computers
• 5 — Telecommunications and information security
• 6 — Sensors and lasers
• 7 — Navigation and avionics
• 8 — Marine
• 9 — Aerospace and propulsion

Determining ECCN:

1. Review product specifications and capabilities
2. Compare to CCL descriptions
3. Consider product group (A-E within each category)
4. If no ECCN applies, item is designated EAR99 (lower control)
5. Request classification from BIS if uncertain

EAR99 items:

• Not specifically listed on CCL
• Generally low-level technology
• Most commercial products fall here
• Still subject to some EAR restrictions

License exceptions:

EAR provides numerous license exceptions allowing exports without individual licenses:

• TMP — Temporary exports/re-exports
• RPL — Replacement parts
• GBS — Group B countries (favorable destinations)
• CIV — Civil end-users
• TSU — Technology and software unrestricted

Sanctioned destinations:

Special restrictions apply to certain countries (Country Groups D and E):

• Cuba, Iran, North Korea, Syria (comprehensive embargoes)
• Russia, Belarus, China (targeted restrictions)
• Venezuela, Burma/Myanmar (specific controls)
• Check BIS country chart for current restrictions

Entity List:

• Companies, organizations, individuals subject to license requirements
• Parties of concern for national security or foreign policy
• Must screen against before any transaction
• Updated regularly on BIS website

Key differences:

Aspect	ITAR	EAR
Agency	State Department (DDTC)	Commerce Department (BIS)
Scope	Defense articles and services	Dual-use and commercial items
Control list	U.S. Munitions List (USML)	Commerce Control List (CCL)
Registration	Required ($3,000/year)	Not required
Deemed exports	Strictly controlled	More flexible, license exceptions available
Penalties	More severe (willful violations criminal)	Civil and criminal penalties

Jurisdiction determination process:

1. Check USML first — ITAR takes precedence if item is specifically designed or modified for military use
2. Apply "specifically designed" test — Was item developed or adapted for military application?
3. Review catchalls — USML Category XXI(a) catchall for items not elsewhere specified
4. If not ITAR, check CCL — Determine ECCN or EAR99 designation
5. Request CJ determination — Submit to DDTC for formal commodity jurisdiction ruling if uncertain

Commodity Jurisdiction (CJ) request:

When jurisdiction is unclear, request formal determination from DDTC:

• Submit detailed technical description
• Include drawings, specifications, end-use
• Processing time: 60-120 days typically
• Binding determination from State Department
• Can provide to customers as proof of jurisdiction

Special considerations:

• Software — Can be ITAR (defense-specific) or EAR (commercial/dual-use)
• Encryption — Generally EAR, but defense-specific encryption may be ITAR
• Parts and components — Depends on whether specifically designed for defense article
• Technical services — ITAR if related to defense articles, EAR otherwise

Reform initiatives:

Export Control Reform (ECR) has moved many items from USML to CCL:

• Focus ITAR on most critical military technologies
• Move less sensitive items to EAR with strategic controls
• Ongoing — regularly check USML and CCL updates

ITAR license application (DSP-5):

1. Prepare application — Use D-Trade online system
2. Provide details:
   • Applicant and end-user information
   • Detailed description of defense articles/services
   • Quantity and value
   • End-use statement
   • Foreign consignees and parties
3. Submit supporting documentation — Purchase order, contract, technical specifications
4. Pay processing fee — Varies by license type
5. DDTC review — 60-90 days typical, can take longer
6. Approval or denial — License valid for 4 years

EAR license application (BIS-748P):

1. Determine need — Check if license required or exception applies
2. Submit via SNAP-R — BIS online system
3. Provide details:
   • ECCN and technical specifications
   • End-user and end-use
   • Destination
   • Supporting documents
4. Review process — Varies by item and destination (30-60 days average)
5. Approval or RWA — License valid for 2-4 years typically

Improving approval chances:

• Complete and accurate applications
• Detailed technical descriptions
• Clear end-use statements
• Reliable end-users with track record
• Avoid red-flag destinations or parties
• Engage with licensing officer if questions arise

License conditions and provisos:

• Follow all conditions and restrictions
• Report unauthorized disclosures or diversions
• Maintain records of shipments
• Notify if material changes occur

Amendments and extensions:

• Amendment required for material changes
• Can request extension before expiration
• Timely submission improves approval odds

Core elements of compliance program:

1. Management commitment

• Senior leadership support and resources
• Compliance culture from the top
• Empowered official (for ITAR registration)

2. Risk assessment

• Identify controlled items and technologies
• Map export activities and transactions
• Assess foreign person access (deemed exports)
• Evaluate customer and destination risks

3. Written policies and procedures

• Export authorization procedures
• Classification and jurisdiction determination
• Technology control plan (deemed exports)
• Screening procedures (denied parties, sanctions)
• Recordkeeping requirements

4. Training

• Initial training for employees with export responsibilities
• Annual refresher training
• Role-specific training (engineering, sales, shipping)
• Document completion and maintain records

5. Screening and due diligence

• Screen all parties against denied/restricted lists
• Know-your-customer procedures
• Red flag indicators for diversion risk
• Document screening results

Technology Control Plan (TCP):

For ITAR technical data and deemed exports:

• Identify technical data requiring protection
• Control physical and electronic access
• Authorization procedures for foreign persons
• Visitor controls and escorts
• Training on TCP requirements

Recordkeeping requirements:

ITAR records (5 years):

• Export authorizations and correspondence
• DSP-5 and other license applications
• Manufacturing agreements and TAAs
• Shipping documents and invoices
• Records of foreign person access

EAR records (5 years from export):

• Export and re-export documentation
• Supporting documents for license exceptions
• Classification determinations
• Destination control statements

Audits and monitoring:

• Periodic internal audits of compliance
• Transaction reviews and testing
• Corrective action for violations
• Continuous improvement

Red flags indicating potential diversion or unauthorized use:

• Customer reluctant to provide end-use information
• Customer has no clear need for product
• Delivery address differs from purchaser location
• Unusual payment terms (third-party, cash)
• Shipping route illogical for stated destination
• Product incompatible with customer's line of business
• Quantities inconsistent with stated use
• Customer requests unusual packaging or labeling

Common violations:

• Exporting without required license
• Deemed export to foreign national without authorization
• Misclassification of items to avoid licensing
• Failure to screen denied parties lists
• Inadequate recordkeeping
• Failure to register under ITAR
• Unauthorized re-export or retransfer
• Providing technical assistance without agreement

Civil penalties:

• ITAR: Up to $1,270,334 per violation (adjusted annually)
• EAR: Up to $364,992 per violation or twice transaction value
• OFAC: Up to $346,759 per violation or twice transaction value

Criminal penalties:

• Willful violations: up to $1M fine and 20 years imprisonment
• Arms Export Control Act violations: up to $1M fine and 20 years imprisonment
• International Emergency Economic Powers Act: up to $1M fine and 20 years imprisonment

Administrative actions:

• Denial of export privileges
• Suspension or debarment from government contracting
• Entity List designation
• License revocation

Voluntary self-disclosure (VSD):

If you discover a violation, consider voluntary disclosure:

• Submit to appropriate agency (DDTC, BIS, OFAC)
• Describe violation, parties, items, circumstances
• Corrective actions taken
• Benefits: Reduced penalties, demonstrates good faith, considered mitigating factor

Government investigations:

• Cooperate fully with investigators
• Preserve all relevant documents and records
• Engage experienced export control counsel immediately
• Do not destroy evidence or obstruct investigation