INTERNATIONAL TRADE LAW
Defense Export Controls: An ITAR Compliance Guide
Complying with U.S. defense export controls means three things: figure out whether your product or technology is on the U.S. Munitions List, register with the State Department before you ship, and get a license before any export — including the moment you let a foreign national see controlled technical data. Defense exports are governed primarily by the International Traffic in Arms Regulations (ITAR), and the penalties for getting it wrong are among the steepest in U.S. law. This guide explains how the system actually works.
ITAR or EAR? Start with jurisdiction
The first question is which regime controls your item. Two sets of rules cover defense and dual-use exports, and they are run by different agencies.
The International Traffic in Arms Regulations (ITAR), administered by the State Department’s Directorate of Defense Trade Controls (DDTC), cover defense articles, defense services, and technical data listed on the U.S. Munitions List (USML) — weapons, military aircraft, and the technology and blueprints behind them. The Export Administration Regulations (EAR), administered by the Commerce Department’s Bureau of Industry and Security (BIS), cover dual-use items with both civilian and military uses, plus the less-sensitive military items in the “600 series” that were moved off the USML under Export Control Reform.
Getting jurisdiction right is the whole ballgame. If you are unsure whether an item is ITAR- or EAR-controlled, DDTC’s Commodity Jurisdiction (CJ) process gives you a formal determination. Guessing wrong — treating an ITAR article as if it were merely EAR-controlled — is one of the most common and most expensive mistakes in the field.
| ITAR | EAR | |
|---|---|---|
| Agency | State Dept. (DDTC) | Commerce Dept. (BIS) |
| List | U.S. Munitions List (USML) | Commerce Control List (CCL) |
| Covers | Defense articles, services, technical data | Dual-use and “600 series” military items |
| Classification | USML category | Export Control Classification Number (ECCN) |
Register with DDTC before you export
Anyone in the United States who manufactures, exports, or brokers defense articles or services must register with DDTC — registration is a precondition to exporting, not a substitute for a license. As of the fee schedule that took effect in January 2025 (the first increase since 2008), annual registration runs $3,000 for first-time and lower-volume registrants (Tier 1) and $4,000 for higher tiers, with additional per-application fees at the top tier. Note that even manufacturers who never export must register if they make USML items.
Get a license — and remember deemed exports
Once registered, you generally need a license or written authorization before exporting a defense article or furnishing a defense service. The critical trap is the deemed export rule: releasing controlled technical data to a foreign national — even one standing in your own facility in the United States — counts as an export to that person’s country. Sharing a controlled drawing with a foreign engineer on your team, or giving a foreign visitor access to a controlled system, can require a license. ITAR does provide narrow exemptions, but they are specific and conditional; do not assume one applies without confirming the exact regulatory basis.
The penalties are severe
Defense export controls carry strict-liability civil penalties — meaning you can be penalized for a violation even without intent to break the law — and they are large. Civil penalties under the Arms Export Control Act exceed $1.27 million per violation (the figure is adjusted annually for inflation) or twice the value of the transaction, whichever is greater. Willful criminal violations carry fines up to $1 million and 20 years in prison per violation. Violators can also be debarred — barred from future exports entirely. Because the civil standard does not require intent, “we didn’t realize it was controlled” is not a defense.
Build a compliance program
A workable ITAR/EAR compliance program does not need to be elaborate, but it does need to be real:
- Classify your products. Determine USML category or ECCN for everything you export, using the CJ process when jurisdiction is unclear.
- Screen every party. Check customers, end users, and intermediaries against U.S. restricted-party lists before shipping.
- Control technical data. Lock down who can access controlled drawings, code, and specifications — including foreign nationals on staff.
- Keep records. Maintain export records for at least five years.
- Train and assign ownership. Name an export compliance officer and train the people who actually handle quotes, shipments, and engineering data.
Frequently asked questions
How do I know if my product is ITAR-controlled? Check whether it falls within a category of the U.S. Munitions List. If the answer is unclear, request a Commodity Jurisdiction determination from DDTC rather than guessing.
Does ITAR apply to software and technical data, not just hardware? Yes. Technical data — drawings, specifications, source code, and know-how needed to develop or produce a defense article — is controlled, and releasing it to a foreign national is a “deemed export” that can require a license.
Do I have to register with DDTC even if I never export? If you manufacture defense articles on the USML, yes. U.S. manufacturers of defense articles must register whether or not they export.
What’s the difference between ITAR and EAR penalties? Both are severe. ITAR (Arms Export Control Act) civil penalties exceed $1.27 million per violation; EAR penalties under the Export Control Reform Act run to $300,000 per violation or twice the transaction value, with criminal exposure under both regimes.
Exporting defense articles or dual-use technology? Reidel Law Firm provides flat-fee import/export compliance memos covering jurisdiction, classification, licensing, and screening — with direct access to the attorney handling your matter. Get a flat-fee import/export compliance memo →
