Keeping your data secure and compliant is getting more difficult as businesses become more software-driven. ITAR Guide was built to educate businesses on the data compliance requirements of ITAR and EAR, and to ensure they are taking the right steps in protecting themselves.
Get Your Risk Report TodayITAR (International Traffic in Arms Regulations) and EAR (Export Administration Regulations) are sets of compliance requirements designed to keep specific items and services out of the hands of foreign nationals.
These compliance requirements commonly apply to organizations involved in:
When evaluating your business for risk of non-compliance, look to these areas to assess how data is being handled.
Where you store sensitive data, as well as which methods or applications you use to send and receive this data are important considerations when assessing your risk of non-compliance. If you store data on the cloud, or use cloud-based applications to send and receive data, be aware that ITAR restrictions extend to the infrastructure providers as well. If a cloud-based application is hosted on a popular infrastructure like Amazon Web Services (AWS), it could be non-compliant if it is a public cloud.
Using consumer-grade, off-the-shelf software (COTS) to store and manage sensitive data can put you at risk of violation. Common services like Google Drive and Dropbox, or software applications like Airtable or Quick Base are not ITAR compliant because they host your data on public cloud which is accessible by foreign nationals.
If you work with third-party contractors for design, finishing, or other service, be wary of how they handle your sensitive data, as they should be adhering to ITAR and EAR as well. Shipping product or sensitive data to third-party contractors overseas is a violation.
The objective of ITAR and EAR is to prevent sensitive information from being accessed by foreign nationals. That doesn’t necessarily mean that your business shouldn’t hire foreign nationals if you handle business that isn’t subject to these regulations. However, if employed foreign nationals have access to business software containing sensitive data or the physical goods or documents themselves, this can pose a major risk.
Since 2000, the government has been more aggressive on enforcing ITAR and EAR requirements, resulting in larger fines year over year for businesses.
Take our brief quiz to determine your risk of non-compliance with ITAR or EAR.
The Compliance Risk Report will:
Disclaimer: Data entered into this questionnaire and provided in the "Compliance Risk Report" is for illustrative purposes only and does not constitute or pertain to any real-life scenario.
Data aggregated from trusted news sources.
A criminal complaint was unsealed in a Brooklyn federal court charging Aventura Technologies, a New York-based surveillance and security equipment company...
The U.S. Department of State has concluded an administrative settlement with L3Harris Technologies, Inc. (L3Harris) of Melbourne, Florida, to resolve alleged violations of the Arms Export...
The Department of State has concluded an administrative settlement with FLIR Systems, Inc. of Wilsonville, Oregon, to resolve alleged violations of the Arms Export Control Act...
On June 6, 2019, the U.S. Department of State published a Federal Register notice of 23 individuals and entities statutorily debarred for having been convicted of violating...
We are committed to providing you with the latest compliance news and resources. Talk with an expert today.
