The United States has two parallel export control systems: ITAR (International Traffic in Arms Regulations) administered by the State Department, and EAR (Export Administration Regulations) administered by the Commerce Department. Every item, technology, or piece of software that you export — or share with a foreign person — falls under one of these two regimes.
Getting this classification right is critical. ITAR-controlled items face much stricter restrictions, higher penalties, and mandatory registration requirements. Treating an ITAR item as EAR (or vice versa) can result in criminal prosecution.
Side-by-Side Comparison
| Aspect | ITAR (State Department) | EAR (Commerce Department) |
|---|---|---|
| Agency | Directorate of Defense Trade Controls (DDTC) | Bureau of Industry and Security (BIS) |
| Legal Authority | Arms Export Control Act (AECA), 22 CFR 120-130 | Export Control Reform Act (ECRA), 15 CFR 730-774 |
| Control List | U.S. Munitions List (USML) — 21 categories | Commerce Control List (CCL) — 10 categories (ECCNs) |
| Scope | Military and defense articles specifically designed for military use | Dual-use items (commercial with potential military application), plus less sensitive military items |
| Registration | Mandatory — $2,250+/year for manufacturers and exporters | Not required — no registration system |
| Default Policy | Denial — exports denied unless specifically licensed | Approval — most exports allowed; licenses required for specific countries/items |
| License Exceptions | Very limited exemptions (e.g., Canadian exemption, fundamental research) | Broad license exceptions available for many items and destinations |
| Deemed Exports | Strictly enforced — sharing ITAR data with any foreign person requires a license | Applies, but with more exceptions and carve-outs |
| Civil Penalties | Up to $1,000,000 per violation | Up to $300,000 per violation (or twice transaction value) |
| Criminal Penalties | Up to $1M fine + 20 years imprisonment | Up to $1M fine + 20 years imprisonment |
| Debarment | Can be permanently barred from defense trade | Can be denied export privileges |
How to Determine Which Applies
Classification starts with a simple question: is your item on the USML? If yes, ITAR controls it. If no, it falls under EAR (either on the CCL or classified as EAR99 — items with no specific controls).
Step 1: Check the USML
Review the 21 categories of the U.S. Munitions List (22 CFR 121). The USML covers items specifically designed, developed, configured, adapted, or modified for a military application. Key examples:
- Weapons, firearms, and ammunition
- Military vehicles, aircraft, and vessels
- Military electronics (radar, EW systems, military-grade sensors)
- Spacecraft and satellite systems
- Night vision equipment and targeting systems
- Armor and protective equipment designed for military use
- Technical data and software directly related to any of the above
Step 2: If Not on the USML, Check the CCL
Items not on the USML may still require an EAR license if they're on the Commerce Control List. The CCL uses Export Control Classification Numbers (ECCNs) — a 5-character code like "5A002" that determines what controls apply and to which destinations. Categories include electronics, computers, telecommunications, sensors, and materials.
Step 3: EAR99 — The Default
If your item isn't on either the USML or CCL, it's classified as "EAR99" — meaning it's subject to EAR jurisdiction but doesn't require a license for most destinations. However, even EAR99 items can't be exported to embargoed countries or denied persons.
Items That Commonly Cause Confusion
Dual-use components: A ruggedized computer that works in both military and commercial settings might be USML or CCL depending on whether it was specifically designed for military use. The "specifically designed" test is the key distinction.
Software: Software that controls USML items is itself ITAR-controlled, even if the software has no inherent military function. A supply chain management tool becomes ITAR-controlled if it specifically manages USML defense articles.
Technical data: Engineering drawings for a commercial component become ITAR-controlled if they reveal performance characteristics of a USML system. Context matters as much as content.
Replacement parts: A bolt that's identical to a commercial bolt can become ITAR-controlled if it's specifically designed as a component of a USML weapon system. The "specifically designed" language is evaluated at the component level.
3D printing files: CAD files for USML items are ITAR-controlled technical data. Sharing a 3D print file for a firearm component with a foreign person — even via cloud storage — is an ITAR export requiring a license.
When Both Apply
It's possible for a company to have products under both ITAR and EAR. For example, a defense electronics manufacturer might make USML-controlled radar components (ITAR) and commercial-grade circuit boards (EAR). In this case:
- You need DDTC registration for your ITAR activities
- You need separate compliance programs for each regime
- You must prevent commingling of ITAR and EAR technical data
- Employee training must cover both sets of requirements
- Record-keeping obligations differ (5 years for ITAR, 5 years for EAR)
Export Control Reform and the Shift from ITAR to EAR
Over the past decade, the U.S. government has been moving less sensitive items from the USML to the CCL through the Export Control Reform (ECR) initiative. This means some items that were previously ITAR-controlled are now under the less restrictive EAR regime.
If your products were previously classified under ITAR, it's worth reviewing whether ECR changes have moved them to EAR. Being under EAR instead of ITAR typically means easier licensing, more license exceptions, and no registration requirement — significant cost and administrative savings.
FAQ
Can an item be under both ITAR and EAR?
No. An individual item falls under one regime or the other, never both. However, a company can have different products under different regimes.
Does ITAR only apply to exports?
No. ITAR registration is required for manufacturers of USML items even if they never export. And "deemed exports" (sharing ITAR data with foreign persons in the U.S.) require licensing regardless of physical export.
Is EAR less serious than ITAR?
Less restrictive, but not less serious. Criminal penalties under both regimes include up to 20 years imprisonment. EAR violations are actively prosecuted, especially for exports to sanctioned countries.
Who determines jurisdiction — ITAR or EAR?
Ultimately, the State Department makes jurisdiction determinations via the Commodity Jurisdiction (CJ) process. You can submit a CJ request through DDTC's online system. The determination is binding and takes 4-6 weeks.