The U.S. has two export control systems running in parallel: ITAR (State Department) and EAR (Commerce Department). Anything you export or share with a foreign national falls under one of them.
This classification matters. A lot. ITAR is way stricter—higher penalties, registration requirements, more restrictions. Misclassify something? You could face criminal charges.
Side-by-Side Comparison
| Aspect | ITAR (State Department) | EAR (Commerce Department) |
|---|---|---|
| Agency | Directorate of Defense Trade Controls (DDTC) | Bureau of Industry and Security (BIS) |
| Legal Authority | Arms Export Control Act (AECA), 22 CFR 120-130 | Export Control Reform Act (ECRA), 15 CFR 730-774 |
| Control List | U.S. Munitions List (USML) — 21 categories | Commerce Control List (CCL) — 10 categories (ECCNs) |
| Scope | Military and defense articles specifically designed for military use | Dual-use items (commercial with potential military application), plus less sensitive military items |
| Registration | Mandatory — $2,250+/year for manufacturers and exporters | Not required — no registration system |
| Default Policy | Denial — exports denied unless specifically licensed | Approval — most exports allowed; licenses required for specific countries/items |
| License Exceptions | Very limited exemptions (e.g., Canadian exemption, fundamental research) | Broad license exceptions available for many items and destinations |
| Deemed Exports | Strictly enforced — sharing ITAR data with any foreign person requires a license | Applies, but with more exceptions and carve-outs |
| Civil Penalties | Up to $1,000,000 per violation | Up to $300,000 per violation (or twice transaction value) |
| Criminal Penalties | Up to $1M fine + 20 years imprisonment | Up to $1M fine + 20 years imprisonment |
| Debarment | Can be permanently barred from defense trade | Can be denied export privileges |
How to Determine Which Applies
It's actually straightforward: is your item on the USML? If yes, ITAR applies. If not, it's EAR (either on the CCL or it's EAR99—no specific restrictions).
Step 1: Check the USML
Start with the 21 USML categories (22 CFR 121). The list covers items specifically designed for military use. Think:
- Weapons, firearms, and ammunition
- Military vehicles, aircraft, and vessels
- Military electronics (radar, EW systems, military-grade sensors)
- Spacecraft and satellite systems
- Night vision equipment and targeting systems
- Armor and protective equipment designed for military use
- Technical data and software directly related to any of the above
Step 2: If Not on the USML, Check the CCL
Not on the USML? It might still be on the Commerce Control List. The CCL uses Export Control Classification Numbers (ECCNs)—codes like "5A002" that tell you what controls and which countries are affected. Electronics, computers, sensors, materials—all covered.
Step 3: EAR99 — The Default
Not on either list? It's EAR99—subject to EAR but doesn't need a license for most places. Still can't go to embargoed countries or denied parties though.
Items That Commonly Cause Confusion
Dual-use components: A ruggedized computer that works in military or commercial settings? Depends on whether it was specifically built for the military. That's the key test.
Software: Code that runs USML items is ITAR-controlled, even if the code itself isn't inherently military. A supply chain tool becomes ITAR-controlled if it manages USML items.
Technical data: Engineering drawings for a standard component become ITAR-controlled if they show how a USML system performs. The context counts as much as the content.
Replacement parts: A bolt that's physically identical to a commercial one can be ITAR-controlled if it's engineered for a USML weapon system. The rule applies to individual components.
3D printing files: CAD files for USML items are ITAR-controlled technical data. Share a firearm component file with a foreign national via cloud storage? That's an export that needs a license.
When Both Apply
One company can have products under both regimes. A defense electronics manufacturer might make USML radar systems (ITAR) and commercial circuit boards (EAR). When that happens:
- You need DDTC registration for your ITAR activities
- You need separate compliance programs for each regime
- You must prevent commingling of ITAR and EAR technical data
- Employee training must cover both sets of requirements
- Record-keeping obligations differ (5 years for ITAR, 5 years for EAR)
Export Control Reform and the Shift from ITAR to EAR
Over the past decade, the U.S. has been moving less sensitive items from ITAR to EAR through the Export Control Reform program. That means some items that were locked under ITAR are now easier to work with under EAR.
If your products were historically ITAR-controlled, check if ECR moved them to EAR. The difference is huge: easier licensing, more exceptions, no registration requirement. That's real cost savings.
FAQ
Can an item be under both ITAR and EAR?
No. An individual item falls under one regime or the other, never both. However, a company can have different products under different regimes.
Does ITAR only apply to exports?
No. ITAR registration is required for manufacturers of USML items even if they never export. And "deemed exports" (sharing ITAR data with foreign persons in the U.S.) require licensing regardless of physical export.
Is EAR less serious than ITAR?
Less restrictive, but not less serious. Criminal penalties under both regimes include up to 20 years imprisonment. EAR violations are actively prosecuted, especially for exports to sanctioned countries.
Who determines jurisdiction — ITAR or EAR?
Ultimately, the State Department makes jurisdiction determinations via the Commodity Jurisdiction (CJ) process. You can submit a CJ request through DDTC's online system. The determination is binding and takes 4-6 weeks.