International Traffic in Arms Regulations (ITAR)
The International Traffic in Arms Regulations (ITAR) are U.S. government regulations that control the export, import, and transfer of defense-related articles, services, and technical data to protect national security. ITAR is administered by the U.S. Department of State through the Directorate of Defense Trade Controls.
What Is International Traffic in Arms Regulations?
The International Traffic in Arms Regulations (ITAR) are U.S. government regulations that control the export, import, and transfer of defense-related articles, services, and technical data to protect national security.
ITAR is administered by the U.S. Department of State through the Directorate of Defense Trade Controls and applies to U.S. persons and entities regardless of company size.
Key Characteristics
Governs items and services listed on the United States Munitions List (USML)
Applies to physical exports and non-physical transfers such as technical data and services
Administered by the U.S. Department of State through the Directorate of Defense Trade Controls
Requires registration and, in most cases, export licensing
Applies to U.S. persons and entities regardless of company size
How It Works in Government Contracting
Contractors must determine whether contract deliverables fall under ITAR, register with the government if required, secure licenses before exporting or sharing data, and restrict access by foreign persons when applicable.
Where it appears: Defense and national security procurements, R&D contracts involving military technology, and subcontracts with foreign involvement.
Who uses it: Federal agencies, prime contractors and subcontractors, and manufacturers, exporters, and brokers of defense items.
Why it matters: Prevents unauthorized foreign access to sensitive defense capabilities and ensures compliance with U.S. foreign policy and security goals.
Regulatory Framework
Arms Export Control Act (AECA), which provides the legal authority for ITAR
Directorate of Defense Trade Controls, which administers and enforces ITAR
Export Administration Regulations (EAR), which is distinct from ITAR and covers dual-use items
Why ITAR Matters for Contractors
Business implications: Limits who can access contract data and deliverables, affecting hiring, teaming, and international partnerships.
Compliance impact: Requires formal compliance programs, employee training, and government registration.
Strategic importance: Affects teaming arrangements, hiring decisions, and the ability to pursue international business partnerships.
Risk considerations: Violations can lead to civil fines, criminal charges, loss of export privileges, and contract termination.
Common Misconceptions About ITAR
ITAR only applies to large defense contractors.
ITAR applies to any U.S. person or organization involved in defense articles or services on the USML, regardless of company size.
ITAR only regulates physical shipments.
ITAR also governs non-physical transfers such as sharing technical data or providing defense services, including sharing data with a foreign person inside the U.S.
Commercial items are never subject to ITAR.
Items with defense applications may be listed on the USML and subject to ITAR even if they also have commercial uses.
Frequently Asked Questions
What is the purpose of ITAR?
ITAR exists to prevent sensitive defense technology and services from being accessed by unauthorized foreign parties.
Who must comply with ITAR?
Any U.S. person or organization involved in manufacturing, exporting, or providing defense articles or services listed on the USML.
Does ITAR apply inside the United States?
Yes. Sharing controlled technical data with a foreign person inside the U.S. can still be considered an export.
What happens if a contractor violates ITAR?
Penalties may include civil fines, criminal charges, loss of export privileges, and disqualification from government contracts.
Related Government Contracting Topics
United States Munitions List (USML): Defines which defense items and services are controlled under ITAR.
Export Administration Regulations (EAR): Controls dual-use and commercial items not covered by ITAR.
Defense Federal Acquisition Regulation Supplement (DFARS): Defense-specific acquisition rules that often intersect with ITAR compliance requirements.
Controlled Unclassified Information (CUI): Sensitive but unclassified government data subject to safeguarding requirements.
Foreign National Access Controls: Rules governing access by non-U.S. persons to controlled defense information and facilities.
Cybersecurity Maturity Model Certification (CMMC): Cybersecurity requirements for defense contractors that often accompany ITAR-controlled programs.