Category Archives: All

Commerce Targets Chinese Military with Expanded Export Restrictions

On April 28, 2020, the Department of Commerce, Bureau of Industry and Security (BIS), published three notices revising the Export Administration Regulations (EAR).  These changes are intended to increase restrictions on exports to China, but will affect transactions involving other countries as well:

  • 85 FR 23459 – Expansion of Export, Reexport, and Transfer (in-Country) Controls for Military End Use or Military End Users in the People’s Republic of China, Russia, or Venezuela
  • 85 FR 23470 – Elimination of License Exception Civil End Users (CIV)
  • 85 FR 23496 – Modification of License Exception Additional Permissive Reexports (APR)

This rule comes after much delay as these changes have been anticipated since 2018 and we now have two final rules and one proposed rule from BIS.

 

Chinese Military End Use

Effective June 29, 2020 (85 FR 23459), EAR Part 744 will be amended to further restrict exports and reexports to China, as well as to Russia and Venezuela, when destined for a military end user or end use.

  • 744.21 previously restricted exports to China for military end use, as well as exports to Russia or Venezuela for military end use or end users. By adding military end users in China, the new rule will apply the same limitations to all three countries. The new rule also broadens the definition of military end use to include additional items.

Items subject to the military end use or end user restrictions are identified by Export Control Classification Number (ECCN) in Supplement No. 2 to Part 744.  The following ECCNs will be added to the supplement or their controls expanded: 2A290, 2A291, 2B999, 2D290, 3A991, 3A992, 3A999, 3B991, 3B992, 3C992, 3D991, 5B991, 5A992, 5D992, 6A991, 6A996, 8A992, 9A991 and 9B990.

Items restricted under the revised §744.21 will require a BIS license and be subject to a policy of denial.  Previously, such applications were reviewed on a case-by-case basis, considering whether an export would make a material contribution to military capabilities and result in advancing military activities contrary to U.S. national security interests.

The rule also establishes a Regional Stability (RS) license requirement for any 9×515 or 600 series paragraph .y items destined for China, Russia, or Venezuela.  There is an exception for the export or reexport of items to Russia for the International Space Station (ISS).

Finally, the rule amends the EAR to require Electronic Export Information (EEI) filings for any items destined China, Russia, or Venezuela regardless of value, unless shipped under License Exception GOV.”

Between the expanded definitions and “China’s widespread civil-military integration,” these revisions will require increased due diligence when evaluating end users in China.

For additional detail, refer to the Federal Register Notice.

 

Removal of License Exception CIV

Also effective June 29, 2020 (85 FR 23470), the §740.5 License Exception Civil End Users (CIV) will be removed from the EAR.

License Exception CIV currently allows exports and reexports of specifically identified CCL items controlled for National Security reasons to twenty three countries of national security concern when “destined to civil end-users for civil end-uses.”

License Exception CIV is not generally available—the license exception must be positively identified in the ECCN entry for the item in question.  License Exception CIV is generally a counterpart to the Shipments to Country Group B Countries (GBS) or Technology and Software Under Restriction (TSR) exceptions, which allow similar exports to the EAR’s Country Group B.

In removing License Exception CIV, BIS is primarily concerned by “the increasing integration of civilian and military technology development in these countries of concern.”  The removal of the license exception means that BIS licenses will be required for such transactions for all D:1 countries.

The rule also makes conforming changes to the EAR, largely removing the “CIV: Yes” or “CIV: No” indications from ECCNs.

The Commerce Country Groups are listed in Supplement No. 1 to Part 740.

For additional detail, refer to the Federal Register Notice.

 

Modification of License Exception APR

Finally, BIS issued a proposed rule (85 FR 23496) to modify the §740.16 License Exception Additional Permissive Reexports (APR).

License Exception APR currently allows the reexport of some controlled items from Country Group A:1 or Hong Kong, given certain conditions including an export authorization from the reexporting country.  Because of concerns about these countries’ licensing review standards, APR may allow the reexports that would have been denied for export directly from the U.S.

The BIS proposal removes Country Group D:1 as eligible destinations under License Exception APR so that the U.S. government approval would be required for reexports to these countries of national security concern.

Comments may be submitted through June 29, 2020.  In particular, BIS requests comments on how the proposal would impact current use of License Exception APR and the volume of transactions affected.  Review the Federal Register Notice for the full proposed rule and how to submit comments.

Compliance in a Pandemic – Updates from DDTC and OFAC

DDTC Adjusts to Social Distancing

As we noted recently on this blog, the Department of State, Directorate of Defense Trade Controls (DDTC) remains open, but will be making adjustments in response to the Coronavirus Disease 2019 (COVID-19) pandemic.  This includes an electronic process for submitting disclosures to the office of Defense Trade Controls Compliance (DTCC).

Since that announcement, DDTC has:

  • Cancelled its Wednesday, April 29 In-House Seminar
  • Suspended pick-up/drop off courier services while continuing to send and accept U.S. mail
  • Indicated that it is considering a one-time temporary reduction in registration fees for “certain categories of DDTC registrants”
  • Implemented procedures to send DSP-85 and General Correspondence (GC) responses by email when possible
  • Began accepting FMS Part 130 reports via email at DDTC-Part130Notices@state.gov
  • Moved to electronic submissions of Congressional Notifications.

DDTC has also provided extensions as follows:

  • Temporarily extended ITAR registrations expiring on February 29 through June 30, 2020 for two months from the original date of expiration
  • Extended licenses expiring “between March 13, 2020 and May 31, 2020 for six (6) months from the original date of expiration”
  • Granted an additional 30 days for responses to request-for-information letters related to DTCC disclosures.

Finally, DDTC made the following announcements to address remote working and expedited licenses:

  • Suspended “the requirement that a regular employee, for purposes of ITAR § 120.39(a)(2), work at the company’s facilities, to allow the individual to work at a remote work location, so long as the individual is not located in Russia or a country listed in ITAR § 126.1” through July 31, 2020.
  • Suspended a similar requirement for regular employees of licensed entities working under a TAA, MLA, or exemption.
  • Reissued guidance for requests submitted in support of U.S. Operations (USOP) (exports in support of U.S. and coalition forces that are deployed or scheduled to be deployed within 90 days).

Please monitor the DDTC website for additional announcements.

OFAC Publishes Pandemic Guidance

On April 20, 2020, the Department of the Treasury, Office of Foreign Asset Control (OFAC) released a statement on compliance concerns during the COVID-19 pandemic.

The announcement addresses exemptions and authorizations that allow humanitarian assistance to countries subject to OFAC sanctions.  It specifically addresses the Iran, Venezuela, North Korea, Syria, Cuba, and Ukraine/Russia sanctions programs.

OFAC also requests anyone affected by the pandemic to contact OFAC as soon as practicable if delays associated with OFAC’s regulatory requirements (e.g., various reporting requirements and responding to administrative subpoenas).

OFAC has also established an e-mail account for electronic submission of disclosures at OFACdisclosures@treasury.gov.  OFAC has previously published specific guidance on how to organize and submit electronic correspondence.

Finally, OFAC acknowledged that the pandemic “can cause technical and resource challenges for organizations” that will be evaluated as a factor in potential violations on a case-by-case basis.

Compliance During the Pandemic – ECS Can Help

The U.S. government offices are making efforts to alleviate some difficulties in dealing with them, but this is not an excuse to ignore export compliance.  Enforcement may be hampered now, but any compliance problems left to fester are just going to get worse for when they are back to “normal.”

We continue to offer training, with live streaming two-day seminars and an eight-part webinar series currently in progress.  Click here for more on ECS training options.

Our consulting practice continues to operate remotely and can assist with license drafting and review, Technical Assistance Agreements (TAAs), product classifications, risk assessments, and any other assistance you may need to keep your compliance program in order and business moving along.

Four Cs of Export Compliance Updates – COVID-19, Cloud, Country Groups, and CFIUS

DDTC Open and Accepting Electronic Disclosures

On March 9, 2020, the Department of State, Directorate of Defense Trade Controls (DDTC) announced that it remains open, but will be making staffing and other adjustments in response to the Coronavirus Disease 2019 (COVID-19) pandemic.

Electronic licensing and registration processes are operating as normal, but may be subject to additional processing delays.  The same applies to Commodity Jurisdiction (CJ) and General Correspondence (GC) requests.

Most notable, disclosures submitted pursuant to ITAR §127.12 may now be submitted by email.  Disclosures and related information should be emailed in pdf format on company letterhead to DTCC-CaseStatus@state.gov.  Duplicate hard copies are not required, but hard copies may continue to be submitted if necessary.

Please monitor the DDTC website for additional announcements.

ITAR Cloud Rule Almost Here

The new International Traffic in Arms Regulations (ITAR) cloud rule is scheduled to go into effect March 25, 2020.  DDTC has release a two-page pdf handout summarizing the changes.

Commerce Changes Country Groups for Russia and Yemen

On February 24, 2020, the Department of Commerce, Bureau of Industry and Security (BIS) published a rule (85 FR 10274) revising the Country Chart and Country Groups for Russia and Yemen in the Export Administration Regulations (EAR).  A subsequent rule (85 FR 13009) made a minor correction.

The rule removes Russia from more favorable treatment under Country Groups A:2 (Missile Technology Control Regime) and A:4 (Nuclear Suppliers Group) and adds it to Country Groups D:2 and D:4 to reflect nuclear and missile technology proliferation concerns.  It also adds an “X” in the “NP 1” column of the Commerce Country Chart for Russia, establishing a license requirement for items controlled for those purposes.

The rule removes Yemen from more favorable treatment under Country Group B and adds it to Country Group D:1 based on national security concerns.

Under these changes, certain license exceptions are no longer available for Russia and Yemen.  For transactions that would previously have been authorized under a license exception, a BIS license will be required (exports, reexports, and transfers of certain controlled items).

CFIUS Filing Fees Proposed

On March 9, 2020 (85 FR 13586, corrected in 85 FR 14837), the Department of the Treasury issued a proposed rule to establish a filing fee for voluntary notices submitted for by the Committee on Foreign Investment in the United States (CFIUS).  The Foreign Investment Risk Review Modernization Act of 2018 (FIRRMA) provided for, but did not immediately require, filing fees.

The proposed rule adds implementing regulations including the following fee schedule:

  • $750 for transactions valued at greater than $500,000 but less than $5,000,000;
  • $7,500 for transactions valued at equal to or greater than $5,000,000 but less than $50,000,000;
  • $75,000 for transactions valued at equal to or greater than $50,000,000 but less than $250,000,000;
  • $150,000 for transactions valued at equal to or greater than $250,000,000 but less than $750,000,000; and
  • $300,000 for transactions valued at equal to or greater than $750,000,000.

Comments will be accepted through April 3, 2020.  Refer to the original Federal Register Notice for more information and how to comment.

ECS Working Remotely Since 2003

While events have turned our next scheduled seminar from on-site in Park City, Utah to on-site on your computers nationwide, ECS remains available to assist with your export compliance needs.  Contact us today and keep your business moving despite recent disruptions.

Firearms Reforms Effective, Except 3D Printer Technical Data

On Monday, March 9, 2020, as scheduled, the Export Control Reform rules for United States Munitions List (USML) Categories I, II, and III (firearms, artillery, and ammunition) took effect.

As described in our earlier blog post and the Federal Register Notices, items that the U.S. government has determined not to provide the U.S. with critical military or intelligence advantages or perform an inherently military function have been transferred to the Department of Commerce and will be subject to the Export Administration Regulations (EAR).

This concludes the initial review of the United States Munitions List (USML) that started in 2011.

3D Printer Data Excluded

Due to a court-ordered preliminary injunction issued Friday, March 6th as a part of ongoing litigation, “technical data and software directly related to the production of firearm or firearm parts using a 3D-printer or similar equipment” remain subject to the International Traffic in Arms Regulations (ITAR).  The injunction did not block the rest of the rule from taking effect.

The Department of State, Directorate of Defense Trade Controls (DDTC) has published a statement on the court order and may publish additional guidance.  Please refer to the DDTC website for additional information.

At Last – USML Category I, II, and III Revisions Are Here!

Concluding the initial review of the United States Munitions List (USML) that started in 2011, the Departments of State and Commerce have released their companion Export Control Reform rules USML Categories I, II, and III (firearms, artillery, and ammunition).  Click here for the Department of State rule and click here for the Department of Commerce rule.  The rules were published in the Federal Register on January 23, 2020 and would be effective 45 days after publication (March 9, 2020).

The new rules largely reflect proposals published in May 2018, with corrections, conforming changes, and some notable updates.

On the day of publication, 21 states filed a lawsuit against the new regulations that could delay or cancel the new rules.  Assuming that the rules stay in place, read on for what to expect.

Background

Items listed on the USML are controlled by the included in the State Department’s International Traffic in Arms Regulations (ITAR).  Items removed from the USML are controlled by the Commerce Department’s Export Administration Regulations (EAR).

The years-long effort is meant to limit the USML to those items that provide the U.S. with critical military or intelligence advantages as well as those items that perform an inherently military function.  All of the other USML categories had been reviewed and revised between 2011 and 2016.

ITAR/USML Revisions

Previously written broadly, USML Categories I, II, and III cover most firearms, artillery systems, and ammunition.  They also include catch-all parts and components categories (e.g., I(h) “Components, parts, accessories and attachments for the articles in paragraphs (a) through (g) of this category.”).  Items no longer controlled under the USML will be controlled by the Department of Commerce’s Export Administration Regulations (EAR) and listed on the Commerce Control List (CCL).

As revised, USML Category I includes the following, notably excluding most non-automatic or semi-automatic firearms:

*(a) Firearms using caseless ammunition.

*(b) Fully automatic firearms to .50 caliber (12.7 mm) inclusive.

*(c) Firearms specially designed to integrate fire control, automatic tracking, or automatic firing (e.g., Precision Guided Firearms).

Note 1 to paragraph (c): Integration does not include only attaching to the firearm or rail.

*(d) Fully automatic shotguns regardless of gauge.

*(e) Silencers, mufflers, and sound suppressors.

(f) [Reserved]

(g) Barrels, receivers (frames), bolts, bolt carriers, slides, or sears specially designed for the articles in paragraphs (a), (b), and (d) of this category.

(h) Parts, components, accessories, and attachments, as follows:

(1) Drum and other magazines for firearms to .50 caliber (12.7 mm) inclusive with a capacity greater than 50 rounds, regardless of jurisdiction of the firearm, and specially designed parts and components therefor;

(2) Parts and components specially designed for conversion of a semi-automatic firearm to a fully automatic firearm.

(3) Parts and components specially designed for defense articles described in paragraphs (c) and (e) of this category; or

(4) Accessories or attachments specially designed to automatically stabilize aim (other than gun rests) or for automatic targeting, and specially designed parts and components therefor.

(i) Technical data (see §120.10 of this subchapter) and defense services (see §120.9 of this subchapter) directly related to the defense articles described in this category and classified technical data directly related to items controlled in ECCNs 0A501, 0B501, 0D501, and 0E501 and defense services using the classified technical data. (See §125.4 of this subchapter for exemptions.)

(x) Commodities, software, and technology subject to the EAR (see §120.42 of this subchapter) used in or with defense articles.

Note to paragraph (x): Use of this paragraph is limited to license applications for defense articles where the purchase documentation includes commodities, software, or technology subject to the EAR (see §123.1(b) of this subchapter)

Note 1 to Category I: The following interpretations explain and amplify the terms used in this category:

(1) A firearm is a weapon not over .50 caliber (12.7 mm) which is designed to expel a projectile by the deflagration of propellant;

(2) A fully automatic firearm or shotgun is any firearm or shotgun that shoots, is designed to shoot, or can be readily restored to shoot, automatically more than one shot, without manual reloading, by a single function of the trigger; and

(3) Caseless ammunition is firearm ammunition without a cartridge case that holds the primer, propellant, and projectile together as a unit.

Except for scopes controlled in Category XII (night vision), riflescopes manufactured to military specifications move to the CCL where they will join other, already EAR-controlled riflescopes.

The Category II revision includes expanded technical notes and specifications for control and enumerate the parts and components that will remain on the USML.  The Category III is rewritten to control ammunition based on technical attributes rather than merely being “for the articles in Categories I and II.”  Both Category I and Category II include paragraphs controlling developmental products funded by the Department of Defense.

ITAR revisions also include conforming changes throughout where references to firearms needed to be removed or updated.  Some Part 129 brokering rules continue to apply to firearms moved to the CCL by adding a reference to the ATF’s United States Munitions Import List (USMIL).

EAR/CCL Revisions

Concurrently, the Department of Commerce rule creates seventeen new Export Control Classification Numbers (ECCNs) for the items leaving the USML.  Reorganizing to put similar items already controlled on the CCL with new related entries, the rule revises eight ECCNs and removes nine.  Items currently controlled in Category II would be controlled under new “600 series” ECCNs “to control items of a military nature” and Category I and III items would be controlled under new “500 series” ECCNs “because, for the most part, they have civil, recreational, law enforcement, or other non-military applications.”

The rule also revises various sections of the EAR to accommodate the new items and establish licensing policies where needed.  Among these, a policy of denial is in place for 500 series items to the Peoples Republic of China and Country Group E:1.

Furthermore, to address the controversy over 3D printing files, EAR §734.7(c) is added to maintain EAR controls even when “published”:

The following remains subject to the EAR: “software” or “technology” for the production of a firearm, or firearm frame or receiver, controlled under ECCN 0A501, that is made available by posting on the internet in an electronic format, such as AMF or G-code, and is ready for insertion into a computer numerically controlled machine tool, additive manufacturing equipment, or any other equipment that makes use of the “software” or “technology” to produce the firearm frame or receiver or complete firearm.

This is intended to resolve the controversy related to the EAR’s release from control for “published” information, including information posted on the internet (a policy that the ITAR does not share, leading DDTC to consider posting information on the internet to be an “export.”).

Effects of Export Control Reform

Both departments noted that neither one regulates the domestic sale or use of firearms in the United States, or the transfer of firearms or related software or technology between U.S. persons within the United States.  They also noted that the Department of Commerce has already been licensing similar items including shotguns, shotgun ammunition, and sighting devices for decades.

Exports still require DOC authorization, with licenses subject to interagency national security and foreign policy review as well as subject to the laws of importing countries.

The main benefits of the reforms are administrative—fewer resources will need to be devoted to licensing and registration.

The State Department expects a decrease of 10,000 licenses per year.  Of those, 4,000 will be eligible for license exceptions and 6,000 will require Commerce licenses.  When Commerce licenses are needed, the absence of a purchase order requirement will allow some licenses for regular customers to be consolidated.  Some license exceptions will also be available, largely for minor parts and components.

This reform is especially advantageous to manufacturers of minor components as these were the only three USML categories have maintained catch-all parts and components subcategories.  Under the reform, parts and components not specifically listed will be controlled on the CCL.

Manufacturers and exporters whose products are now all EAR-controlled no longer have to register with DDTC and pay the minimum $2,250 registration fee.  The Commerce Department’s SNAP-R licensing system includes free registration and free license applications.

The reform also benefits gunsmiths.  The State Department noted that:

…gunsmiths that do not manufacture, export, or broker articles that remain subject to the ITAR after this rule’s effective date will no longer need to determine if they are required to register under the ITAR. They may, however, still be required to comply with ATF licensing requirements.

The Commerce Department also noted that while reporting of fees and commissions under ITAR Part 130 will not apply to EAR-controlled items, “the Foreign Corrupt Practices Act (FCPA) already prohibits this type of corruption activity and provides a robust regulatory scheme. FCPA applies to all items subject to the EAR, including items that will be moved from the USML to the CCL.”

De minimis rules will also encourage foreign sales as incorporation of parts into foreign items will not necessarily subject the foreign item to U.S. export-controls.

State Department authorizations (licenses and agreements) may continue to be used after the transition of items from the USML to the CCL.

For companies that work with firearms, guns, and ammunition, this is a huge development that will pay dividends in the long run.  ECS is here to help with the transition, offering training seminars and on-site training, classification assistance, and DDTC and BIS license draftingContact us for help.

January Export Compliance Updates – DDTC, BIS, and More!

Following the big Christmas vacation announcement of the new International Traffic in Arms Regulations (ITAR) cloud rule, even more changes have materialized for export compliance.

DECCS is Coming

In a January 14th webinar, the Department of State, Directorate of Defense Trade Controls (DDTC) announced another long-awaited change: DDTC’s cloud-based Defense Export Control and Compliance System (DECCS) will launch licensing and registration applications in February.  The target date is currently February 3rd with deployment anticipated no later than February 17th.  The DTrade licensing application will be taken offline for data migration prior to the DECCS launch.

DECCS will feature:

  • An updated DS-2032 registration form with a new payment process and no request for Social Security numbers
  • Current license forms from DTrade
  • Access to existing, unexpired DTrade licenses
  • New GC forms for brokering and retransfer requests
  • More digital certificate options (DTrade ACES certificates will work with DECCS until their July 2020 expirations)

Users can enroll now, but will not be able to view or use the new features until the upgrade is deployed.  Visit the DECCS Industry Portal for more information or to begin the enrollment process: https://deccspmddtc.service-now.com/deccs

DDTC Releases Defense Services FAQs

DDTC released a series of FAQs on the provision of defense services by U.S. persons abroad.  The FAQs are intended to assist with determining whether an authorization is required for a U.S. person to assist a foreign entity with defense articles, technical data, or military training and to outline for process for requesting approval.  Notably, when authorization is required for such services, the request should be submitted as a General Correspondence (GC) request under ITAR §126.9(b).

Commerce Controls Geospatial Imagery Analysis Software

On January 6, 2020, the Department of Commerce, Bureau of Industry and Security (BIS)  published an interim final rule (85 FR 459) controlling “software specially designed to automate the analysis of geospatial imagery” under the Export Administration Regulations (EAR) Export Control Classification Number (ECCN) 0D521.

ECCN 0D521 controls “Any software subject to the EAR that is not listed elsewhere in the CCL, but which is controlled for export because it provides at least a significant military or intelligence advantage to the United States or for foreign policy reasons” and requires a license for export or reexport to all countries other than Canada.  Items in the 0Y521 series (0A521, 0B521, 0C521, 0D521, and 0E521) are specified in Supplement No. 5 to Part 774 of the EAR.

The rule was effective January 6, 2020 and comments will be accepted through March 6, 2020.  Please refer to the Federal Register Notice for how to submit comments.

Commerce Seeks Technical Advisory Committee Representatives

BIS also announced that it is recruiting representatives from industry, academia, and the U.S. government to serve on one of seven Technical Advisory Committees (TACs).  These committees advise the Department of Commerce on the technical parameters and administration of dual-use export controls.

The TACs advise on the following areas:

  1. Information Systems: Categories 3 (electronics), 4 (computers), and 5 (telecommunications and information security);
  2. Materials: Category 1 (materials, chemicals, microorganisms, and toxins);
  3. Materials Processing Equipment: Category 2 (materials processing);
  4. Sensors and Instrumentation: Category 6 (sensors and lasers);
  5. Transportation and Related Equipment TAC: Categories 7 (navigation and avionics), 8 (marine), and 9 (propulsion systems, space vehicles, and related equipment);
  6. Emerging Technology: identification of emerging and foundational technologies; and
  7. Regulations and Procedures: Export Administration Regulations (EAR) and EAR implementation.

TAC members must obtain secret-level clearances prior to their appointment.  See their Federal Register Notice (84 FR 72292) for more information.

Civil Monetary Penalties Adjusted for Inflation

Inflationary adjustments to civil monetary penalties were issued by both the Department of Commerce (85 FR 207) and the Department of State (85 FR 2020).  Maximum penalties depend on the specific kind of violation.

The ITAR §127.10 civil penalties were amended as follows:

  • § 127.10(a)(1)(i) increased from $1,163,217 to $1,183,736.
  • § 127.10(a)(1)(ii) increased from $845,764 to $860,683 (or five times the amount of the prohibited incentive payment, whichever is greater).
  • § 127.10(a)(1)(iii) increased from $1,006,699 to $1,024,457.

The Department of Commerce increased the maximum penalty for a violation of the Export Control Reform Act of 2018 from $300,000 to $305,292.

New CFIUS Regulations Issued

On January 13, 2020, the Department of the Treasury issued regulations to implement changes to the Committee on Foreign Investment in the United States (CFIUS) required by the Foreign Investment Risk Review Modernization Act of 2018 (FIRRMA).  One notable development is the definition of excepted investors which, subject to some restrictions, starts with persons and entities from Australia, Canada, and the United Kingdom.

Please refer to the CFIUS website for the new regulations, fact sheets, and FAQs.

Watch this Space – USML Categories I-III Reforms Moving Again

After even longer review than the ITAR cloud rule, the Departments of State and Commerce are moving forward with reforms to USML Categories I-III (firearms, guns, and ammunition).  We will have a summary of the new rule and what it means for manufacturers and exporters.

DDTC Issues Long-Awaited ITAR Cloud Rule

On December 26, 2019, the Department of State, Directorate of Defense Trade Controls (DDTC) published an Interim Final Rule (84 FR 70887) describing when data controlled by the International Traffic in Arms Regulations (ITAR) may be transmitted electronically without triggering a requirement for an export authorization.  The new rule is intended to clearly permit the use of cloud services and other electronic transmissions when technical requirements are met.

Rule Proposed in 2015 Effective March 2020

In an effort to modernize and harmonize export regulations, the Departments of Commerce and State originally published parallel proposed rules on June 3, 2015 (80 FR 31505 and 80 FR 31525).  One year later, on June 3, 2016, the Department of Commerce published a final rule (81 FR 35586) establishing that secured, unclassified transmissions would not be considered exports, reexports, or transfers when specific conditions were met.  The Department of State revised the ITAR at that time as well, but did not implement parallel definition until this notice.  The revision will go into effect nearly five years after the original proposal.

As revised, the Department of Commerce’s Export Administration Regulations (EAR) now allows the use of cloud services with EAR-controlled technology by excluding the following from the definition of exports, reexports, or transfers (EAR §734.18(a)(5)):

Sending, taking, or storing “technology” or “software” that is:

(i) Unclassified;

(ii) Secured using ‘end-to-end encryption;’

(iii) Secured using cryptographic modules (hardware or “software”) compliant with Federal Information Processing Standards Publication 140-2 (FIPS 140-2) or its successors, supplemented by “software” implementation, cryptographic key management and other procedures and controls that are in accordance with guidance provided in current U.S. National Institute for Standards and Technology publications, or other equally or more effective cryptographic means; and

(iv) Not intentionally stored in a country listed in Country Group D:5 (see Supplement No. 1 to part 740 of the EAR) or in the Russian Federation.

Note that the EAR’s Country Group D:5 incorporates ITAR §126.1 prohibited destinations.

The new ITAR rule is nearly identical, creating ITAR §120.54 “Activities that are not exports, reexports, retransfers, or temporary imports.”  §120.54(a)(5) excludes:

Sending, taking, or storing technical data that is:

(i) Unclassified;

(ii) Secured using end-to-end encryption;

(iii) Secured using cryptographic modules (hardware or software) compliant with the Federal Information Processing Standards Publication 140–2 (FIPS 140–2) or its successors, supplemented by software implementation, cryptographic key management, and other procedures and controls that are in accordance with guidance provided in current U.S. National Institute for Standards and Technology (NIST) publications, or by other cryptographic means that provide security strength that is at least comparable to the minimum 128 bits of security strength achieved by the Advanced Encryption Standard (AES–128);

(iv) Not intentionally sent to a person in or stored in a country proscribed in § 126.1 of this subchapter or the Russian Federation; and

(v) Not sent from a country proscribed in § 126.1 of this subchapter or the Russian Federation.

(Substantial variations from EAR text are underlined.)

One noteworthy variation is that while the EAR allows for “other equally or more effective cryptographic means” the ITAR rule specifies AES-128 as a minimum standard.  The ITAR rule also adds paragraph (v) regarding transmissions from §126.1 countries or Russia.

Both the EAR and ITAR rules note that “data in-transit via the internet is not deemed to be stored,” define end-to-end encryption, and state that the ability to access encrypted data is not considered a release or export.

The rule also makes minor changes to other ITAR definitions in order to reference the new section.

An Interim Final Rule?

The Interim Final Rule combines a request for comments like the original 2015 Proposed Rule with a rule that is scheduled to be effective March 25, 2020.  The new definitions are subject to revision based on comments received.  This is a valuable opportunity to submit substantive comments on how the ITAR revision will affect your business, particularly if you can suggest possible changes that could make the rules more workable.

Comments may be submitted through January 27, 2020.  Refer to the Federal Register Notice for the full revision, responses to previous comments, and how to comment.

Commerce Proposes CFIUS-like Review for ICTS Supply Chain Transactions

On November 27, 2019, the Department of Commerce published a notice (84 FR 65316) proposing new regulations on Information and Communications Technology and Services (ICTS) supply chain transactions with “foreign adversaries”  The proposal would add 15 CFR Part 7 to implement Executive Order 13873 of May 15, 2019.  The executive order had directed the Commerce Department to come up with regulations under the International Emergency Economic Powers Act (IEEPA).

In the proposal, “transaction” is are defined broadly as:

any acquisition, importation, transfer, installation, dealing in, or use of any information and communications technology or service.

“Information and Communications Technology and Services (ICTS)” are defined as:

any hardware, software, or other product or service primarily intended to fulfill or enable the function of information or data processing, storage, retrieval, or communication by electronic means, including through transmission, storage, or display.

The proposal does not specifically identify “foreign adversaries” but these will be determined by the Secretary of Commerce.

Foreign adversary means any foreign government or foreign non-government person determined by the Secretary to have engaged in a long-term pattern or serious instances of conduct significantly adverse to the national security of the United States or security and safety of United States persons for the purposes of Executive Order 13783.

It is anticipated that foreign adversaries could include parties on the Entity List such as Huawei.

The review of transactions would begin at the discretion of the US government, including when based on credible information from private parties.  Unlike the Committee on Foreign Investment in the United States (CFIUS), the Commerce Department’s review does not include an approval process and specifically excludes issuing advisory opinions and declaratory rulings.

Potentially prohibited transactions include those where:

The transaction involves information and communications technology or services designed, developed, manufactured, or supplied, by persons owned by, controlled by, or subject to the jurisdiction or direction of a foreign adversary; and

(i) Poses an undue risk of sabotage to or subversion of the design, integrity, manufacturing, production, distribution, installation, operation, or maintenance of information and communications technology or services in the United States;

(ii) Poses an undue risk of catastrophic effects on the security or resiliency of United States critical infrastructure or the digital economy of the United States; or

(iii) Otherwise poses an unacceptable risk to the national security of the United States or the security and safety of United States Persons.

ICTS transactions with foreign adversaries may be subject to mitigation, prohibition, or unwinding.

Violations (including misrepresentation and concealment of material facts) may be subject to civil penalties of up to $302,584 (as adjusted annually for inflation).

The Department of Commerce specifically requests comments on the following areas:

  • Categories of transactions or persons that would never be prohibited under the EO;
  • Types of transactions that may be prohibited, but where risks can be mitigated;
  • The proposed definition of “transaction”; and
  • Recordkeeping requirements.

Comments may be submitted through December 27, 2019.  Review the Federal Register Notice for the full proposed rule and how to submit comments.  Detailed comments and proposed revisions may be particularly helpful in completing the final rule.

Check out the Updated ECScreening.com

Always working to improve on crucial services like denied party screening, ECScreening, ECS’s Denied Party Screening solution for small and medium-sized companies has recently rolled out a series of updates for an improved user interface.  Based on user feedback, we have revised the appearance and functionality of the site, including updates to:

  • Main Menu Task Bar
  • Helpful FAQs
  • Blog: the Denied Party Digest
  • Quick access menu

The quick access menu displays all research options at the top of appropriate pages.

Importantly, we’ve expanded service for commercial and enterprise users: Recurring Search no longer has any record limits!

Denied party lists are constantly changing and apply worldwide.  Recurring Search eases the burden of keeping up with these changes.  For example, when changes to the SDN (Specially Designated Nationals) List and/or Entity List occur, like the ones below, Recurring Search keeps your business from missing these changes because your searches are continuously screened:

  • November 18, 2019 – nine new SDNs from Turkey, Kuwait, Afghanistan, and Syria;
  • November 13, 2019 – twenty-two entities from Bahrain, France, Iran, Jordan, Lebanon, Oman, Pakistan, Saudi Arabia, Senegal, Syria, Turkey, the United Arab Emirates, and the United Kingdom added to the Entity List plus one modification and three removals;
  • November 7, 2019 – four new SDNs from Nicaragua and Mali;
  • November 5, 2019 – five new SDNs from Venezuela;
  • October 11, 2019 – eight new SDNs from South Sudan, United Kingdom, Kenya, and the United Arab Emirates;
  • October 10, 2019 – four new SDNs and two updates in South Africa, Iran, and the United Arab Emirates;
  • October 9, 2019 – twenty-eight Chinese entities added to the Entity List; and
  • September 30, 2019 – five new SDNs from Russia, Seychelles, and the Czech Republic, plus one vessel, three aircraft, and seven other updates.

Check out ECScreening.com and contact us for a 7 day free trial coupon.

Watch This Space: Export Compliance Changes Coming

As always seems to be the case, changes are coming to export compliance.  ECS is monitoring developments, particularly including the following issues that we expect to see more on over the next few months and into the New Year:

From the Department of State, Directorate of Defense Trade Controls (DDTC):

  • Movement on Export Control Reform of USML Categories I-III;
  • ITAR revisions to improve definitions and organization;
  • DECCS deployment for registration and licensing;
  • More guidance on the revised 126.4 ITAR Exemption  – Shipments by or for U.S. Government agencies;
  • Revised and condensed agreements guidelines; and
  • A final encryption/cloud storage rule.

From the Department of Commerce, Bureau of Industry and Security (BIS), we are watching for proposed rules to tighten export controls on emerging technologies.   The Commerce Department is under Congressional pressure to move forward with the rules, required by the Export Control Reform Act of 2018.  If you expect these to impact your business, be ready to review and comment.

From the Department of Treasury, the comment period closed on proposed new CFIUS regulations required by the Foreign Investment Risk Review Modernization Act of 2018 (FIRRMA).  Watch for action on those rules, including what investors can qualify as excepted investors (a whitelist, with limitations).  The proposed rules can be found here and here.

Export compliance is always changing.  Subscribe to Our “EAR”… to the ITAR to keep up!