ITAR vs EAR: Comprehensive Comparison Guide

Citation Hook: The two foundational pillars of U.S. export control law — the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR) — govern the export, re-export, and transfer of the vast majority of controlled U.S. defense, dual-use, and commercial goods, software, and technology.

If you manufacture, export, or handle U.S.-origin technology, you almost certainly operate under either ITAR, EAR, or both. Yet after more than eight years advising 200+ clients across defense, aerospace, life sciences, and advanced manufacturing, I can tell you that the single most common mistake companies make is assuming they know which regulation applies to them — without ever formally making that determination.

Getting it wrong isn't a minor paperwork issue. Civil penalties under ITAR can reach $1,308,612 per violation, and EAR violations can exceed $364,992 per violation (or twice the value of the transaction). Criminal penalties under both regimes can result in imprisonment.

This guide breaks down everything you need to know to distinguish ITAR from EAR, determine which applies to your products, and build a defensible compliance posture.

What Is ITAR?

The International Traffic in Arms Regulations (ITAR), codified at 22 C.F.R. Parts 120–130, implements the Arms Export Control Act (AECA). ITAR is administered by the U.S. Department of State, Directorate of Defense Trade Controls (DDTC).

ITAR controls defense articles, defense services, and related technical data that appear on the United States Munitions List (USML). The USML is organized into 21 categories, covering everything from firearms and ammunition (Category I) to spacecraft and related articles (Category XV) to nuclear weapons (Category XVI).

Citation Hook: Under ITAR, a "defense article" does not need to have been designed exclusively for military use — if an item is specifically designed, modified, configured, or adapted for a military application and appears on the USML, it is subject to ITAR regardless of its commercial availability.

Key ITAR obligations include: - Registration with DDTC for manufacturers, exporters, and brokers of defense articles and services - Licensing for exports, re-exports, retransfers, and temporary imports (with limited exemptions) - Technology control plans and access controls for ITAR-controlled technical data - Empowered Official designation within your organization - Recordkeeping for a minimum of five years

What Is EAR?

The Export Administration Regulations (EAR), codified at 15 C.F.R. Parts 730–774, implement the Export Controls Act of 2018 (formerly the Export Administration Act). EAR is administered by the U.S. Department of Commerce, Bureau of Industry and Security (BIS).

EAR controls dual-use items — commercial goods, software, and technology that have both civilian and potential military or proliferation applications — listed on the Commerce Control List (CCL). The CCL is organized into ten categories (EAR99 through 9E994) across five product groups (Equipment/Systems, Test Equipment, Materials, Software, Technology).

EAR also controls items not specifically listed on the CCL through the catch-all EAR99 designation. EAR99 items generally do not require a license for most destinations, but they can require one if the end-user, end-use, or destination triggers a license requirement.

Key EAR obligations include: - Export Control Classification Numbers (ECCNs) for controlled items - License determinations based on item classification, destination, end-user, and end-use - Denied Party Screening against the Entity List, Denied Persons List, Unverified List, and others - Destination Control Statements (DCS) on shipping documentation - Recordkeeping for a minimum of five years

ITAR vs EAR: Head-to-Head Comparison

The table below provides a structured side-by-side comparison of the two regimes across the dimensions that matter most for compliance program design.

The USML vs. the CCL: Understanding Controlled Item Lists

United States Munitions List (USML)

The USML (22 C.F.R. Part 121) contains 21 categories. The "specially designed" standard at ITAR § 120.41 is the critical interpretive tool — an item is subject to ITAR if it was specifically designed, developed, configured, adapted, or modified for a military application and meets the criteria of that section.

Following the Export Control Reform (ECR) initiative completed between 2013 and 2020, the USML was revised to be a positive list — meaning items must be specifically enumerated to fall under ITAR. Items that were once controlled under a broad "catch-all" USML category and do not meet the revised criteria were transitioned to the CCL, often receiving new "600 series" ECCNs.

Commerce Control List (CCL)

The CCL (15 C.F.R. Part 774, Supplement No. 1) organizes controlled items using a five-character Export Control Classification Number (ECCN). For example: - 3A001 — Electronic components with potential dual-use applications - 7A994 — General aviation inertial navigation systems (lower sensitivity controls) - 9E018 — Technology for aircraft engines or gas turbine components (600 series)

Items not specifically listed on the CCL carry the EAR99 designation. EAR99 items are the lowest-sensitivity tier but are not exempt from all controls — they still require screening against restricted end-users and restricted end-uses (e.g., WMD proliferation under EAR Part 744).

How to Determine Which Regulation Applies to Your Product

This is the most operationally important question for any exporter. The determination process follows a defined hierarchy:

Step 1: Is Your Item on the USML?

Review the 21 USML categories in 22 C.F.R. Part 121. Pay close attention to the "specially designed" standard under § 120.41 and any relevant notes, including "see-through" rules that can capture components and subsystems.

If yes → your item is ITAR-controlled. Stop here. ITAR takes priority.

Step 2: Is Your Item on the CCL?

If your item is not on the USML, review the CCL. You can use the BIS SNAP-R system or conduct an internal classification review using the CCL's ten categories. Check product groups A through E (equipment, test equipment, materials, software, technology).

If yes → your item is EAR-controlled under its ECCN. Proceed to license determination.

Step 3: Is Your Item EAR99?

If your item is not specifically listed on the CCL, it is EAR99. EAR99 items still require screening and may require a license depending on destination, end-user, and end-use.

If yes → your item is EAR99. Conduct end-user, end-use, and destination screening and apply relevant Part 744 controls.

Step 4: Seek a Commodity Jurisdiction (CJ) or Classification Request if Uncertain

If your item sits on the USML/CCL boundary — a common scenario after ECR — submit a Commodity Jurisdiction (CJ) request to DDTC or a Classification Request to BIS. These formal determinations provide regulatory certainty and are an important part of a defensible compliance record.

Citation Hook: A formal Commodity Jurisdiction (CJ) determination from DDTC or a Classification Request to BIS is the gold standard for establishing regulatory certainty when a product's jurisdictional status is ambiguous — and it creates a documented, defensible compliance record in the event of a government inquiry.

Deemed Exports: A Critical Compliance Concept for Both Regimes

Both ITAR and EAR regulate deemed exports — the release of controlled technology or source code to a foreign national within the United States. This concept is frequently overlooked by companies that never ship a physical product overseas.

Under ITAR, the release of ITAR-controlled technical data to a foreign national in the U.S. is treated as an export to that person's home country (22 C.F.R. § 120.50). This applies to engineers reviewing drawings, technicians receiving training, and visitors touring manufacturing floors.

Under EAR, the deemed export rule (outlined at 15 C.F.R. § 734.13) applies to the release of technology or source code subject to EAR to a foreign national in the U.S. The deemed re-export rule extends this to foreign nationals re-releasing technology to nationals of a third country.

Practical implication: If your workforce includes foreign nationals — and most do — your compliance program must include: - Foreign national tracking and access controls - Technology Control Plans (TCPs) for ITAR-controlled environments - Deemed export licensing reviews for foreign national employees

Can a Product Be Subject to Both ITAR and EAR?

Generally, no — the two regimes are mutually exclusive at the item level. An item is either ITAR-controlled (on the USML) or EAR-controlled (on the CCL or EAR99). It cannot simultaneously be both.

However, a company or program can absolutely be subject to both ITAR and EAR simultaneously. This is common in: - Defense primes and sub-tiers that produce some USML-controlled hardware and some 600-series CCL hardware - Aerospace companies that manufacture both USML Category XV spacecraft components and commercial satellite parts with EAR ECCNs - Dual-use technology companies that produce ITAR-controlled cryptographic defense systems and commercial EAR-controlled encryption products

In these cases, robust classification records, segregated document control systems, and clear labeling of ITAR vs. EAR items are essential to maintaining compliance across both regimes.

Key Differences in Licensing

ITAR Licenses

ITAR license types include: - DSP-5: Permanent export of unclassified defense articles and technical data - DSP-73: Temporary export of unclassified defense articles - DSP-61: Temporary import of unclassified defense articles - Technical Assistance Agreement (TAA): Authorizes the provision of defense services or sharing of ITAR technical data with foreign persons - Manufacturing License Agreement (MLA): Authorizes foreign manufacture of defense articles using U.S. technical data

ITAR exemptions exist but are narrower than EAR license exceptions. Key exemptions include § 123.16 (limited value shipments), § 124.2 (training exemption), and § 125.4 (technical data exemptions).

EAR Licenses and License Exceptions

EAR license exceptions can authorize exports without a formal license application, providing greater operational flexibility. Key exceptions include: - TMP (Temporary Exports): Short-term exports for personal use, inspection, or testing - STA (Strategic Trade Authorization): Exports to 36 close-ally countries for most items - ENC (Encryption): Commercial encryption items with mass-market applications - GOV (U.S. Government): Exports for official U.S. government use - RPL (Replacement Parts): One-for-one replacement of previously exported items

Penalties and Enforcement: Why This Matters

Both ITAR and EAR enforcement actions have increased significantly over the past decade. According to DDTC data, consent agreements and administrative settlements under ITAR have totaled hundreds of millions of dollars since 2010, with major actions against household names including Boeing, Raytheon, and ITT Corporation.

BIS enforcement has similarly intensified, particularly around exports to Russia and China. In fiscal year 2024, BIS initiated more than 10 times the number of enforcement cases involving technology exports to restricted destinations compared to the pre-2022 baseline.

Statistics that underscore the stakes: - The average ITAR consent agreement penalty for major defense contractors has exceeded $10 million in recent years. - In 2023, BIS imposed record-setting penalties exceeding $300 million across a combination of criminal and civil actions. - Over 80% of export control violations identified by BIS auditors involve inadequate classification records — not intentional violations.

Building a Compliance Program That Covers Both Regimes

Whether you're primarily subject to ITAR, EAR, or both, a robust export compliance program shares common structural elements:

1. Written Export Compliance Program (ECP): A documented policy and procedure framework tailored to your specific products and business activities
2. Jurisdiction and Classification Records: Formal written determinations for every product in your portfolio
3. Screening Program: Automated or manual screening of all parties (customers, suppliers, end-users, freight forwarders) against government restricted party lists
4. Training: Role-specific training for employees in sales, engineering, logistics, and legal
5. Empowered Official (ITAR): A designated, qualified individual with authority to sign licenses and oversee ITAR compliance
6. Technology Control Plan (TCP): Required for organizations with ITAR-controlled environments and foreign national employees
7. Audit and Self-Assessment: Regular internal audits with documented results and corrective action plans
8. Voluntary Disclosure Procedures: A defined process for identifying, investigating, and voluntarily disclosing potential violations

At Certify Consulting, we've helped more than 200 clients build export compliance programs across both regimes — achieving a 100% first-time audit pass rate. Whether you need a full program build, a gap assessment, or help navigating a specific license application, the right guidance at the right time can be the difference between a clean compliance record and a costly enforcement action.

Quick Reference: ITAR vs EAR at a Glance

Conclusion: Know Your Jurisdiction Before You Ship

ITAR and EAR are not interchangeable, and assuming you know which applies — without a formal determination process — is one of the most expensive mistakes a compliance professional can make. The framework is clear: USML first, CCL second, EAR99 last. When in doubt, pursue a formal CJ or Classification Request.

If your organization is navigating jurisdiction determinations, license applications, compliance program development, or a potential voluntary disclosure, I'd encourage you to contact Certify Consulting for a confidential consultation. With over eight years of hands-on experience and a track record built on 200+ clients served, we bring the depth of expertise your program deserves.

For more guidance on specific aspects of ITAR compliance, explore our ITAR compliance resources at itarconsultant.us.

Last updated: 2026-03-29