← Glossary·Frameworks

ITAR

Also known as: International Traffic in Arms Regulations
ITAR

US State Department regulations controlling export of defense articles and technical data on the USML.

ITAR (22 CFR Parts 120–130) controls the export, re-export, and brokering of defense articles, defense services, and technical data on the United States Munitions List (USML). Administered by DDTC, it applies regardless of medium — including code, drawings, and verbal disclosure.

Why it matters
ITAR violations carry criminal penalties up to $1M per violation and 20 years imprisonment. Foreign-national engineers on the wrong side of an access boundary is the most common — and most expensive — enforcement target.

Related terms

CUI (Controlled Unclassified Information)
Federal information requiring safeguarding or dissemination controls per Executive Order 13556; protected by NIST SP 800-171.

Does your program actually cover ITAR?

Run a free ComplianceIQ audit against ITAR and we'll surface every gap on this — and the other controls auditors flag — with the exact clause references to fix.

Free ITAR auditBack to glossary