ITAR vs EAR — Key Differences Between
Export Control Regulations

Understanding ITAR and EAR: Two Pillars of U.S. Export Control

The United States controls the export of goods, technology, and services through two distinct regulatory frameworks: the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). Together, these regimes cover virtually every item that leaves U.S. borders — from fighter jet avionics to commercial encryption software.

Understanding which regime applies to your products is not optional. It is the foundational step in export control compliance. Getting it wrong — treating an ITAR-controlled defense article as an EAR-controlled commercial item — constitutes an unauthorized export and triggers penalties that can reach seven figures per violation.

ITAR derives its authority from the Arms Export Control Act (AECA), codified at 22 U.S.C. § 2778. The regulations themselves appear in 22 CFR Parts 120 through 130, administered by the State Department’s Directorate of Defense Trade Controls (DDTC). ITAR exists to control the export of defense articles, defense services, and related technical data that have been specifically designed, developed, configured, adapted, or modified for military application.

EAR derives its authority from the Export Control Reform Act of 2018 (ECRA), codified at 50 U.S.C. § 4801 et seq. The regulations appear in 15 CFR Parts 730 through 774, administered by the Commerce Department’s Bureau of Industry and Security (BIS). EAR covers a much broader range of items — essentially everything not exclusively controlled by another U.S. government agency, including dual-use items, commercial technology, and items that have both civilian and military applications.

When Does ITAR Apply vs. EAR?

The threshold question for any exporter is straightforward: is your item on the USML? If it is specifically enumerated on the United States Munitions List, ITAR applies — full stop. If it is not on the USML, the item falls under EAR jurisdiction by default.

ITAR applies when your item:

• Is specifically designed, developed, configured, adapted, or modified for a military application and appears on the USML (22 CFR 121.1)
• Is a defense service — furnishing assistance, including training, to foreign persons in the design, development, engineering, manufacture, production, assembly, testing, or use of defense articles (22 CFR 120.32)
• Is technical data directly related to defense articles — blueprints, drawings, plans, instructions, documentation, or software source code specifically designed for items on the USML (22 CFR 120.33)
• Contains components or subsystems that are individually USML-listed, even if the end item has civilian applications

EAR applies when your item:

• Is a dual-use item with both civilian and potential military applications, classified under a specific ECCN on the Commerce Control List
• Is a commercial item not specifically designed for military use but subject to export controls due to technical parameters (e.g., encryption strength, precision, or operating temperature)
• Is designated EAR99 — a catch-all classification for items subject to EAR but not listed on the CCL. Most commercial products fall here and can be exported to most destinations without a license
• Was transferred from the USML to the CCL during Export Control Reform (ECR), now classified under 600-series ECCNs with enhanced controls

Commodity Jurisdiction Determination: Which Regime Controls Your Product?

When a company cannot definitively determine whether its item falls under ITAR or EAR, the formal resolution mechanism is a commodity jurisdiction (CJ) determination. This is a binding legal determination made by DDTC that establishes whether an item is subject to the USML (ITAR) or the CCL (EAR).

How the CJ Process Works

1. Self-assessment. The company first conducts an internal analysis comparing the item against USML category descriptions and CCL ECCN parameters. Many items can be clearly classified without a formal CJ request.
2. CJ request submission. If the item’s jurisdiction remains unclear, the company submits a CJ request to DDTC using Form DS-4076. The request must include detailed technical descriptions, end-use information, and the company’s own jurisdiction analysis.
3. Interagency review. DDTC reviews the submission, often consulting with the Commerce Department’s BIS and the Department of Defense. For items near the USML/CCL boundary, this interagency consultation is standard.
4. Final determination. DDTC issues a CJ determination letter stating whether the item is ITAR-controlled (USML) or EAR-controlled (CCL), along with the specific category or ECCN. The determination is binding and cannot be appealed.

Typical CJ processing time ranges from 60 to 120 days, though complex cases can take longer. Companies should factor this timeline into their export planning and never export an item with uncertain jurisdiction while a CJ request is pending.

For expert guidance on navigating the commodity jurisdiction process, schedule a free consultation with our export control team.

USML vs. CCL: Understanding the Control Lists

The United States Munitions List (USML) and the Commerce Control List (CCL) are the classification catalogs that determine which specific items fall under ITAR and EAR, respectively. Understanding their structure is essential for accurate export classification.

USML Structure (22 CFR 121.1)

The USML contains 21 categories of defense articles, each covering a specific domain of military technology:

• Categories I–IV: Firearms, artillery, ammunition, and launch vehicles
• Categories V–VIII: Explosives, naval vessels, tanks/military vehicles, aircraft
• Categories IX–XII: Military electronics, fire control, protective equipment, classified articles
• Categories XIII–XVI: Auxiliary equipment, toxicological agents, spacecraft, nuclear weapons
• Categories XVII–XXI: Classified articles, directed energy weapons, gas turbines, submersible vessels, miscellaneous

Following Export Control Reform, the USML uses a “positive list” approach — items must be specifically enumerated to be controlled. Gone are the broad, catch-all paragraphs that previously swept marginal items onto the USML. If an item is not specifically described in a USML category, it is presumptively EAR-controlled.

CCL Structure (15 CFR 774, Supplement 1)

The CCL is organized into 10 categories (numbered 0–9), each subdivided into five product groups (A through E):

• Category 0: Nuclear materials, facilities, and equipment
• Category 1: Special materials and related equipment
• Category 2: Materials processing
• Category 3: Electronics
• Category 4: Computers
• Category 5: Telecommunications and information security
• Category 6: Sensors and lasers
• Category 7: Navigation and avionics
• Category 8: Marine
• Category 9: Aerospace and propulsion

Items are classified by their Export Control Classification Number (ECCN) — a five-character alphanumeric code (e.g., 3A001 for certain electronic components, 9A610 for military aircraft transferred from USML). The 600-series ECCNs (e.g., 0A606, 9A610) are a direct product of Export Control Reform and contain items that moved from ITAR to EAR with heightened controls that bridge the two regimes.

Items not specifically listed on the CCL receive the designation EAR99 — a residual classification for low-technology commercial goods. Most EAR99 items can be exported without a license to most destinations, though restrictions remain for embargoed countries, sanctioned end-users, and prohibited end-uses.

How Items Move Between ITAR and EAR: Export Control Reform

The Export Control Reform (ECR) initiative, launched by the Obama Administration in 2009 and implemented between 2013 and 2020, fundamentally restructured the boundary between ITAR and EAR. Understanding ECR is essential for any company whose products sit near the USML/CCL boundary.

What ECR Changed

Before ECR, the USML used broad, catch-all language like “parts, components, accessories, and attachments specifically designed or modified” for defense articles. This swept thousands of items onto the USML that had minimal military significance — commercially available screws, gaskets, and fasteners used in military equipment were technically ITAR-controlled.

ECR accomplished three major structural changes:

1. Positive list conversion. The USML was rewritten to enumerate specific items rather than using broad catch-all language. If an item is not specifically described on the revised USML, it is not ITAR-controlled — regardless of whether it was previously classified as a defense article.
2. 600-series ECCN creation. The CCL gained new “600-series” ECCNs (e.g., 0A606, 9A610, 9A619) to receive items transferred from the USML. These ECCNs carry enhanced controls compared to traditional CCL items — including restrictions on re-export to certain countries and end-use limitations — but still offer more licensing flexibility than ITAR.
3. Jurisdiction clarity. By sharpening the USML definitions, ECR reduced the number of commodity jurisdiction disputes and gave companies greater confidence in self-classification. Items with clear military purpose stayed on the USML; items with significant civilian applications moved to the CCL.

Impact on Defense Contractors

ECR transferred thousands of items from ITAR to EAR jurisdiction. For affected companies, this meant:

• Reclassification obligation. Companies had to re-evaluate every product previously classified under the pre-reform USML to determine if it moved to the CCL
• New compliance requirements. Items transferred to EAR required new internal procedures, different license applications, and BIS (not DDTC) as the licensing authority
• Potential cost savings. EAR’s broader license exceptions and country-based controls often reduced the licensing burden for items with legitimate civilian end-uses
• Ongoing monitoring. The September 2025 USML revisions — affecting 15 of 21 categories — continue to adjust the ITAR/EAR boundary, requiring companies to periodically re-evaluate their classifications

Common Mistakes: Assuming EAR When ITAR Applies

The single most dangerous export control mistake is treating an ITAR-controlled item as if it were EAR-controlled. This error is more common than most companies realize, and it carries catastrophic consequences.

Why This Mistake Happens

• Commercial-looking products. Many defense articles look identical to their commercial counterparts. A circuit board, GPS receiver, or thermal imaging sensor may have both commercial and USML-listed military versions that are physically indistinguishable.
• Component-level confusion. A company may correctly classify its end product as EAR-controlled but fail to recognize that a specific component or subsystem within that product is independently USML-listed.
• Legacy classifications. Companies relying on pre-ECR classifications may not have updated their product jurisdictions to reflect items that remained on the USML while similar items moved to the CCL.
• Acquisitions and mergers. When companies acquire defense-adjacent businesses, inherited product lines may include ITAR-controlled items that the acquiring company’s compliance team does not recognize.
• “Specifically designed” misinterpretation. Companies sometimes assume that because their item has commercial applications, it cannot be “specifically designed” for military use. The USML definition of this term (22 CFR 120.41) is narrower than many expect but still captures items that many companies consider dual-use.

Real-World Consequences

When an ITAR-controlled item is exported under EAR procedures — or worse, without any export authorization at all — the exporter has committed an unauthorized export under the AECA. The consequences include:

• Civil penalties up to $1,267,619 per violation (each shipment, each disclosure of technical data, each defense service provided counts as a separate violation)
• Criminal penalties up to $1,000,000 fine and 20 years imprisonment for willful violations
• Debarment from all defense trade — the company is prohibited from manufacturing, exporting, or brokering any USML items
• Retroactive DDTC registration requirements, back-dated compliance program mandates, and mandatory corrective action plans
• Loss of existing defense contracts and disqualification from future opportunities

How to Prevent Jurisdiction Errors

1. Conduct a comprehensive product classification review. Every item your company manufactures, exports, or handles should be formally classified against both the USML and CCL. Document your classification rationale.
2. Request commodity jurisdiction determinations for borderline items. When in doubt, submit a DS-4076 to DDTC. The 60–120 day wait is insignificant compared to a seven-figure penalty.
3. Review classifications periodically. USML and CCL changes (like the September 2025 revisions) can shift items between regimes. Annual classification reviews should be part of your compliance program.
4. Train your team. Engineers, sales staff, and procurement personnel must understand the ITAR/EAR distinction. A single email containing ITAR technical data sent to a foreign national constitutes a violation.
5. Engage qualified export control counsel. Classification decisions have legal consequences. Having a consultant with legal credentials (JD) ensures your classification rationale will withstand regulatory scrutiny.

Choosing the Right Compliance Path

Once you have determined whether your products fall under ITAR, EAR, or both regimes, the compliance path differs significantly:

If Your Products Are ITAR-Controlled

• Register with DDTC (mandatory, see our DDTC registration guide) — annual fee of $3,000–$4,000+
• Designate an Empowered Official with authority to sign license applications and compliance certifications
• Build a comprehensive ITAR compliance program covering classification, licensing, technical data controls, personnel screening, and recordkeeping
• Implement IT security controls compliant with NIST SP 800-171 for ITAR technical data storage and transmission
• Train all employees who access ITAR-controlled articles or data
• Conduct annual internal audits and maintain records for 5 years (22 CFR 122.5)

If Your Products Are EAR-Controlled

• Self-classify each item with the appropriate ECCN or EAR99 designation
• Screen all parties against BIS denied/restricted party lists (Denied Persons List, Entity List, Unverified List, Military End-User List)
• Determine license requirements using the Commerce Country Chart (15 CFR 738, Supplement 1) and applicable license exceptions
• Implement an Export Management and Compliance Program (EMCP) following BIS guidance
• Maintain export records for 5 years (15 CFR 762.6)
• File Automated Export System (AES) filings through ACE for applicable shipments

If You Have Products Under Both Regimes

Many defense contractors and technology companies have product portfolios that span both ITAR and EAR. These companies must maintain dual compliance programs — registered with DDTC for ITAR items while also managing EAR obligations with BIS. This requires careful internal segregation of product lines, separate license tracking systems, and personnel trained on both regulatory frameworks.