|
Export Control Restrictions on Software |
by D.C. Toedt III, Abridged from Chapter 11 of The Law and Business of Computer Software (07/1997) |
|
Introduction The U.S. export controls regime is designed to implement some simple concepts that, when implemented in the aggregate, add up to a complex system. The Export Administration Regulations ("EAR" or "Export Regulations"), 15 C.F.R. §§ 730 et seq., are administered by the Bureau of Export Administration ("BXA") in the Department of Commerce. They were completely reorganized in March 1996, with a major encryption-related revision in December 1996. Readers should consult the actual Export Regulations
themselves, including possible late-breaking changes announced in the
Federal Register, in determining what if any kind of export license is
required for a specific export or whether instead a License Exception
is applicable. What "Exports" Must be Licensed? Under the Export Regulations, "export" means an actual shipment or transmission of items subject to the Regulations out of the United States. See Important EAR terms and principles, 15 C.F.R. § 734.2(b)(1). Unless a "License Exception" applies, the export of high technology products, including sophisticated computer software and other technical data, is very likely to require a license. An export license may be needed even if the export is being made from a U.S. company to its branch office or wholly owned subsidiary located abroad. Some actions that might not be regarded as an "export" in other contexts do constitute an export subject to the Export Regulations. For example: carrying a notebook computer with encryption-capable software on a business trip outside the United States (possibly subject to a "tools of the trade" License Exception); the release of technology to a foreign national in the United States through such means as demonstration or oral briefing; the return of foreign equipment to its country of origin after repair in the United States, shipments from a U.S. foreign trade zone; the electronic transmission of non-public data that will be received abroad, e.g., posting to an Internet newsgroup or to a Web site; visual inspection by foreign nationals of U.S.-origin equipment and facilities; oral exchanges of information in the United States or abroad; the application to situations abroad of personal knowledge or technical experience acquired in the United States; technical assistance by U.S. persons with respect
to encryption commodities or software. [15 CFR 730.5, 734.2(b)(2) Are There Any "License Exceptions" for
Software Exports? Several License Exceptions (which are just what they
sound like -- exceptions to the requirement for an export license) are
available for software. Some of these are discussed below. What is the "Mass
Market" Software License Exception? That exception does not apply, however, to encryption software. Such software may become eligible after a one-time BXA review according to the provision of § 742.15(b)(1) of the Export Regulations. License Exception TSU is available to all destinations except Cuba, Iran, Iraq, Libya, North Korea, Sudan, and Syria. To be eligible for that exception, software must be generally available to the public by being: a. Sold from stock at retail selling points, without restriction, by means of: 1. Over the counter transactions; 2. Mail order transactions; or 3. Telephone call transactions; and b. Designed for installation by the user without further
substantial support by the supplier. What Software Exports Can Use the "Tools of
the Trade" License Exception? The tools of the trade License Exception perimts export and reexport of "[u]sual and reasonable kinds and quantities of commodities and software for use by employees of the exporter in a lawful enterprise or undertaking of the exporter." The software in question must remain under the effective control of the exporter or the exporters employee. Shipment of the software may accompany the individual departing from the United States or may be shipped unaccompanied within one month before the individuals departure from the United States, or at any time after departure. No tools of the trade may be taken to Country Group E:2 (Cuba, North Korea, Libya), and only equipment necessary to commission or service goods may be taken as tools of trade to Country Group D:1 (basically, all present or former Communist countries except for certain central European countries). Software shipped as a temporary export under the tools
of the trade License Exception must be returned to the country from which
they were exported as soon as practicable but (except in certain specific
circumstances) no later than one year from the date of export. Can Beta Software Be Exported
Under a License Exception? Still another License Exception is for beta-test software
under section 740.9(c). This form of the TMP License Exception cannot
be used for software subject to the EI encryption restrictions. What Other U.S. laws or Agencies For example, exports of cryptographic devices or products designed to military specifications or pursuant to a military contract or specifically designed, modified, or configured for military applications are governed by the International Traffic in Arms Regulations ("ITAR"), administered by the Department of State. See 22 C.F.R. §§ 121-130 If the exporter is uncertain whether the Department
of State or the BXA has jurisdiction over the export, a written determination
from the Office of Defense Trade Controls can be requested. Are There Penalties for
Export-Law Violations? As complicated and time consuming as export control compliance is, exporters must achieve compliance. If you violate the Export Regulations, you can be fined and/or imprisoned. Even without demonstrating culpability on the part of the exporter, administrative officials may impose substantial fines for each violation, condition subsequent export licensing upon payment of penalties, and suspend or revoke the privilege to export. |
|