Controlled Goods and Technology

The US government controls a wide variety of goods and technology on several lists. Generally, any technical data which provides insight into the development, production, or use of controlled articles will also be controlled.

Technical data developed or modified for military or space applications is controlled by the International Traffic in Arms Regulations (ITAR) [3] and will likely need a license to be exported. Controlled goods and technology in the ITAR are listed in the US Munitions List [4] (USML).

The largest list of controlled goods and technology is contained in the US Export Commodity Control List (ECCL). An Index to the ECCL [5] can be a helpful guide to indicate what types of goods and technical data are controlled. Note: the index is provided as a refernce and should never be used as a final determination for what is and isn't controlled.

Samples of controlled goods and technology (list is not inclusive):

• Toxicological agents
• Nuclear materials and technology
• Lasers and Sensors
• Night vision equipment
• Arms and ammunition
• Semiconductors and microprocessors
• Telecommunications
• Missile technology
• Navigation and avionics
• Marine vessels
• GPS technology
• Weapons and Ammunition
• Countermeasure technology on controlled goods
• Endangered Species
• Body armor and protective gear
• Fingerprint and identification retrieval
• Oscilloscopes
• Gas centrifuges
• Mass Spectrometers
• High strength materials

The Office of Export Controls will assist the Duke community in determining the correct export commodity classification.  Contact Export Controls [6] for assistance.

Software is deemed to be in the public domain when the source code is published. Software that is designed for military, space, underwater, or controlled technologies will be controlled from export.

Legitimate exports of software must still be tagged with a Destination Control Statement [7].

Note on Encryption:

• Symmetric encryption software and technology with key lengths of 56-bits or higher may require a license for export.
• Asymmetric Encryption software and technology with key lengths of 512-bits or more for RSA or D-H, or 112-bit or more for Elliptic Curve, may require a license for export.