ITAR vs EAR: Which Set of Export Controls Actually Governs Your Product

Use export control basics and license determination to connect item classification with destination, end-user and end-use checks.

Check whether the item is subject to the EAR under 15 CFR 734.3(a) and (b) before looking up an ECCN. Absence from the USML is not sufficient. Review the item's U.S. nexus and applicable exclusions, including other agencies' exclusive controls and qualifying published information or software, subject to the regulation's exceptions. Only an item subject to the EAR is classified under a CCL ECCN or EAR99; EAR99 does not mean automatically license-free.

Complete ECCN classification under the EAR before looking up destination-based license requirements.

What happens if I assume EAR when the item is really ITAR?

You expose the company to AECA penalties of up to $1,271,078 per violation and potential criminal liability, because you skipped DDTC registration and licensing. Getting the ITAR vs EAR call wrong is a jurisdiction error, not a paperwork error, and it is the most expensive mistake in export controls.

ITAR vs EAR: the jurisdiction question comes before classification

Check whether the item is subject to the EAR under 15 CFR 734.3(a) and (b) before looking up an ECCN. Absence from the USML is not sufficient. Review the item's U.S. nexus and applicable exclusions, including other agencies' exclusive controls and qualifying published information or software, subject to the regulation's exceptions. Only an item subject to the EAR is classified under a CCL ECCN or EAR99; EAR99 does not mean automatically license-free.

Who regulates what: DDTC vs BIS, USML vs CCL

ITAR and EAR are administered by different agencies, in different departments, against different lists, under different statutes. Mixing them up is not a vocabulary slip; it routes your filing to the wrong agency.

The USML's 21 categories run from firearms (Category I) and ammunition (Category III) through launch vehicles and missiles (Category IV), aircraft (Category VIII), military electronics (Category XI), and directed-energy weapons (Category XVIII). The CCL's 10 categories are organized differently, by technology area: nuclear materials (Category 0), materials and chemicals (Category 1), electronics (Category 3), computers (Category 4), telecommunications and information security (Category 5), and so on, each subdivided into five product groups (A through E).

One structural feature trips up teams constantly: the 600-series ECCNs. These are EAR-controlled items (so, Commerce jurisdiction) that were formerly on the USML and moved to the CCL under Export Control Reform. An item like ECCN 9A610 (military aircraft and related items) is military in character but lives on the CCL, not the USML. The 600 series is the clearest proof that "military-looking" does not mean "ITAR." You still have to run the order of review.

Use the guide to when to hire an ITAR consultant when jurisdiction, technical-data controls or program design exceed the team's in-house expertise.

The DDTC and BIS order of review: a decision tree

Here is the order of review as a working sequence. Run it in this order every time.

1. Is the item subject to the exclusive jurisdiction of another agency entirely? Nuclear material and equipment (NRC, DOE), certain Select Agents (CDC/USDA), and items controlled by OFAC sanctions programs are carved out before you even reach the ITAR-vs-EAR fork. If yes, stop and route to that agency.

2. Is the item described on the U.S. Munitions List? Read the 21 USML categories against the article's form, fit, function, performance capability, and design history. If the item is "specifically designed, developed, configured, adapted, or modified for a military application" and is enumerated on the USML, it is an ITAR-controlled defense article. Stop here. It is ITAR, and per 15 CFR 734.3(b)(1) the EAR does not apply.

3. Check whether the item is subject to the EAR under 15 CFR 734.3(a) and (b) before looking up an ECCN. Absence from the USML is not sufficient. Review the item's U.S. nexus and applicable exclusions, including other agencies' exclusive controls and qualifying published information or software, subject to the regulation's exceptions. Only an item subject to the EAR is classified under a CCL ECCN or EAR99; EAR99 does not mean automatically license-free.

4. If the item is subject to the EAR but not described in any ECCN, it is EAR99. EAR99 is the residual classification within the residual regime. Most EAR99 items ship No License Required, but that status evaporates if the end use, end user, or destination is prohibited. (We cover this layer in depth in EAR99 explained; this article stops at the jurisdiction fork.)

5. Cross-reference the destination, end user, and end use. Even a correct EAR99 or low-control ECCN classification does not clear a shipment to an embargoed country, a denied party, or a prohibited end use. Screen against the OFAC SDN List, the BIS Entity List, the Denied Persons List, and the Unverified List.

When the jurisdiction is genuinely in doubt, you do not guess, you ask the government. If you cannot confidently place an item, submit a Commodity Jurisdiction (CJ) request to DDTC on Form DS-4076 under ITAR 120.12. DDTC consults State, Defense, and Commerce and provides a preliminary response within 10 working days, with the full determination normally taking about 60 days. For an EAR-side classification opinion, request a Commodity Classification (CCATS) from BIS through SNAP-R. As DDTC's own guidance puts it, jurisdiction determinations "will be made on a case-by-case basis based on the commodity's form, fit, function, performance capability, and design history."

Registration, licensing, and penalties: why the ITAR side costs more to be wrong

The two regimes diverge sharply once jurisdiction is settled, and the divergence is not cosmetic.

Registration. ITAR requires that every U.S. manufacturer, exporter, and broker of defense articles or defense services register with DDTC annually, whether or not they ever export, under 22 CFR Part 122. The base Tier 1 registration fee is $3,000 per year as of the December 2024 DDTC final rule, the first fee increase in fifteen years, raising the Tier 1 fee 33.1 percent. The EAR has no registration requirement at all. This is a frequent surprise: a company can be fully EAR-compliant with zero DDTC footprint, but the moment one product line is ITAR, annual registration is mandatory and is a precondition to applying for any license.

Licensing. Under ITAR, exports of defense articles generally require a DDTC license (for example, a DSP-5 for permanent export of hardware) processed through DDTC's DECCS portal, with relatively few exemptions. Under the EAR, licensing is risk-based: you cross-reference the ECCN's reasons for control against the Commerce Country Chart, and a large share of items, especially EAR99 and low-control ECCNs, ship No License Required to most destinations, or qualify for a license exception (TMP, STA, ENC, GOV, TSR, APR).

Penalties. Both regimes carry serious civil and criminal exposure, but the ITAR civil ceiling is roughly 3.4 times higher per violation:

• ITAR / AECA: civil penalties up to $1,271,078 per violation (the 2025 inflation-adjusted figure) or twice the value of the transaction, whichever is greater, plus criminal fines up to $1,000,000 per violation and up to 20 years imprisonment, and discretionary debarment from future exports. (See 22 CFR Part 127.)
• EAR / ECRA: civil penalties up to $374,474 per violation (effective January 15, 2025) or twice the value of the transaction, whichever is greater, with the same criminal exposure of up to $1,000,000 and 20 years per violation. (See 15 CFR Part 764.)

For an exporter weighing whether a new product line is worth the compliance overhead, the asymmetry is the planning insight: an EAR99 commercial product carries near-zero standing cost (no registration, often NLR), while a single ITAR-controlled SKU pulls the whole entity into mandatory annual registration and a far steeper penalty schedule. That is why the jurisdiction question is a business decision, not just a compliance one.

Where GingerControl fits after jurisdiction is established

The GingerLite web tool reads a datasheet and writes an ECCN or EAR99 research report for export counsel to check. ITAR, USML, restricted-party screening, license-exception analysis and an export-control API are outside its confirmed scope.

The table below compares how the jurisdiction question gets answered across three approaches.

| Typical ECCN-lookup tool | No, assumes EAR and starts at the CCL | Varies, often user self-selects | Sometimes, often a separate step | Rarely, returns a code with little rationale | No | | Manual self-classification | Depends on reviewer discipline | Depends on reviewer expertise | Depends on reviewer discipline | Only if the reviewer documents it by hand | Yes, the exporter and their counsel decide and file |

Frequently asked questions

How do I know whether ITAR or EAR applies to my product?

Check whether the item is subject to the EAR under 15 CFR 734.3(a) and (b) before looking up an ECCN. Absence from the USML is not sufficient. Review the item's U.S. nexus and applicable exclusions, including other agencies' exclusive controls and qualifying published information or software, subject to the regulation's exceptions. Only an item subject to the EAR is classified under a CCL ECCN or EAR99; EAR99 does not mean automatically license-free.

What is the difference between the USML and the CCL?

The U.S. Munitions List (USML) is ITAR's list of 21 categories of defense articles administered by DDTC; the Commerce Control List (CCL) is the EAR's list of 10 technology-based categories of commercial and dual-use items administered by BIS, with each item assigned an ECCN or treated as EAR99 if unlisted. They are not parallel, the USML takes precedence.

Who regulates ITAR and who regulates EAR?

ITAR is administered by the Directorate of Defense Trade Controls (DDTC) within the U.S. Department of State, under the Arms Export Control Act; the EAR is administered by the Bureau of Industry and Security (BIS) within the U.S. Department of Commerce, under the Export Control Reform Act of 2018. Routing a filing to the wrong agency is a direct consequence of getting jurisdiction wrong.

Do I have to register with the government if my products are EAR, not ITAR?

No. The EAR has no registration requirement, so a company whose products are all EAR-controlled (including EAR99) can be fully compliant with no registration footprint. ITAR is the opposite: every U.S. manufacturer, exporter, and broker of defense articles must register annually with DDTC, with a Tier 1 fee of $3,000 per year under 22 CFR 122.3.

What are the penalties for getting ITAR vs EAR wrong?

A jurisdiction error that leads to an unlicensed export of a defense article exposes the company to AECA civil penalties up to $1,271,078 per violation (2025) or twice the transaction value, plus criminal fines up to $1,000,000 and up to 20 years imprisonment. EAR violations under ECRA carry civil penalties up to $374,474 per violation (2025) with the same criminal ceiling.

What is a Commodity Jurisdiction request, and when should I file one?

A Commodity Jurisdiction (CJ) request, submitted to DDTC on Form DS-4076 under ITAR 120.12, asks the government to determine whether an item is a USML defense article (ITAR) or subject to the EAR. File one when jurisdiction is genuinely in doubt; DDTC consults State, Defense, and Commerce and issues a preliminary response within 10 working days, with the determination normally taking about 60 days.

Does GingerControl decide my product's jurisdiction for me?

Establish jurisdiction before choosing an ECCN. ITAR applies to defense articles controlled under the USML; the EAR covers items subject to Commerce jurisdiction, including CCL items and EAR99. Review other agencies' exclusive controls and the USML first, then the EAR scope and CCL. When the answer is uncertain, consult export counsel or request a DDTC commodity-jurisdiction determination. GingerControl's Export Control Classifier covers the EAR and CCL only: one ECCN or EAR99 with a research report. It does not screen the USML or decide ITAR jurisdiction.

Putting the order of review into your screening workflow

Check whether the item is subject to the EAR under 15 CFR 734.3(a) and (b) before looking up an ECCN. Absence from the USML is not sufficient. Review the item's U.S. nexus and applicable exclusions, including other agencies' exclusive controls and qualifying published information or software, subject to the regulation's exceptions. Only an item subject to the EAR is classified under a CCL ECCN or EAR99; EAR99 does not mean automatically license-free.

References

1. U.S. Code of Federal Regulations, Title 15, Items Subject to the EAR
   Data cited: 15 CFR 734.3(b)(1), items exclusively controlled by ITAR/USML and other agencies are not subject to the EAR (the EAR as residual regime)
   Source: 15 CFR 734.3 (Cornell Legal Information Institute)
2. U.S. Department of State, Directorate of Defense Trade Controls, International Traffic in Arms Regulations
   Data cited: ITAR scope (22 CFR Parts 120 to 130), USML, defense articles and services, commodity jurisdiction under 22 CFR 120.12, registration under Part 122, penalties under Part 127
   Source: ITAR, 22 CFR Subchapter M (eCFR)
3. U.S. Department of Commerce, Bureau of Industry and Security, Export Administration Regulations
   Data cited: EAR scope (15 CFR Parts 730 to 774), CCL 10 categories, ECCN classification, "specially designed" test (Part 772), penalties (Part 764), Commerce Country Chart and licensing
   Source: BIS Licensing and Classification guidance
4. Federal Register, International Traffic in Arms Regulations: Registration Fees (final rule)
   Data cited: Tier 1 DDTC registration fee of $3,000 per year, first increase in fifteen years (33.1 percent), effective under the December 10, 2024 final rule, 22 CFR 122.3
   Source: Federal Register, 89 FR (Dec 10, 2024), DDTC Registration Fees
   Published: December 10, 2024
5. U.S. Code of Federal Regulations, Title 22, Commodity Jurisdiction Determination Requests
   Data cited: CJ procedure, Form DS-4076, case-by-case determination on form, fit, function, performance capability, and design history; 10-working-day preliminary response and approximately 60-day determination
   Source: 22 CFR 120.12 (eCFR)
6. Export Compliance Training Institute / Shipping Solutions, 600-series ECCNs and the USML-to-CCL transition
   Data cited: 600-series ECCNs as formerly-USML defense items now on the CCL (e.g., 9A610 military aircraft), illustrating that military-character items can be EAR-controlled
   Source: Export Compliance: 600 Series ECCNs Explained (Shipping Solutions)