International Traffic in Arms Regulations (ITAR) Criminal Violations - 22 U.S.C. § 2778

The International Traffic in Arms Regulations (ITAR) govern the export, transfer, and disclosure of defense articles, defense services, and technical data under the Arms Export Control Act, 22 U.S.C. § 2778.

While many export issues are resolved through administrative enforcement, federal prosecutors may pursue criminal charges when they believe a person or company knowingly violated export control laws involving military technology, weapons systems, or controlled defense information.

For aerospace manufacturers, defense contractors, engineers, software developers, executives, and government subcontractors, an alleged ITAR violation often involves far more than shipping military equipment overseas. Prosecutors may claim that controlled technical data was:

Improperly shared with foreign nationals,
Uploaded to unauthorized cloud servers,
Discussed during international meetings, or
Transferred through email without the required approval from the U.S. Department of State.

Depending on the allegations, an investigation may involve the Federal Bureau of Investigation (FBI), Homeland Security Investigations (HSI), the Department of Justice, the Department of State's Directorate of Defense Trade Controls (DDTC), and other federal agencies.

Federal prosecutors often devote significant resources to cases involving export controls because they may implicate national security concerns.

As a result, allegations involving ITAR frequently expand beyond the original conduct under review, particularly if investigators begin examining communications, internal compliance records, licensing decisions, employee access logs, or international business relationships.

What is the Arms Export Control Act?

The Arms Export Control Act authorizes the federal government to regulate the export and temporary import of defense articles and defense services. The law establishes detailed requirements governing:

Defense articles listed on the United States Munitions List
Defense-related technical data
Defense services provided to foreign persons
Manufacturing licenses
Export licenses
Temporary imports and exports
Brokering activities involving defense items

Unlike many commercial export regulations, ITAR extends well beyond physical shipments.

A transfer of controlled technical information to a foreign national inside the United States may qualify as a "deemed export" under federal regulations.

Similarly, allowing unauthorized access to controlled engineering drawings, software source code, manufacturing specifications, or weapons design documents may trigger federal scrutiny even if no physical product ever leaves the country.

What Conduct Can Result in Criminal ITAR Charges?

Every investigation depends upon its own facts, but prosecutors generally attempt to prove that an individual knowingly exported, transferred, furnished, or disclosed controlled defense articles or technical data without the authorization required under federal law. Examples include:

Exporting controlled military equipment without an approved license
Providing restricted technical drawings to foreign engineers
Sharing controlled software with overseas affiliates
Transferring weapons design information through encrypted messaging platforms
Allowing unauthorized foreign nationals to access defense databases
Sending controlled manufacturing specifications by email
Performing defense services for foreign governments without authorization
Concealing exports through intermediary companies or shell entities
Misrepresenting export classifications during licensing applications

What Do Federal Prosecutors Need to Prove in ITAR Cases?

The government bears the burden of proving each required element beyond a reasonable doubt. Although the specific allegations vary, prosecutors generally seek to establish that:

The item, service, or technical data fell within ITAR's scope
The defendant knew the relevant conduct occurred
A required authorization or license was absent
The transfer violated federal export control laws
The defendant acted willfully when required under the applicable criminal provisions

Each element may involve extensive factual disputes. For example, engineers frequently work with information containing both controlled and non-controlled material.

Software platforms may incorporate commercial and defense-related components. International corporations may employ dual citizens, lawful permanent residents, and foreign nationals who possess different authorization levels under export regulations.

These distinctions often require careful analysis of technical evidence rather than assumptions based solely upon email traffic or document transfers.

Can Technical Data Become the Focus Even Without Exporting Physical Equipment?

Yes. One of the most misunderstood aspects of ITAR enforcement is that criminal investigations frequently concern information rather than hardware.

Technical data may include engineering drawings, manufacturing processes, blueprints, specifications, computer software directly related to defense articles, testing procedures, production techniques, or other information designated under ITAR.

A company may never ship a military component overseas, yet investigators may still examine whether employees disclosed protected technical data during:

International video conferences
Software collaboration platforms
Shared cloud storage
Foreign consulting projects
Overseas research partnerships
Remote engineering support
Email exchanges involving controlled attachments

Whether a disclosure actually violated ITAR depends upon numerous regulatory and factual issues, including licensing requirements, exemptions, the nature of the information involved, and the recipient's legal status under federal export regulations.

For that reason, ITAR investigations often require attorneys, technical experts, and compliance professionals to analyze thousands of pages of engineering documentation alongside export licensing records before reaching reliable conclusions.

Related Federal Laws

Because ITAR violations directly threaten national security, federal prosecutors rarely charge a target with a single standalone count. Instead, they routinely employ "charge stacking"—splitting a single unapproved data transfer or shipment of defense hardware into a web of overlapping criminal offenses.

By stacking multiple related federal statutes, the Department of Justice heavily inflates the potential prison time and asset forfeiture visibility under the Federal Sentencing Guidelines.

This compounding legal pressure is deliberately designed to coerce corporate defendants and individuals into accepting a plea bargain rather than risking a trial. Below are 5 related federal laws:

Smuggling Goods from the United States — 18 U.S.C. § 554: The primary criminal statute used to prosecute the physical export of goods contrary to any U.S. law. While ITAR specifically penalizes licensing failures, Section 554 makes the actual act of sending or attempting to send restricted defense articles out of the country a separate, severe felony punishable by up to 10 years in federal prison.
The Export Control Reform Act (ECRA) — 50 U.S.C. §§ 4801 – 4852: The statutory framework that authorizes the Export Administration Regulations (EAR). ECRA governs "dual-use" items—technologies designed for commercial use that also have potential military applications. Criminal violations under ECRA carry penalties that mirror those under ITAR, including up to 20 years in prison per count.
The International Emergency Economic Powers Act (IEEPA) — 50 U.S.C. §§ 1701 – 1707: Grants the President authority to regulate or block foreign commerce in response to national emergencies. IEEPA forms the legal basis for the trade sanctions and embargoes enforced by the Office of Foreign Assets Control (OFAC). Exporting ITAR-controlled technology to a sanctioned nation or blocked entity routinely triggers simultaneous IEEPA criminal charges, carrying up to 20 years in prison.
Conspiracy to Defraud the United States — 18 U.S.C. § 371: Extensively deployed by federal prosecutors when two or more corporate actors, foreign suppliers, or engineers collaborate to bypass export restrictions. A conspiracy charge allows prosecutors to hold individuals criminally liable for the acts of their co-conspirators, even if a specific individual did not personally send the emails or upload the technical data.
Conspiracy to Commit Wire Fraud — 18 U.S.C. § 1349: Frequently stacked alongside export control violations. If electronic communications, international bank transfers, or cloud networks are utilized to misclassify defense hardware or hide disclosures of technical data from compliance systems, prosecutors routinely charge wire fraud due to its sweeping jurisdictional reach and severe 20-year maximum penalty.

Frequently Asked Questions (FAQs)

What is the penalty for a criminal ITAR violation under 22 U.S.C. § 2778?

A willful violation of the Arms Export Control Act and ITAR is a severe federal felony. Individuals face up to 20 years in federal prison per violation, along with criminal fines of up to $1,000,000. For corporations, a conviction triggers automatic statutory debarment, which immediately revokes the entity's authority to export defense articles and terminates all eligibility for federal government contracts.

Can you violate ITAR if no physical product leaves the United States?

Yes. ITAR strictly regulates "deemed exports," which occur when controlled technical data, blueprints, source code, or engineering drawings are shared with a foreign national inside the United States. This includes giving foreign employees access to secure company servers, discussing restricted technology during domestic video conferences, or sending emails with controlled attachments to foreign nationals within U.S. borders.

What is the difference between ITAR and EAR regulations?

The key difference lies in the nature of the items being regulated. ITAR (International Traffic in Arms Regulations) specifically governs defense articles, services, and military technologies listed on the United States Munitions List (USML). EAR (Export Administration Regulations) governs commercial and "dual-use" items that have both commercial and military applications, which are listed on the Commerce Control List (CCL).

What constitutes "technical data" under ITAR guidelines?

Under ITAR, technical data includes any information required for the design, development, production, manufacture, assembly, operation, repair, testing, maintenance, or modification of defense articles. This covers blueprints, engineering drawings, photographs, software source code, instruction manuals, and documentation, but does not include basic marketing information or general scientific principles taught in universities.

Can corporate executives be held personally liable for an employee's ITAR violation?

Yes. Federal prosecutors frequently target corporate officers, directors, and compliance personnel if they knowingly authorized, directed, or permitted actions that led to an illegal export. If a senior executive approves an international server migration or structural supply chain change while ignoring explicit warnings from compliance staff that export licenses are required, they can face personal criminal charges under 22 U.S.C. § 2778.

How do federal prosecutors prove "willfulness" in a criminal ITAR case?

To secure a criminal conviction, the government must prove beyond a reasonable doubt that the defendant acted willfully—meaning they knew their conduct was unlawful and chose to violate the law anyway. Prosecutors establish this by executing search warrants to review internal email threads, access logs, and Slack messages. If company records show that staff explicitly questioned whether an export license was missing before sending a file, prosecutors will use that paper trail to prove criminal intent.

Hypothetical Case Study: International Engineering Collaboration Leads to Federal ITAR Investigation

A vice president of engineering at a multinational aerospace manufacturer oversees the development of guidance components incorporated into military aircraft sold to the U.S. government.

To accelerate product testing, the company creates a secure collaboration portal that allows engineering teams in the United States, Canada, the United Kingdom, and Singapore to exchange design updates.

Although the company maintains an export compliance department, prosecutors later alleged that certain technical drawings uploaded to the portal were controlled under the United States Munitions List and should never have been accessible to engineers located in Singapore.

Federal investigators executed search warrants at the company's offices, seized servers, and interviewed numerous employees.

Email traffic suggests that several engineers questioned whether export licenses were required, while others believed the information qualified for a regulatory exemption.

Investigators also discovered that a senior executive approved a software integration project that automatically synchronized engineering files across multiple international servers.

Prosecutors argue that the executive knowingly permitted unauthorized exports of controlled technical data and are pursuing criminal charges under 22 U.S.C. § 2778.

Our team at Eisner Gorin LLP conducts an independent review with export control consultants, digital forensic professionals, and engineering specialists. The review determined that prosecutors grouped thousands of documents without distinguishing between controlled technical data and commercially available engineering information.

Metadata further shows that many of the files identified in the indictment were never opened or downloaded by foreign personnel.

Additional evidence demonstrates that access permissions changed automatically during a software migration, creating logs that overstated who actually viewed protected documents.

Our attorneys also identified communications showing that company personnel repeatedly sought guidance from compliance professionals before implementing the collaboration platform.

While those discussions did not eliminate every regulatory issue, they substantially undermined the government's assertion that the executive deliberately violated export control laws.

After extensive negotiations and continued factual presentations, prosecutors narrowed their allegations and abandoned the most serious criminal theories. The matter concludes without the executive being convicted of the principal felony charges initially announced during the investigation.

What Penalties May Follow a Conviction Under 22 U.S.C. § 2778?

A willful violation of the Arms Export Control Act (AECA) and ITAR regulations is a serious federal felony. Because federal authorities view export control breaches through a national security lens, the statutory penalties are exceptionally harsh.

Statutory Penalties and Corporate Exposure:

Federal Imprisonment: Up to 20 years in federal prison per individual violation.
Criminal Fines: Statutory fines up to $1,000,000 per violation for both individuals and corporate entities.
Statutory Administrative Debarment: A conviction triggers an automatic, mandatory administrative debarment by the Department of State, completely revoking the entity's or individual's authority to export defense articles or services and effectively terminating all government contract eligibility.
Civil Penalties: The Directorate of Defense Trade Controls (DDTC) can independently impose compounding civil monetary penalties exceeding $1,200,000 per violation (or twice the value of the underlying transaction), enforced in addition to or in lieu of criminal prosecution.

What Defenses May Apply in an ITAR Criminal Case?

Every federal prosecution presents unique facts, and no single defense applies to every investigation. But several issues frequently become central to litigation involving alleged export control violations. Potential defenses may include:

Challenging whether the item or information actually fell within ITAR jurisdiction
Disputing whether the material qualified as controlled technical data
Demonstrating that required licenses or authorizations existed
Showing that regulatory exemptions applied
Contesting whether the government can establish willfulness
Questioning digital forensic evidence concerning file transfers or downloads
Challenging search warrants or electronic evidence collection
Demonstrating that investigators misunderstood engineering terminology or manufacturing processes
Establishing that another regulatory framework, rather than ITAR, governed the technology

Many prosecutions involve highly technical evidence that jurors may have little familiarity with before trial.

Engineering experts, export compliance professionals, software specialists, and digital forensic analysts frequently play substantial roles in explaining how information moved through corporate systems and whether those transfers actually violated federal law.

Eisner Gorin LLP can help you. Schedule your consultation by calling (818) 781-1570 or by using the contact form.

ITAR Criminal Violations