ITAR Exemptions: Canadian, AUKUS, and Compliance Requirements

ITAR exemptions allow companies registered with the Directorate of Defense Trade Controls (DDTC) to export certain defense articles, share technical data, or perform defense services without applying for an individual license. Each exemption is narrow, each has conditions written into the regulation, and each carries the same penalties as an unlicensed export if you use it wrong: civil fines above $1.27 million per violation, criminal fines up to $1 million, up to 20 years in prison, and administrative debarment from defense trade.

The exemptions worth knowing fall into a small number of categories: country-based (Canada, AUKUS), purpose-based (technical data, fundamental research, servicing, government transfers), and situation-based (dual-national employees, personal protective gear, low-value spare parts). Everything below assumes you’ve already handled the baseline requirements that apply before any exemption is available.

Baseline Requirements Before Any Exemption Applies

Registration with the DDTC under 22 CFR Part 122 is mandatory for anyone in the United States who manufactures, exports, or temporarily imports defense articles, or who provides defense services. Even a single transaction triggers it.¹ No exemption is available to an unregistered party. Registration also carries an annual fee that varies with the size of your licensing activity.²

Every exemption is subject to the country restrictions in 22 CFR 126.1. That section lists nations under U.S. arms embargoes, and exemptions generally cannot be used for any transaction touching those destinations. The carve-outs are narrow: personal protective gear under 22 CFR 123.17 and certain U.S. Government transfers are the main ones.³

Classification matters too. Items marked with an asterisk on the United States Munitions List are Significant Military Equipment (SME) and usually require a full license unless the specific exemption text explicitly reaches them.⁴

The Canadian Exemption

22 CFR 126.5 allows U.S. exporters to permanently or temporarily ship unclassified defense articles to Canada without a license when the items are destined for end-use by Canadian federal or provincial government authorities acting in an official capacity, by a Canadian-registered person, or for return to the United States.⁵

The exemption does not cover everything. Supplement No. 1 to Part 126 lists whole categories that stay license-required even for Canada, including classified defense articles, anything controlled under the Missile Technology Control Regime (MTCR), firearms and close assault weapons, stealth-related technologies, developmental systems that have not received Milestone B approval from the Department of Defense, and manufacturing know-how for many munitions categories.⁶ If your item falls into any excluded category, you need a standard license regardless of who the Canadian recipient is.

The AUKUS Trilateral Exemption

22 CFR 126.7, effective in late 2025, allows license-free exports, reexports, retransfers, and temporary imports of qualifying defense articles among the United States, the United Kingdom, and Australia. Over 700 Australian and UK entities enrolled as Authorized Users in the exemption’s first year.⁷

To use it, the U.S. company must be DDTC-registered and eligible under 22 CFR 120.16. The Australian or UK party must appear on the DDTC’s Authorized User List (AUL), maintained in the Defense Export Control and Compliance System (DECCS). Transfers must stay within the physical territory of the three countries.⁸

Supplement No. 2 to Part 126 lists technologies carved out of the exemption entirely: MTCR-annotated articles, F-22 aircraft components and related data, cluster munitions, MANPADS launcher mechanisms, and articles with anti-tamper features developed under a Department of Defense Program Protection Plan.⁹ Confirm the foreign party’s AUL status in DECCS before each transaction, because the DDTC can suspend or revoke any entity’s listing at any time.¹⁰

Technical Data and Fundamental Research

22 CFR 125.4 covers the most common technical-data situations. Data approved for public release by the relevant U.S. Government department or agency qualifies for license-free export, and what matters is the approval for unlimited distribution, not whether the data has actually been published somewhere. The same section exempts technical data shared in furtherance of a manufacturing license agreement or technical assistance agreement already approved by the State Department, and data provided under a U.S. Government contract that authorizes the export, as long as the data does not reveal design or manufacturing details of a defense article.¹¹

Universities lean heavily on the fundamental research exclusion. Under ITAR, fundamental research means basic or applied research in science and engineering where the results are ordinarily published and shared broadly with the scientific community, as opposed to proprietary research or work under specific government access restrictions. The status is fragile: it is lost if the researchers accept publication restrictions, or if the research is government-funded with specific access and dissemination controls attached. A defense sponsor that adds publication-review clauses or restricts who can see results can disqualify the entire project, and it often happens without anyone at the university noticing until an audit.

Dual and Third-Country National Employees

Companies with foreign subsidiaries frequently need to share ITAR-controlled information with employees who are not U.S. or host-country nationals. 22 CFR 126.18 permits transfers of unclassified defense articles to dual or third-country nationals who are regular employees of an authorized foreign end-user, as long as the transfer happens within the physical territory of the country where the end-user operates and falls within an existing approved license or exemption.¹²

The foreign entity must have procedures in place to prevent diversion. Two paths satisfy this: a host-nation government security clearance for the employee, or a company-run screening process combined with a signed non-disclosure agreement. The screening route requires checking employees for substantive contacts with countries on the 126.1 proscribed list. Substantive contacts include regular travel to those countries, ongoing relationships with their nationals or agents, receiving compensation from them, or maintaining a residence there. An employee with such contacts is presumed to pose a diversion risk unless the DDTC decides otherwise.¹³

Screening records must be kept for five years and produced on request. Nationality alone is not a disqualifier, but the screening obligation is real and auditable.

U.S. Government Transfers

Under 22 CFR 126.4, no license is needed when a U.S. Government department or agency exports, reexports, or temporarily imports defense articles for official use. This covers government employees acting within their official capacity and contractors working inside a government-controlled facility or under the direct oversight of a government employee who keeps the articles within the scope of the contract.¹⁴

The exemption reaches exports made by private parties at the written direction of a government agency, cooperative projects under binding international agreements, and foreign assistance or security cooperation programs authorized by law. It does not apply where a government agency merely acts as a pass-through for a private company’s transaction, and it does not override arms embargoes or UN Security Council resolutions. Shipments not carried by diplomatic pouch or government aircraft still require an Electronic Export Information filing with Customs and Border Protection.¹⁴

Personal Protective Gear

22 CFR 123.17 lets a U.S. person traveling abroad temporarily export one set of body armor (which may include a helmet) or one set of chemical agent protective gear (which may include one additional filter canister) without a license. The gear must travel with the individual as accompanied or unaccompanied baggage and cannot be mailed. The traveler must declare the items to a CBP officer on departure, present the Internal Transaction Number from the electronic filing, and physically present the gear for inspection.¹⁵

The gear must be for the traveler’s exclusive use and cannot be sold, given away, or reexported to another person. Before leaving, the traveler must declare their intention to bring it back to the United States at the end of the trip, contract, or assignment. This is one of the few exemptions available even for proscribed countries under 22 CFR 126.1.³

Low-Value Spare Parts

22 CFR 123.16 exempts exports of parts or components valued at $500 or less per transaction, but the conditions are tighter than most exporters expect. The parts must go to a previously approved end-user of the defense article, not a distributor or new customer. They must support a defense article that was previously authorized for export, and they cannot enhance the article’s capability. No more than 24 shipments per calendar year may go to the same previously authorized end-user. You cannot split a larger order into sub-$500 shipments to stay under the threshold. And the exporter must write “22 CFR 123.16(b)(2) applicable” on the invoice, bill of lading, or airway bill.¹⁶

The 24-shipment cap and the prohibition on capability enhancement are the conditions that catch companies off guard most often.

Temporary Import for Servicing

Under 22 CFR 123.4, CBP port directors can permit the temporary import of unclassified, U.S.-origin defense items without a license for up to four years, provided the items are being serviced and then returned to the country they came from. Servicing means inspection, testing, calibration, repair, overhaul, reconditioning, and one-for-one replacement of defective parts. It does not cover modifications, upgrades, or any alteration that changes the item’s basic performance.¹⁷

The importer must be eligible under 22 CFR 120.16, and the shipment cannot originate from or on behalf of a proscribed country. The applicable CBP entry form must cite 22 CFR 123.4 as the authority at the time of import. When the item is re-exported after servicing, the ultimate consignee on the electronic filing must match the original foreign party from the import documentation. If the foreign government requires documentation of U.S. Government approval as a condition of the transaction, this exemption is unavailable and a DSP-61 license is needed instead.¹⁷

Documentation on Every Shipment

Every ITAR-controlled shipment requires specific documentation whether it moves under a license or an exemption. The exporter must identify the exact regulatory citation authorizing the license-free shipment and include it on the commercial invoice or airway bill. For the spare parts exemption, that means “22 CFR 123.16(b)(2) applicable” on the shipping documents.¹⁶

22 CFR 123.9 also requires a destination control statement on the commercial invoice for all defense article shipments. It must identify the country of ultimate destination, the end-user, and the license or exemption citation, along with the mandatory statutory language prohibiting resale or retransfer without U.S. Government approval.¹⁸ Missing or incomplete destination control statements are among the most common findings in DDTC audits.

Filing Through AES

Every qualifying ITAR shipment requires an electronic filing through the Automated Export System (AES) within the Automated Commercial Environment (ACE) portal. The exporter submits Electronic Export Information (EEI) and enters the specific exemption citation in the license type field. AES then issues an Internal Transaction Number (ITN) as proof the filing was accepted.¹⁹ For the personal protective gear exemption, the traveler presents that ITN to CBP officers at departure.¹⁵

CBP officers at the port of exit monitor these filings in real time. They can pause a shipment to verify the electronic data matches the physical cargo and paperwork; a discrepancy will get the shipment detained. Providing false information in AES is a federal crime. Under 22 U.S.C. 2778(c), willful ITAR violations carry criminal fines up to $1 million per violation and up to 20 years of imprisonment.²⁰

Recordkeeping

Under 22 CFR 122.5, companies must retain all transaction records for at least five years from the expiration of the license or, for exemption-based exports, from the date of the transaction. The DDTC can prescribe a longer or shorter period in individual cases.²¹

Records should include purchase orders, shipping documents, the exemption citation used, and documentation showing the recipient’s identity and final destination. Electronic systems must reproduce records on paper with high legibility and must either prevent alteration after initial entry or log every change with who made it and when. Records must be available at all times for inspection by the DDTC, Diplomatic Security Service, Immigration and Customs Enforcement, or Customs and Border Protection, and you must provide personnel who can locate and reproduce them on demand.²¹

The Empowered Official

Every DDTC-registered company must designate an Empowered Official (EO), the internal gatekeeper for all export authorizations including exemption claims. The EO must be a U.S. person directly employed in a management or policy role, legally authorized in writing to sign license applications and approval requests, and knowledgeable about export control statutes and the criminal and civil penalties for violations.²²

The EO must have independent authority to investigate any proposed export, verify its legality and accuracy, and refuse to sign off on a transaction without retaliation. That last piece is not a technicality. If an EO is pressured into approving a questionable shipment, both the individual and the company face liability. The EO’s name goes on every approval, so choosing someone without genuine authority to say no defeats the purpose of the requirement.

Voluntary Self-Disclosure If You Get It Wrong

A company that discovers it used an exemption incorrectly, or otherwise violated ITAR, should strongly consider filing a voluntary self-disclosure (VSD). Under 22 CFR 127.12, initial notification should go to the DDTC as soon as the violation is discovered. A full written disclosure must follow within 60 calendar days, though an empowered official or senior officer can request an extension in writing if the investigation is still ongoing.²³

The disclosure must include a precise description of the violation, a thorough explanation of how and why it happened, the identities of everyone involved, the USML category and description of the items, and the corrective actions the company has taken. Supporting documents such as license applications, shipping records, and the AES Internal Transaction Number should be attached. A senior officer or empowered official must certify the disclosure is true and correct.²³

The DDTC treats voluntary disclosure as a mitigating factor when deciding penalties. What helps: whether the transaction would have been approved if properly licensed, the degree of cooperation with investigators, and whether the company has improved its compliance program to prevent recurrence. Disclosure must be made with the full knowledge and authorization of senior management, or the DDTC will not treat it as voluntary.²⁴

Penalties and Debarment

Penalties operate on two tracks. Civil penalties, imposed by the Assistant Secretary of State for Political-Military Affairs, reach $1,271,078 per violation or twice the value of the underlying transaction, whichever is greater.²⁵ Criminal penalties for willful violations run up to $1 million in fines and up to 20 years of imprisonment per violation.²⁰

Beyond fines and prison time, the DDTC can debar a person or company from all ITAR-regulated activity. Administrative debarment is typically imposed for three years, and reinstatement is not automatic; a debarred party must apply for reinstatement and receive approval before participating in any defense trade.²⁶ For a defense contractor, three years of debarment can be worse than any fine, because it severs every active contract and eliminates eligibility for new business. The DDTC can also condition the issuance or renewal of any future license on prior payment of civil penalties or completion of administrative actions.²⁵

1
eCFR. 22 CFR 122.1 – Registration: Requirements, Exemptions, and Purpose
2
U.S. Department of State – DECCS. DDTC Registration Fees
3
eCFR. 22 CFR 126.1 – Prohibited Exports, Imports, and Sales to or From Certain Countries
4
eCFR. 22 CFR 120.36 – Significant Military Equipment
5
eCFR. 22 CFR 126.5 – Canadian Exemptions
6
eCFR. Supplement No. 1 to Part 126
7
Federal Register. International Traffic in Arms Regulations: Exemption for Defense Trade and Cooperation Among Australia, the United Kingdom, and the United States
8
eCFR. 22 CFR 126.7 – Exemptions for Defense Trade and Cooperation Among Australia, the United Kingdom, and the United States
9
eCFR. Supplement No. 2 to Part 126 – Excluded Technology List
10
U.S. Department of State – DDTC. ITAR 126.7 Exemption for Australia and the UK
11
eCFR. 22 CFR 125.4 – Exemptions of General Applicability
12
eCFR. 22 CFR 126.18 – Exemptions Regarding Intra-Company, Intra-Organization, and Intra-Governmental Transfers to Employees Who Are Dual Nationals or Third-Country Nationals
13
eCFR. 22 CFR 126.18 – Exemptions Regarding Intra-Company Transfers to Dual Nationals or Third-Country Nationals
14
eCFR. 22 CFR 126.4 – Transfers by or for the United States Government
15
eCFR. 22 CFR 123.17 – Exemption for Personal Protective Gear
16
eCFR. 22 CFR 123.16 – Exemptions of General Applicability
17
eCFR. 22 CFR 123.4 – Temporary Import License Exemptions
18
eCFR. 22 CFR 123.9 – Country of Ultimate Destination and Approval of Reexports or Retransfers
19
U.S. Census Bureau. Filing in AESDirect: How Do You Find Your Internal Transaction Number?
20
Office of the Law Revision Counsel. 22 USC 2778 – Control of Arms Exports and Imports
21
eCFR. 22 CFR 122.5 – Maintenance of Records by Registrants
22
eCFR. 22 CFR 120.67 – Empowered Official
23
eCFR. 22 CFR 127.12 – Voluntary Disclosures
24
eCFR. 22 CFR Part 127 – Violations and Penalties
25
eCFR. 22 CFR 127.10 – Civil Penalty
26
eCFR. 22 CFR 127.7 – Debarment