ITAR Violations Defense Lawyers

The range of actions that could lead to non-compliance with ITAR is impossible to list comprehensively, especially due to the changing nature of ITAR and export controls. However, several issues come up frequently in ITAR cases and are good to be aware of as a means of prevention.

Intentional Non-Compliance

In these cases, a company knows it is violating ITAR and chooses to proceed with an action anyway. They may even receive additional compensation or benefits for doing so. These cases are at the highest risk of both criminal and civil penalties, usually receiving the harshest possible consequences, including both fines and imprisonment. If any employee becomes aware of an ITAR violation and does not properly communicate through appropriate channels, they can be considered willfully violating ITAR and punished to the full extent of the law.

Registration

Any manufacturer of firearms, ammunition, or other defense services is required to register with the U.S. Department of State, Directorate of Defense Trade Controls (DDTC)  to produce these heavily controlled items. If a company fails to register with the appropriate agency, this can lead to export violations.

Licensure

Within the defense industry, a number of compliance measures exist to prevent unauthorized exports in the interest of national security. Before exporting defense services and technical data to a foreign entity, a company must comply with strict ITAR programs and gain prior approval. If this is not done properly, it can lead to a violation.

It is important to note here that exporting does not always require the physical shipment of a defense item, service, or piece of data. Even discussing these items with someone in a foreign country can be considered a violation under these terms.

Accidents or Oversights

Oftentimes, ITAR is violated by someone within a company completely unknowingly. The breadth and complexity of the law make it easy for some items to fall through the cracks, especially in large organizations. Someone simply sending an email without realizing a recipient is not a citizen could cause issues.

An accidental violation is still a violation, but it is not the end of the story. ITAR’s voluntary disclosure process, explained below, can significantly reduce civil penalties when a company finds and reports a problem before the government does.

Omissions or Misrepresentations

Some companies or individuals simply get confused about specific aspects of ITAR and what it covers. When an exporter makes a factual omission of information, licensing, or reporting, this could lead to criminal and civil penalties. If this is done in error, it is critical to report that error as soon as possible. ITAR relies on honesty and accuracy, so full disclosure will go a long way.

Who Investigates ITAR Violations?

ITAR enforcement involves several agencies, and which one contacts you often signals how serious the government considers the matter. A letter from the State Department usually means a civil inquiry. A visit from federal agents usually means a criminal investigation is already underway.

• Directorate of Defense Trade Controls (DDTC): The State Department office that administers ITAR. Its compliance office handles registration, licensing violations, voluntary disclosures, and civil penalties, and it can refer cases to the Department of Justice.
• Homeland Security Investigations (HSI): A lead agency for criminal export investigations. HSI agents handle undercover operations, border seizures, and search warrants in arms export cases.
• Federal Bureau of Investigation (FBI): Typically involved when a case touches foreign intelligence, technology transfer to China or other strategic competitors, or counterintelligence concerns.
• Defense Criminal Investigative Service (DCIS): The Department of Defense’s criminal investigators, involved when the technology came from a defense contract or a military program.
• U.S. Customs and Border Protection (CBP): Detains and seizes shipments at ports and airports, which is often the first sign a company is under scrutiny.

Criminal export prosecutions are brought by U.S. Attorney’s Offices in coordination with the Justice Department’s National Security Division.

How ITAR Investigations Usually Begin

Most ITAR cases start in one of a few ways:

• A directed disclosure. DDTC learns of a possible violation and instructs the company to investigate and report back, usually within a set deadline.
• A customs seizure. CBP stops a shipment that lacks a license or has suspicious paperwork, and the case is referred for investigation.
• A whistleblower. A current or former employee reports concerns internally, to DDTC, or directly to federal agents.
• A competitor or customer tip. Rivals and foreign buyers sometimes report suspected violations, particularly in competitive defense markets.
• Another investigation. Export violations frequently surface during audits, unrelated fraud cases, or a review of a foreign buyer’s procurement network.

If agents have already contacted you, or you received a federal target letter, it helps to understand whether you are a subject or a target before you say anything to investigators.

 

ITAR Violation Penalties

A willful ITAR violation is a federal felony punishable by up to 20 years in prison and a $1 million fine for each violation. Even when prosecutors decline to bring charges, the State Department can impose civil fines of more than $1.27 million per violation and bar a company or individual from exporting defense articles at all. Because each unauthorized shipment, email, or technical data transfer can count as a separate violation, total exposure often climbs far higher than any single penalty suggests.

Type of Penalty	Maximum Exposure	Who Imposes It
Criminal imprisonment	Up to 20 years per violation	Federal court, after DOJ prosecution
Criminal fine	Up to $1,000,000 per violation	Federal court, after DOJ prosecution
Civil fine	$1,271,078 or twice the value of the transaction, whichever is greater, per violation	State Department (DDTC)
Debarment	Loss of the right to participate in any ITAR-controlled export	State Department (DDTC)

Criminal Penalties Under 22 U.S.C. § 2778

Criminal charges under the Arms Export Control Act require proof that the violation was willful, meaning the government must show the defendant knew the conduct was unlawful. Prosecutors do not, however, have to prove the defendant knew a specific item appeared on the U.S. Munitions List. That distinction matters, because many defense strategies turn on what an engineer, executive, or sales manager actually understood about export licensing requirements at the time of the transfer.

Both companies and individual employees can be charged. Officers and managers who directed, approved, or knowingly ignored an unlicensed export face personal exposure to prison time, not just their employer.

Civil Penalties and Consent Agreements

Civil enforcement does not require proof of intent. A company can face civil penalties for a violation caused by a clerical mistake, a misclassified product, or an employee who shared controlled technical data with a foreign national without realizing it. Many of the most common ITAR violations fall into this category.

Most civil cases end in a consent agreement with the Directorate of Defense Trade Controls. These agreements often combine a monetary penalty with years of required compliance spending, an outside special compliance officer, and independent audits. DDTC weighs several mitigating factors when setting the penalty, and a timely voluntary disclosure under 22 C.F.R. § 127.12 is among the most significant.

Debarment and Loss of Export Privileges

A criminal conviction under the Arms Export Control Act triggers statutory debarment, which prohibits the convicted person or company from participating directly or indirectly in ITAR-controlled exports. DDTC can also impose administrative debarment in civil cases. For a defense contractor, manufacturer, or engineering firm whose business depends on export licenses, debarment can be more damaging than the fine itself.

Collateral Consequences

An ITAR investigation can also lead to:

• Suspension or debarment from federal government contracting
• Revocation of security clearances for executives and employees
• Loss of existing export licenses and denial of pending applications
• Public announcement of the penalty, which can damage customer and partner relationships
• Immigration consequences for non-citizen employees convicted of export offenses

Charges That Often Accompany ITAR Counts

Prosecutors rarely charge an ITAR violation on its own. Indictments commonly add conspiracy under 18 U.S.C. § 371, smuggling under 18 U.S.C. § 554, and false statements under 18 U.S.C. § 1001. When a transfer involves a sanctioned country, prosecutors may also add charges under the International Emergency Economic Powers Act, which carries its own 20-year maximum. Some cases also overlap with other federal munitions offenses. If you have received a federal target letter or been contacted by HSI, the FBI, or DDTC, the time to involve defense counsel is before you respond.

Voluntary Disclosure Under 22 C.F.R. § 127.12

When a company discovers a possible ITAR violation on its own, a voluntary disclosure to DDTC is often the most effective way to limit the damage. DDTC treats a properly made disclosure as a significant mitigating factor when deciding whether to impose a civil penalty and how large it should be.

How the Disclosure Process Works

The regulation calls for an initial notification to DDTC immediately after a violation is discovered. That notice does not need every detail. If it is incomplete, the company has 60 calendar days to conduct a full internal review and submit a complete disclosure. An empowered official or senior officer can request more time in writing, but a missed deadline can cost the company the mitigation credit entirely.

A full disclosure generally describes:

• The nature and extent of each violation and how it happened
• The items, services, or technical data involved and their U.S. Munitions List categories
• The people and foreign parties involved
• Any licenses, registrations, or agreements that were relevant
• The corrective actions taken to stop the violation and prevent it from recurring

Risks to Weigh Before Disclosing

A disclosure counts as voluntary only if it is made before the government learns of the violation from another source, and only with the knowledge and authorization of senior management. Disclosure is not immunity. DDTC can refer matters to the Department of Justice, and the facts in a disclosure can become evidence. Whether, when, and how to disclose is a strategic decision that should be made with defense counsel, because the wording of an initial notification can shape a company’s civil and criminal exposure for years.

Companies that also face potential criminal exposure may be able to self-report to the Justice Department’s National Security Division, which offers more favorable treatment to organizations that disclose, cooperate fully, and fix the underlying problem.

Going forward, a written compliance program that covers registration, product classification, restricted-party screening, and controls on who can access technical data is the best protection against future violations, and it is one of the factors DDTC weighs when setting a penalty.

How We Defend ITAR Cases

ITAR cases are technical, and the government’s theory often depends on regulatory judgments that can be challenged. Our defense typically focuses on four areas.

Challenging Willfulness

A criminal conviction requires proof that the defendant knew the conduct was unlawful. Many people charged with ITAR violations relied on a freight forwarder, a colleague’s classification, a supplier’s paperwork, or advice from compliance staff. Evidence of good-faith reliance, confusing regulations, or an honest misunderstanding can defeat the intent element even when an unlicensed export occurred.

Disputing Whether the Item Is ITAR-Controlled

The government must prove the item, service, or data was actually on the U.S. Munitions List at the time of the export. Export Control Reform moved thousands of items from ITAR to the Commerce Department’s less restrictive controls, and classification depends on detailed technical criteria. A commodity jurisdiction determination, independent engineering analysis, or expert testimony can show an item was never ITAR-controlled at all.

Attacking the Technical Data Theory

Many ITAR prosecutions involve information rather than hardware: drawings, emails, specifications, or conversations. Not all technical information is controlled. Information that is already in the public domain, general scientific and engineering principles, basic marketing material, and certain university research fall outside ITAR’s definition of technical data. We also examine whether the recipient was actually a foreign person and whether a release really occurred.

Negotiating a Civil Resolution Instead of Criminal Charges

Many export matters can be resolved administratively with DDTC rather than prosecuted in federal court. Early engagement with prosecutors and regulators, a credible compliance remediation plan, and a well-documented account of what went wrong can persuade the government that a civil consent agreement, rather than an indictment, is the appropriate outcome. For individuals, the same work can mean the difference between a declination and federal charges.

ITAR vs. EAR: What’s the Difference?

ITAR and the Export Administration Regulations (EAR) are separate export control systems run by different agencies. ITAR, administered by the State Department, covers defense articles, defense services, and related technical data. The EAR, administered by the Commerce Department, covers dual-use items with both commercial and military uses, along with some less sensitive military items. Which system controls an item determines the license requirements, the investigating agency, and the civil penalties.

	ITAR	EAR
Agency	State Department, Directorate of Defense Trade Controls	Commerce Department, Bureau of Industry and Security
Governing law	Arms Export Control Act	Export Control Reform Act of 2018
Control list	U.S. Munitions List (21 categories)	Commerce Control List
What it covers	Weapons, military systems, defense services, and related technical data	Dual-use goods, software, and technology, plus some less sensitive military items
Licensing	License generally required for any export of a controlled item	Depends on the item, destination, end user, and end use
Maximum criminal penalty	20 years and $1,000,000 per violation	20 years and $1,000,000 per violation
Maximum civil penalty	$1,271,078 or twice the transaction value	$374,474 or twice the transaction value

The higher civil penalty ceiling under ITAR is one reason classification disputes matter so much in export cases. Showing that an item belongs under the EAR rather than ITAR can change the entire case.