The technical data exemptions

← All Insights

1. Where the exemptions stop

Section 125.4 of the International Traffic in Arms Regulations (ITAR) lists exports of technical data that need no approval from the Directorate of Defense Trade Controls (DDTC) (22 CFR 125.4(a)). Three limits apply to all of them. Apart from the public release exemption, none applies to proscribed destinations under section 126.1 or to persons generally ineligible under section 120.16. None may be used to set up offshore procurement or to produce defense articles offshore, except under the bid exemption described below. The general limits on all exemptions are covered in authorizations and who may hold them.

Classified information sent under any exemption must follow the National Industrial Security Program Operating Manual, unless its requirements directly conflict with DDTC guidance (22 CFR 125.4(a)). The exporter must also certify to the transmittal authority that the data stays within the technical limits of the authorized export.

2. Exports the government asks for

Several exemptions follow government direction. Technical data, including classified information, may be disclosed under an official written request or directive from the Defense Department (22 CFR 125.4(b)(1)). Data may also go out under a contract between the exporter and a federal agency, if the contract provides for the export (22 CFR 125.4(b)(3)). That exemption does not cover data that discloses the details of design, development, production or manufacture of any defense article.

A further exemption covers arrangements with the Defense Department, the Energy Department or the National Aeronautics and Space Administration that require exports (22 CFR 125.4(b)(11)). DDTC must grant the exemption in writing. It normally does so only if the arrangement directly implements an international agreement to which the United States is a party, and multiple exports are expected.

3. Data tied to earlier approvals

Data supporting an approved manufacturing license or technical assistance agreement is exempt if it meets the requirements of section 124.3 (22 CFR 125.4(b)(2)). Copies of data already authorized for the same recipient are exempt (22 CFR 125.4(b)(4)). Revised copies are exempt too, if they concern the identical article and the revisions are only editorial, adding nothing to the technology already approved.

Basic operations, maintenance and training information for an article lawfully exported to the same recipient is exempt (22 CFR 125.4(b)(5)). Intermediate or depot-level repair and maintenance information needs a license or agreement approved for that purpose. Data directly related to classified information already exported to the same recipient is exempt, if it does not disclose design, development, production or manufacture details of any defense article (22 CFR 125.4(b)(8)).

4. Firearms data and returned data

Technical data for firearms up to .50 caliber, and for their ammunition, is exempt, except detailed design, development, production or manufacturing information (22 CFR 125.4(b)(6)). Technical data being returned to the original source of import is also exempt (22 CFR 125.4(b)(7)).

5. Employees traveling abroad

Data in any format may move by or to an American person traveling or on temporary assignment abroad (22 CFR 125.4(b)(9)). The same applies to a foreign person employee of an American person who is traveling or on such an assignment (22 CFR 125.4(b)(9)). Five restrictions apply. Foreign persons may handle only the data a separate license or approval allows them to receive (22 CFR 125.4(b)(9)(i)). Only American persons or authorized foreign persons may possess or use the data, and enough security precautions must be taken to prevent unauthorized release (22 CFR 125.4(b)(9)(ii)). The regulation’s examples are encryption, secure network connections such as virtual private networks, passwords on devices and media, and firewalls.

The individual must be a federal employee or directly employed by an American person, not by a foreign subsidiary (22 CFR 125.4(b)(9)(iii)). The data may not be used for foreign production or defense services without a license or separate approval (22 CFR 125.4(b)(9)(iv)). Classified information must leave the country under the industrial security manual, unless DDTC guidance directly conflicts with it (22 CFR 125.4(b)(9)(v)).

6. University employees

American institutions of higher learning may release unclassified technical data in the United States to foreign persons who are their bona fide, full-time regular employees (22 CFR 125.4(b)(10)). Three conditions apply. The employee’s permanent home must be in the United States throughout the employment (22 CFR 125.4(b)(10)(i)). The employee may not be a national of a country to which exports are prohibited under section 126.1 (22 CFR 125.4(b)(10)(ii)). The institution must tell the employee in writing that the data may not go to other foreign persons without DDTC’s prior written approval (22 CFR 125.4(b)(10)(iii)). These conditions were restored by a correction published on 23 September 2026 (91 FR 60299).

7. Public release and other exemptions

Data approved for public release, meaning unlimited distribution, by the responsible government agency or by the Office of Freedom of Information and Security Review is exempt (22 CFR 125.4(b)(13)). The approval may cover release in any form, and the information need not be published to qualify. Data specifically exempt under part 126 is also covered (22 CFR 125.4(b)(12)). What the public domain is, and why it sits outside the regulations, is covered in licensing technical data and classified exports.

8. Responding to a Defense Department bid request

The last exemption helps foreign firms bid on American defense work (22 CFR 125.4(c)). Defense services and related unclassified technical data may go to nationals of North Atlantic Treaty Organization countries, Australia, Japan and Sweden to answer a written Defense Department request for a quote or bid proposal. The request must be an official written request or directive from an authorized Defense Department official. The services and data are limited to build-to-print, build or design-to-specification and basic research. They may not include design methodology, engineering analysis, manufacturing know-how or applied research. Each of those terms is defined in section 120.43, alongside development and production (22 CFR 120.43).

Key terms

Technical data exemption	A provision allowing data exports without DDTC approval.
Editorial revision	A change to approved data that adds no new technology.
Temporary assignment	Travel abroad by an employee who carries controlled data for the employer.
Public release	Agency approval for unlimited distribution of data in any form.
Build-to-print	Production by a foreign consignee from engineering drawings, without technical help from the exporter.

Every statement above links to the document behind it. The full source list for this piece is on the sources page.

This page describes public United States government programs for general information. It is not legal, regulatory or procurement advice, and it does not address the facts of any particular case.

How Sentfore supports this

Data carried by staff abroad needs the same protection as the equipment it supports. Sentfore works at the delivery end of defense programs in difficult environments, providing secure movement, protective security, facilities and life support. Requirements can be sent through the contact page.