International Traffic in Arms Regulations (ITAR)
The International Traffic in Arms Regulations (ITAR) are US regulations that control the export, re-export, and transfer of defense articles, defense services, and related technical data on the US Munitions List (USML). ITAR is administered by the US State Department's Directorate of Defense Trade Controls (DDTC). Compliance is a core constraint for any non-US supplier handling US-origin defense technology, data, or components.
Etymology / origin
ITAR was issued under the Arms Export Control Act of 1976 (AECA) and the Foreign Assistance Act. The USML is maintained by the Department of State in coordination with the Department of Defense. ITAR sits alongside the Export Administration Regulations (EAR) for dual-use items administered by the Department of Commerce.
Where you encounter this term
ITAR compliance is required for any supplier handling USML items, related technical data, or providing defense services involving US-origin systems. Common encounter points include F-35 supply chains, Aegis combat system components, missile sub-systems, and many cybersecurity tools. Suppliers must register with DDTC, hold appropriate licences, train personnel, and implement technology control plans. Violations carry substantial criminal and civil penalties.
Example — from the WULFRN database
WULFRN's US defense coverage surfaces notices that often carry ITAR-relevant clauses in their attached solicitation documents. Foreign suppliers tracking US opportunities should assume ITAR applicability on any contract involving US-origin defense technology or technical data.
Related glossary terms
- FAR / DFARSFederal Acquisition Regulation (FAR) and its Defense supplement (DFARS), the regulatory framework governing all US federal and DoD contracting.
- SAM.gov (System for Award Management)US federal government's official procurement portal, the single source for US Department of Defense contracting opportunities.
- Foreign Military Sales (FMS)US government-to-government defense sales programme, administered by DSCA — non-US allies' primary path to US-made defense equipment.
- IL5 / FedRAMPUS federal cloud authorization tiers — FedRAMP for general federal civilian and IL5 for DoD's highest unclassified workload tier.
Continue reading on WULFRN
Frequently asked questions
What does ITAR regulate?
ITAR (International Traffic in Arms Regulations) controls the export, re-export, and transfer of defense articles, defense services, and related technical data on the US Munitions List. Compliance is required for any supplier — US or foreign — that handles USML items, technical data, or provides defense services involving US-origin systems.
What is the difference between ITAR and EAR?
ITAR controls defense articles on the US Munitions List, administered by the State Department's DDTC. EAR (Export Administration Regulations) controls dual-use items on the Commerce Control List, administered by the Commerce Department's Bureau of Industry and Security. Some items have moved between the two regimes over the years through Export Control Reform.
Do non-US defense suppliers need to comply with ITAR?
Yes, whenever they handle USML items, US-origin technical data, or provide defense services involving US-origin systems. Many F-35, Aegis, and missile-system sub-suppliers across NATO Allies hold DDTC registrations and operate under ITAR-compliant technology control plans. ITAR violations carry criminal and civil penalties regardless of the supplier's home country.