- Basic Research
- Clinical Research
- Sponsored Programs
- Research Cores
- Intellectual Property
The question-and-answer decision tree walks you through a series of "Yes" or "No" questions, leading to a determination of whether or not an export control license may be applicable to any particular situation.
The Decision Tree assists the UMMS community in complying with US export control laws and regulations.
UMMS acknowledges and appreciates Stanford University for granting permission to use, and alter, their Export Control Decision Tree.
The sharing, shipping, transmission or transfer of almost all encryption software in either source code or object code is subject to US export regulations.
Even most publicly available "dual-use" encryption code captured by the Export Administration Regulations (EAR) requires the availability of a License Exception. A License Exception under the EAR is an authorization based on a set of criteria, which when met, allows the exporter to circumvent export licensing requirements. The release of publicly available encryption code under the EAR is generally authorized by License Exception TSU (Technology and Software - Unrestricted) whereby the exporter provides the US Government with a "one-time" notification of the location of the publicly available encryption code prior to or at the time the code is placed in the public domain. Notification after transmission of the code outside the US is an export control violation.
In addition, US persons are prohibited without prior authorization from providing technical assistance (i.e., instruction, skills training, working knowledge, consulting services) to a foreign person with the intent to assist in the overseas development or manufacture of encryption software that is subject to US Government notification or authorization. This prohibition does NOT limit UMMS personnel from teaching or discussing general information about cryptography or developing or sharing encryption code within the United States that arises during, or results from, fundamental research.
Two License Exceptions are available when the tangible export of items and software containing encryption code is necessary for travel or relocation:
Source code is generally understood to mean programming statements that are created by a programmer with a text editor or a visual programming tool and then saved in a file. Object code generally refers to the output, a compiled file, which is produced when the Source Code is compiled with a C compiler. The object code file contains a sequence of machine-readable instructions that is processed by the CPU in a computer. Operating system or application software is usually in the form of compiled object code.