Export Control Policies & Procedures

• Any item that is sent from the United States to a foreign destination is an export.  “Items” include biological materials, chemicals, research materials, software, technology, and information.  
• The export of controlled items, information or software may require approval from the U.S. government in the form of an export license.  An export license permits controlled tangible items or software to be sent outside the U.S. or controlled information or software to be shared with foreign persons in the U.S. or abroad. 
• Before carrying, shipping, or otherwise sending materials outside of the United States, you should consult the International Shipping Guidance, the EH&S Research Materials Shipping and Transport Manual, and your School or Institute’s Export Control Administrator to determine whether an export license is required.  

• Technology, know how, and non-encryption source code that is released to foreign national within the U.S. is “deemed” to be an export to the country where the person is a resident or citizen and could be subject to export licensing requirements. This is what is commonly known as the “deemed export” rule.  More information about Deemed Exports can be found in the FAQ at the Bureau of Industry and Security. 
• Visa Deemed Export Certification:  The U.S. Citizenship and Immigration Services (USCIS) requires the University to certify whether visa petitions for certain classes of foreign person work visas will require a license or other government authorization for the release of export-controlled technology or technical data during their employment. Under the export control laws, the transfer of such information is “deemed” an export to the country of origin of the individual with whom you are communicating. 
• Harvard International Office Visa Intake Form: To meet the USCIS requirement, the University’s visa application includes a “Deemed Export Questionnaire and Certification.” This certification must be signed by the Principal Investigator or Department Chair and the School’s Compliance Officer, attesting to whether a deemed export license is required prior to the release of technology or technical data to the foreign person. 

• Foreign travel raises a number of issues for researchers, as any trip outside the United States has the potential for the researcher to export both items and technical information that may be controlled.  For these reasons, it is recommended that you review Harvard’s Global Support Services travel tools page, and keep in mind a few simple points while traveling abroad:  

• Shipped v. Carried Items:  Export-control laws do not distinguish between an item that is shipped and an item that is carried. Thus, if it is unlawful to ship an item to a certain country without a license, it is also unlawful to hand-carry with you, in your luggage. Although laptops are ordinarily licensed by the manufacturers for export to most countries, you may not be permitted to bring the same equipment to an embargoed country without first securing a license. 
• Destination:  Second, the destination determines what export controls or regulations apply. Check with your School or Institute’s Export Control Administrator before travelling to: Cuba, Iran, North Korea, the Crimea Region of the Ukraine, Syria, or China. 
• Money:  If you are traveling to a comprehensively sanctioned country, you may need a license to expend funds in that country. For example, under the Iranian embargo, you are permitted to spend money on hotels, food, or transportation without a license, but you may need a license from the Treasury Department in order to contract with local individuals and purchase certain research supplies. 
• Sharing Data:  Travel abroad always involves meeting new people; researchers are no exception. Export control issues can arise when a researcher interacts with people during scientific discussions or conferences in which controlled technical information may be exchanged. There is no export control issue if the researcher is presenting research results that have already been published. However, if the data have not been published, the researcher must ensure that there is no technical information included that may be controlled.  
• Restricted Individuals/Business Entities:  Travel abroad may also involve engaging in transactions with individuals or business entities which may be restricted by U.S. sanctions. 
• Electronic Devices and Encryption Software:  If you are traveling with your laptop or any other electronic devices these items along with the underlying technology, any data on your device, proprietary information, confidential records, and encryption software are all subject to export control regulations. Some foreign governments have regulations that permit the seizure of travelers’ computers and the review of their contents. U.S. Customs officials are also authorized to review the contents of travelers’ laptops without probable cause and can be held until your return. 

• In addition to countries, foreign individuals and entities may also be the subject of U.S. sanctions.  These individuals/entities are considered Specially Designated Nationals (“SDNs”).  
• Before traveling to countries that may be the subject of sanctions, collaborating with a foreign national outside of Harvard University or any person or entity outside of the United States, or presenting your research at an international conference, conduct an SDN screen. 
• SDN screens may also need to be conducted when enrolling foreign nationals in: 
• Professional or continuing education courses, 
• On-line courses or executive education programs, or 
• Otherwise providing services or receiving funds from foreign nationals 
• The Export Control Guidance on SDN provides further information on how to conduct SDN screens, and how to proceed if a screen results in a positive match. 
• You should also reference the points to consider when travelling abroad in the Foreign Travel Issues section of this site.
• Related guidance: On-Line Education Reminder Regarding Sanctioned Countries 

Use of cloud computing may implicate export control related issues; to assist those planning to use outsourced IT Services an Export Control Guidance on Data Storage and Transmission has been prepared to provide you with more information. 

Process for Accessing Military Critical Technical Data: Harvard University’s Office of the Vice Provost for Research does not currently have an approved Military Critical Technical Agreement (Form DD2345) with the Joint Certification Program (“JCP”).  The University Research Data Officer serves as the University’s Data Custodian for the purposes of any approval. All DD2345 related questions and requests must be directed to OVPR.  Always work with the OVPR to: 

• Confirm your need for JCP certification 
• Obtain a JCP certification number for use on meeting/conference registration forms, etc.  
• Establish a Technology Control Plan (TCP) for the receipt and management of any export controlled data or materials.  An approved Technology Control Plan (TCP) is required for all JCP data, regardless of format, that will be accessed, developed, provided, used, or stored by or on behalf of the University or University personnel. A TCP is not required for meeting participation unless the participant will be retaining notes, conference proceedings, presentations, etc. from the meeting that require safeguarding. 

Note: University faculty, staff, trainees, and students engaging in University supported activities are required to use our institutional certification rather than register as an individual. 

• About the Joint Certification Program for Access to Military Critical Technical Data: Access to unclassified technical data that discloses specifications for technology considered critical by the U.S. Department of Defense and/or Canadian Department of National Defense requires authorization.  To facilitate authorization requests, the U.S. and Canada signed a Memorandum of Understanding (MOU) in 1985 that established the U.S. – Canada Joint Certification Program (JCP). For Harvard researchers, a JCP authorization is required when you plan to attend a meeting or a conference where unclassified technical data will be shared, used, or disclosed.  Harvard has secured an institutional JCP authorization to facilitate the exchange of export controlled technical data in DoD funded research or the participation of University researchers in DoD sponsored events (e.g., to discuss program requirements or present research findings). Under the JCP, data is sent to the recipient’s Data Custodian named on the DD2345 who is then responsible for ensuring that appropriate safeguards (controls) are put in place to prevent unauthorized disclosures and exports before releasing it to the end user (i.e., researcher). 

• Regulations & Definitions: Access to unclassified technical data may not be exported outside of the U.S. without an approval authorization or license under U.S. or Canadian export control laws. This also means that you cannot share any unclassified technical data to which you have access with any foreign nationals in the U.S.
• U.S. Defense Directive 5230.25 defines unclassified technical data as any of the following: 
• Technical data with military or space application 
• Blueprints, drawings, plans, instructions, computer software or documentation 
• Other technical information that can be used (or be adapted for use) to design, engineer, produce, manufacture, operate, repair, overhaul, or reproduce any military or space equipment or technology concerning such equipment