When export rules matter
Export controls cover listed items and the technology needed to develop, produce or use them. Records are most likely to be affected if they relate to:
- Semiconductor process recipes and manufacturing equipment
- Advanced materials and chemicals
- Aerospace, defence and nuclear products
- Encryption and high-performance computing designs
If yours do, classify them before you license them.
The main rules by region
| Region | Rules | What to know |
|---|---|---|
| United States | Export Administration Regulations (EAR); ITAR for defence | Technology for listed items can need a licence, and release to foreign nationals in the US can be a “deemed export”. Published information is generally not subject to the EAR (15 CFR 734.7). |
| European Union | Dual-use Regulation (EU) 2021/821 | Controls exports of listed dual-use items, including technology sent electronically (European Parliament). |
| Japan | Foreign Exchange and Foreign Trade Act (FEFTA) | Providing listed technology abroad or to non-residents needs METI permission (METI). |
| Elsewhere | National control lists | Taiwan, South Korea, Singapore and China run their own lists; check where the data and the buyer are. |
Why AI deals raise the question
The buyer may be in another country, store data in cloud regions abroad, or give access to staff and contractors of many nationalities. Training a model on controlled technology does not make the technology uncontrolled. Ask where the data will be stored and who can access it.
How to scope controlled data out
- Classify each record type with your export-control team.
- Exclude anything controlled unless you hold a licence for the transfer.
- Screen the buyer and its end users against restricted-party lists.
- Put storage-location and access limits in the licence agreement.
- Keep a written record of your decision.
This is general information, not legal advice. Export rules change often; ask an export-control specialist before transferring technical data.
Frequently asked questions
Does licensing data to a US AI company count as an export?
If you are outside the US, sending data to a US buyer is an export from your country, so your local rules apply. Inside the US, the question is whether foreign persons will access controlled technology.
Are process recipes always controlled?
No. Control depends on the item and the technology’s capability. Many recipes for mature processes are not controlled, but advanced-node and specialist materials data may be.
Does de-identification remove export controls?
No. Removing names protects privacy but does not change whether the technical content is controlled.