32 C.F.R. § 117.19
(2) Security agreements—(i) Bilateral security agreements (e.g., General Security of Information Agreements and General Security of Military Information Agreements) are negotiated with various foreign governments. Confidentiality requested by some foreign governments prevents a listing of the countries that have executed these agreements. The bilateral security agreement, negotiated through diplomatic channels:
(3) Authorization for disclosure. The GCA will provide disclosure guidance.
(iv) Disclosure and export of classified information, authorized by an appropriate USG disclosure official, by a contractor will ensure the following:
(4) Direct commercial arrangements.
(ii) If a proposed disclosure is in support of a foreign government requirement, the contractor should consult with U.S. in-country officials, normally the U.S. Security Assistance/Armaments Cooperation Office or Commercial Counselor.
(5) Subcontract security provisions.
(i) A U.S. contractor may be authorized to enter into an agreement involving classified information with a foreign contractor. The U.S. contractor's empowered official will verify the contractor can release the information to a foreign person. Such agreements may include:
(vi) The contractor will include the security provisions in accordance with paragraph (b)(5) in this section in all contracts and subcontracts involving classified information that are awarded to foreign contractors. Contractors must insert the bracketed contract specific information (e.g., applicable country and disposition of classified material) where noted, when using the following security clauses in the contract.
(A) All classified information and material furnished or generated under the contract will be protected to ensure that:
(1) The recipient will not release the information or material to any third party without disclosure authorization and export authorization, as appropriate.
(2) The recipient will afford the information and material a degree of protection equivalent to that afforded it by the releasing government.
(3) The recipient will not use the information and material for other than the purpose for which it was furnished without the prior written consent of the releasing government.
(F) Classified information and material furnished or generated pursuant to the contract will not be further provided to another potential contractor or subcontractor unless:
(1) A potential contractor which is located in the United States or [insert applicable country] has been approved for access to classified information and material by the USG or [insert applicable country] security authorities; or
(2) If located in a third country, prior written USG consent is obtained.
(8) Disclosure and use limitations.
(i) FGI is provided by the foreign government to the United States. The contractor will:
(11) Disposition. The contractor:
(2) Transfers of freight—(i) Transportation plan (TP).
(A) A requirement to prepare a TP will be included in each arrangement that involves the international transfer of classified material as freight. The TP will:
(1) Describe requirements for the secure shipment of the material from the point of origin to the ultimate destination.
(2) Provide for security requirements in the event the transfer cannot be made promptly.
(ii) Government agency arrangements. Classified material to be furnished to a foreign government under such transactions normally will be shipped via government agency-arranged transportation and be transferred to the foreign government's DGR within the recipient government's territory.
(C) Commercial arrangements. (1) The contractor will prepare a TP in coordination with the receiving government. This requirement applies whether the material is moved by land, sea, or air, and applies to U.S. and foreign classified contracts.
(2) After the CSA approves the TP, the CSA will forward it to the recipient foreign government security authorities for final coordination and approval. The CSA will notify the contractor upon the concurrence by the respective parties.
(D) International carriers. The international transfer of classified material will be made using only ships, aircraft, or other carriers that:
(1) Are owned or chartered by the USG or under U.S. registry;
(2) Are owned or chartered by or under the registry of the recipient government; or
(3) Are other than those described that are expressly authorized to perform this function in writing by the Designated Security Authority of the GCA and the security authorities of the foreign government involved. This authority cannot be delegated and this exception may be authorized only when a carrier described in paragraph (d)(2)(iv)(A) or (d)(2)(iv)(B) in this section is not available and an urgent operational requirement dictates use of the exception.
(E) Escorts. (1) The contractor must provide escorts for international shipments of SECRET or CONFIDENTIAL material by air.
(2) Escorts must have an eligibility determination and access to classified information at the classification level of the material being shipped.
(3) Escorts are responsible for ensuring that the classified material being shipped is safeguarded in the event of an emergency stop en route, re-routing of the aircraft, or in the event that the recipient government's representative fails to meet the shipment at its destination.
(4) The contractor does not have to provide escorts if:
(i) The classified material is shipped by the Defense Transportation System or a U.S. military carrier.
(ii) The recipient government DGR has signed for the receipt of the classified material within the United States.
(iii) The classified material is shipped via a military carrier of the recipient government or a carrier owned by or registered to the recipient government.
(iv) The classified material is shipped via a cleared U.S. commercial freight carrier, so long as the contractor has a written agreement from the U.S. commercial freight carrier to provide an escort who is eligible for access to classified information and has access to classified information at the classification level of the material being shipped.
(v) There are exceptional circumstances, and procedures have been approved by both the USG and the recipient government.
(3) Secure communications plan.
(4) Return of material for repair, modification, or maintenance.
(5) Use of freight forwarders.
(i) A commercial freight forwarder may be used to arrange for the international transfer of classified material as freight.
(6) Hand carrying classified material. To meet contractual requirements, the CSA may authorize contractor employees to hand carry classified material outside the United States. SECRET is the highest level of classified material to be carried and it must be of such size and weight that the courier can retain it in his or her possession at all times.
(7) Classified material receipts.
(i) The U.S. DGR and the DGR of the ultimate foreign recipient will maintain a continuous chain of receipts to record international transfers of all classified material from the contractor through the dispatching DGR and recipient DGR to the ultimate foreign recipient. The dispatching contractor will retain:
(8) Contractor preparations for international transfers of classified material pursuant to direct commercial and foreign military sales. To prepare for international transfers the contractor will:
(iv) Have the classified shipment ready for visual review and verification by the DGR. As a minimum this will include:
(9) Transfers pursuant to an ITAR exemption.
(ii) Classified technical data information or certain defense articles to be exported pursuant to ITAR exemptions will be supported by a written authorization signed by an authorized exemption official or exemption certifying official who has been appointed by the GCA's responsible disclosure authority.
(e) International visits—(1) General.
(ii) Requests for visits. Visit requests are necessary to make administrative arrangements and disclosure decisions and obtain security assurances.
(v) Requests for emergency visits. The requester will include in the emergency visit request, and any other requirements in accordance with applicable CSA guidance:
(vii) Amendments.
(ii) USG approval. The USG may approve or deny the request or decline to render a decision.
(A) USG-Approved Visits. (1) USG approved classified visits cannot be used to avoid the export licensing requirements for commercial initiatives.
(2) When the cognizant USG agency approves a classified visit, the notification of approval will contain instructions on the level and scope of classified and unclassified information authorized for disclosure, as well as any limitations.
(3) Final acceptance for the visit will be subject to the concurrence of the contractor. The contractor will notify the USG agency when a classified visit is not desired.
(B) Visit request denials. (1) If the USG agency does not approve the disclosure of the information related to the proposed classified visit, it will deny the classified visit request. The USG agency will advise the requesting government and the contractor to be visited of the reason for the denial.
(2) The contractor may accept the visitor(s), but only information that is in the public domain may be disclosed during the classified visit.
(C) Non-sponsorship. The USG agency will decline to render a decision on a classified visit request that is not in support of a USG program. The USG agency will furnish a declination notice indicating that the classified visit is not USG-approved (i.e., the classified visit is non-sponsored) to the requesting foreign government with an information copy to the U.S. contractor to be visited.
(1) A declination notice does not preclude the classified visit, provided the contractor has, or obtains, an export authorization for the information involved and, has been notified that the requesting foreign government has provided the required security assurance of the proposed visitor to the USG agency in the original classified visit request.
(2) It is the contractor's responsibility to consult applicable export regulations to determine licensing requirements regarding the disclosure of export-controlled information during such classified visits by foreign nationals.
(E) Long-term classified visits and assignments of foreign nationals. Extended classified visits and assignments of foreign nationals to contractor locations can be authorized only when it is essential pursuant to a contract or government agreement (e.g., joint venture, liaison representative to a joint or multinational program, and direct commercial sale). The contractor will:
(1) Consult with its empowered official for guidance.
(2) Notify the CSA in advance of all long-term classified visits and assignments of foreign nationals.
(3) Provide the CSA with a copy of the approved classified visit authorization or the USG export authorization.
(4) Control of foreign visitors to U.S. contractors—(i) Contractor. The contractor will:
(iv) Temporary approval of safeguarding.
(B) This does not preclude the contractor from furnishing a foreign visitor with a security container for the temporary storage of classified material, consistent with the purpose of the visit or assignment, provided the CSA approves and responsibility for the container and its contents remains with the U.S. contractor.
(1) The CSA may approve exceptions to this policy on a case-by-case basis for the storage of foreign government classified information furnished to the visitor by the visitor's government through government channels.
(2) The CSA must approve such exceptions in advance in writing with agreement from the visitor's government. The agreed procedures will be included in the contractor's TCP, will require the foreign nationals to provide receipts for the material, and will include an arrangement for the CSA to ensure compliance, including provisions for the CSA to inspect and inventory the material.
(f) Contractor operations abroad—(1) Access by contractor employees assigned outside the United States.
(2) Storage, custody, and control of classified information abroad by contractor employees.
(iii) A contractor employee may be permitted to temporarily remove classified information from an overseas USG-controlled facility when necessary for the performance of a GCA contract or pursuant to an approved export authorization.
(A) The responsible USG security official at the facility will verify that the contractor has an export authorization or other written USG approval to have the material, verify the need for the material to be removed from the facility, and brief the employee on handling procedures.
(1) In such cases, the contractor employee will sign a receipt for the classified material.
(2) Arrangements will also be made with the USG custodian for the return and storage of the classified material during non-duty hours.
(iv) A contractor employee will not store classified information at overseas divisions or subsidiaries of U.S. entities incorporated or located in a foreign country.
(3) Transmission of classified material to employees abroad. The transmission of classified material to a cleared contractor employee located outside the United States will be through USG channels.
(2) NATO security classification levels.
| NATO security classification | Classification level |
|---|---|
| COSMIC TOP SECRET | Top Secret. |
| NATO SECRET | Secret. |
| NATO CONFIDENTIAL | Confidential. |
| NATO RESTRICTED 1 | Does not correspond to an equivalent U.S. classification. |
| 1 Pursuant to applicable NATO security regulations and United States Security Authority, NATO Instruction 1-07, security accreditation may be delegated to contractors for information systems processing only NATO RESTRICTED information. The contractor will be responsible for executing specific provisions under contract for the accreditation of such systems, and shall provide the Contracting Authority with a written statement confirming the information system has been accredited in compliance with the minimum requirements established in the contract security clause or contract Security Aspects Letter. |
(3) ATOMAL Classification Markings. ATOMAL is a marking applied to U.S. RESTRICTED DATA or FORMERLY RESTRICTED DATA and UK Atomic information that has been released to the NATO.
| ATOMAL marking | Classification level |
|---|---|
| COSMIC TOP SECRET ATOMAL | Top Secret. |
| NATO SECRET ATOMAL | Secret. |
| NATO CONFIDENTIAL ATOMAL | Confidential. |
(5) NATO facility security clearance certificate (FSCC). A NATO FSCC is required for a contractor to negotiate or perform on a NATO classified contract.
(7) NATO briefings. Before having access to NATO classified information, the contractor will give employees a NATO security briefing that covers the requirements of this section and the consequences of negligent handling of NATO classified information. A representative of the CSA will give the initial briefing to the contractor. The contractor must conduct annual refresher briefings.
(8) Access to NATO classified information by foreign nationals. Foreign nationals of non-NATO nations may have access to NATO classified information only with the consent of the NATO Office of Security and the contracting activity.
(10) Preparing and marking NATO documents. All classified documents created by a U.S. contractor will be portion-marked. Any portion extracted from a NATO document that is not portion marked, must be assigned the classification that is assigned to the NATO document.
(i) All U.S.-originated NATO classified documents will bear an assigned reference number and date on the first page. The reference numbers will be assigned as follows:
(ii) COSMIC TOP SECRET, NATO SECRET, and ATOMAL documents will bear the reference number on each page and a copy number on the cover or first page.
(iii) One of the following markings will be applied to NATO documents that contain ATOMAL information:
(11) Classification guidance. Classification guidance will be in the form of a NATO security aspects letter and a security requirements checklist for NATO contracts, or a Contract Security Classification Specification, or equivalent.
(13) Storage of NATO documents. NATO classified documents will be stored as prescribed for U.S. documents of an equivalent classification level, except as follows:
(14) International transmission. The NATO has a registry system for the receipt and distribution of NATO documents within each NATO member nation. The central distribution point for the United States is the CUSR now located at 9301 Chapek Road, Building 1458, Fort Belvoir, Virginia 22060.
(17) Disposition.
(ii) NATO classified documents may also be destroyed when permitted. COSMIC TOP SECRET and COSMIC TOP SECRET ATOMAL documents will be destroyed by the registry that provided the documents.
(18) Accountability records. Logs, receipts, and destruction certificates are required for NATO classified information. Records for NATO documents will be maintained separately from records of non-NATO documents (methods such as separate drawers of a container).
(20) Extracting from NATO documents. Permission to extract from a COSMIC TOP SECRET or ATOMAL document will be obtained from the CUSR.
(21) Release of U.S. information to NATO.
(i) Release of U.S. classified or export-controlled information to NATO requires an export authorization or other written disclosure authorization. When a document containing U.S. classified information is being prepared for NATO, the appropriate NATO classification markings will be applied to the document.
(22) Visits. NATO visits will be handled in accordance with the requirements in paragraph (e) of this section. A NATO Certificate of Security Clearance will be included with the visit request.
(i) Transfers of defense articles to the UK or AUS without a license or other written authorization—(1) Treaties with AUS and UK. Exemptions in ITAR parts 126.16 and 126.17 implement the Defense Trade Cooperation Treaty between the Government of the United States of America and the Government of the UK of Great Britain and Northern Ireland and the Defense Trade Cooperation Treaty between the Government of the United States of America and the Government of AUS, also known as the “U.S.-UK Treaty” and “U.S.-AUS Treaty,” respectively, referred to collectively in this rule as “the Treaties.”
(2) Defense articles. Defense articles fall under the scope of the Treaties when they are in support of:
(3) Marking requirements. Contractors are required to mark defense articles that fall under the scope of the treaty prior to transferring from the U.S. to the UK in accordance with the provisions of this paragraph. All other standard classification marking in accordance with § 117.14 also apply. When defense articles are returned from the UK or AUS to the United States, any defense articles marked as RESTRICTED in the manner shown in Table 4 purely for the purposes of the treaties will be considered to be unclassified and such marking will be removed.
| Treaty with: | Marking | Example(for SECRET classified defense articles) |
|---|---|---|
| Government of UK | //CLASSIFICATION LEVEL USML/REL GBR AND USA TREATY COMMUNITY// | //SECRET USML//REL GBR AND USA TREATY COMMUNITY//” |
| Government of AUS | //CLASSIFICATION LEVEL USML/REL AUS AND USA TREATY COMMUNITY// | //SECRET USML//REL AUS AND USA TREATY COMMUNITY//” |
| Treaty with: | Marking |
|---|---|
| Government of UK | //RESTRICTED-USML//REL GBR AND USA TREATY COMMUNITY// |
| Government of AUS | //RESTRICTED-USML//REL AUS AND USA TREATY COMMUNITY// |
(4) Notice. A notice will be included (e.g., as part of the bill of lading) whenever defense articles are exported in accordance with the provisions of these treaties and the ITAR.
| Notice text | These U.S. Munitions List commodities are authorized by the U.S. Government under the U.S. [AUS or UK, as applicable] Defense Trade Cooperation Treaty for export only to [AUS or UK, as applicable] for use in approved projects, programs or operations by members of the [AUS or UK, as applicable] Community. They may not be retransferred or re-exported or used outside of an approve project, program, or operation, either in their original form or after being incorporated into other end-items, without the prior written approval of the U.S. Department of State. |
(5) Labeling.
(6) Transfers.
(7) Records. Contractors will maintain records of exports, transfers, re-exports, or re-transfers of defense articles subject to the Treaties for a minimum of five years. The contractor will make records available to the CSA upon request. In accordance with the ITAR parts 126.16 and 126.17 the records will contain: