May I take my encrypted laptop when traveling internationally?
It depends. Becauseencryptionproducts can be used for illegal purposes, including terrorist activity, the United States and many of thecountries that you may visitmay ban or severely regulate the import, export and use of encryptionproducts.So, taking your laptop with encryption software to certain countries without proper authorization could violate U.S. export law or the import regulations of the country to which you are traveling, andcouldresult inyour laptop to be confiscated, in fines or in other penalties.
A group of nations negotiated a set of rules attempting to facilitate traveling with encryption software known as the "Wassenaar Arrangement." One of its provisions allows a travelertofreely enter a participating country withan encrypted deviceunder a"personal use exemption" as long as the traveler does not create, enhance, share, sell or otherwise distributethe encryption technology while visiting. Click here to view the countries that support the personal use exemption.
What countries have encryption importand use restrictions and how can I obtain an import license?
Since laws can change at any time, please check with the US Department of State before traveling internationally to ensure that you have the most up-to-date information.Many nations do notrecognize a "personal use exemption." Before traveling to these countrieswith an encrypted laptop,you will need to apply totheir specified governmental agency foranimport license. Additional information about international encryption controls can be found at the following websites:
Bureau of Industry and Security, U.S. Department of Commerce - Export Administration Regulations
What U.S. export regulations do I need to satisfy when leaving the country with my encrypted laptop?
The encryption functionality within McAfee's Data Protection Suite, has been granted an “ENC/Unrestricted” license exception with the U.S. Department of Commerce. This exception allows us to transport or ship a University-owned or personally-owned computer that has one of our approved encryption products installed to any country as long as the computer remains under our effective control,EXCEPTforthe countries defined in the Department of Commerce’s Export Administration Regulations (Cuba, Iran, North Korea, Sudan, and Syria).
If you must travel to one of the five embargoed countries, you may be able to obtain the appropriate export license, but the process can take, on average, a ninety days forreview. The Department of Commerce’s Bureau of Industry and Security and the Office of Foreign Assets Control (OFAC) within the U.S. Department of the Treasury accept applications for licenses to export encryption products and technologies. If you cannot obtain an export license, see the section below.
What can I do if I cannot satisfy encryption export or import control requirements?
If you are notable to meet the import or export requirements for a country you are about to visit,we recommend one of the following two options:
- If you are a member of the University's facultyor staff, youcan request a "loaner laptop" from OIT. A loaner laptop is a computer that is preloaded with standard University software, butdoes not contain data that could put the University at risk if the laptop is lost or stolen. Click here for more information about the laptop loaner program.
- Remove the encryption software from your laptop prior to traveling. Please note that if you choose this option, yourlaptop must be scanned bya member of OIT or your support staff to ensure that no confidential or highly confidential University informationresides on the laptop's hard drive. Any confidential or highly confidential information found on your laptop must be removed beforeyour hard drive is decryptedper the University's Information Security Policy.
