Understanding US Export Controls and Open Source Projects (2021 Update)
The Linux Foundation | 15 July 2021
One of the greatest strengths of open source development is how it enables collaboration across the entire world. However, because open source development is a global activity, it necessarily involves making available software across national boundaries. Some countries’ export control regulations, such as the United States, may require taking additional steps to ensure that an open source project is satisfying obligations under local laws.
In July of 2020, The Linux Foundation published a whitepaper on how to address these issues in detail, which can be downloaded here. In 2021, the primary update in the paper is to reflect a change in the US Export Administration Regulations.
- Previously, in order for publicly available encryption software under ECCN 5D002 to be not subject to the EAR, email notifications were required regardless of whether or not the cryptography it implemented was standardized.
- Following the change, email notifications are only required for software that implements “non-standard cryptography”.
Please see the updated paper and the EAR for more specific details about this change.
Similar Articles
Browse Categories
2023 Compliance and Security Cloud Computing Open Source Projects Linux How-To 2024 Diversity & Inclusion LF Research Blog Open Source Best Practices Linux Foundation Newsletter 2022 Training and Certification Research Cross Technology Linux lf blog research report linux blog LFX cybersecurity project news software development AI Cloud Native Computing Foundation Legal OpenSearch Topic: Data Announcements Financial Services In the news Networking and Edge lf events Data Governance Energy Featured Events Industry: Finance Industry: Fintech Interoperability LF Energy Open Mainframe Open Models OpenChain System Administration This week at FINOS Topic: Open Source Development Topic: Security Topic: Sustainability Web Application & Development amazon web services aws brand perception cloud native cncf community tools confidential computing challenges developer needs eBPF emerging technologies generative AI human capital japan spotlight kernel lf projects license compliance maintainer openssf research survey sbom skills development tech talent techtalentsurvey updates