$8 Million Penalty for Weak ITAR Compliance: How the Price of Maintenance Beats the Cost of Repair


On April, 30, 2013, Raytheon Company, a major military electronics and weapons manufacturer, agreed with the U.S. Department of State to pay $8 million in civil penalties and remedial expenditures to settle alleged violations of the International Traffic in Arms Regulations (ITAR).  The size of the penalty catches the eye, but beyond the whopping number is a sizeable lesson to be drawn from such enforcement actions: when a company forgoes the expense of maintaining its ITAR compliance system, it risks paying a much greater price if a breakdown occurs.

Folks tend to gripe about the money they shell out to have oil changed, filters replaced, or tires rotated.  But the smart vehicle owners among us know that, however much we may complain at the time, we are paying only a pittance in the present to prevent a future fiasco.  Maintenance and upkeep of a vehicle are key to long-term performance and, maybe more importantly, critical to avoiding that terrible day where your ride gives out on you, leaving you alone and stranded on the highway-side, your engine billowing smoke, while all the other drivers cruise past you, smug in their well-kept cars.

Similarly, the breakdowns that allegedly led to the Raytheon settlement were eminently avoidable.  According to a State Department press release, the Office of Defense Trade Controls Compliance (DTCC) determined that “numerous violations demonstrated a recurring, corporate-wide weakness in maintaining effective ITAR controls.”  The alleged violations included, among other lapses:

  • “Inaccurate tracking, valuation and documentation of temporary exports and imports of controlled hardware;”
  • “Manufacture of such [ITAR-controlled] hardware by Raytheon’s foreign partners in excess of the approved amounts;” and
  • “Failures to timely obtain and submit required documents”

These correctible oversights are precisely the type of ITAR policy implementation failure that give compliance personnel migraines.

From the point of view of compliance counsel, the most forehead-smacking of the company’s gaffes is that the company, in some cases, found that “previously reported remedial measures failed to prevent and detect additional similar violations.”  DTCC is saying that the company  had seen the problem, taken an inadequate measure as a response, and then, predictably, found that the problem continued.  This is the compliance equivalent of finding that your bumper has fallen off your car, duct-taping the bumper back onto the car, then speeding down the highway only to find, to no one’s but your surprise, that your bumper is no longer attached to your car.

To its credit, Raytheon disclosed nearly all the ITAR violations in this settlement, acknowledged their serious nature, and cooperated with State.  For this reason, the company avoided more serious penalties.  Nevertheless, the company learned a very expensive lesson.

The rest of the ITAR-compliance community may learn free of charge, however, from Raytheon’s unfortunate circumstance: a company may feel temporary pain as it expends resources to ensure its ITAR compliance systems run smoothly; it will feel so much better, however, when that company rolls smoothly on down the road, passing by those whose unmaintained policy engines have stalled out.

Written by:

Published In:

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Sheppard Mullin Richter & Hampton LLP | Attorney Advertising

Don't miss a thing! Build a custom news brief:

Read fresh new writing on compliance, cybersecurity, Dodd-Frank, whistleblowers, social media, hiring & firing, patent reform, the NLRB, Obamacare, the SEC…

…or whatever matters the most to you. Follow authors, firms, and topics on JD Supra.

Create your news brief now - it's free and easy »

All the intelligence you need, in one easy email:

Great! Your first step to building an email digest of JD Supra authors and topics. Log in with LinkedIn so we can start sending your digest...

Sign up for your custom alerts now, using LinkedIn ›

* With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name.