Research data may be subject to extra levels of control and regulation due to its subject matter or source. 

Export control considerations

ISU must consider federal export control regulations such as the Export Administration Regulations (EAR), International Traffic in Arms Regulations (ITAR), and the Office of Foreign Assets Control (OFAC) before sharing data controlled under the regulations.

If your research project is subject to export control regulations, you may not share data resulting from that project until you have both:

  1. Confirmation from the Office of Research Ethics that all all export-controlled technical data has been removed,
  2. Permission to publish the data has been obtained from the Prime Sponsor.

Export control

Regulations that prohibit the export of specific technology and related technical information to certain foreign nations and their citizens

Read the policy

Need help?

The Office of Research Ethics Export Control team can help.

Confidential or proprietary information

Data from research projects that include confidentiality requirements or for which a research sponsor provides proprietary information likely have contractual obligations to receive approval before publishing data. Confidential or proprietary information is often subject to export control regulations as well.

Receive written permission from the research project sponsor before publishing data.

What is confidential information?

Data or information that is not made available or disclosed to unauthorized persons or processes.
— NIST CSRC Glossary

What is proprietary Information?

Material and information relating to or associated with a company's products, business, or activities ... that has been clearly identified and properly marked by the company as proprietary information, trade secrets, or company confidential information.
— NIST CSRC Glossary

Controlled Unclassified Information (CUI)

Data from research involving Controlled Unclassified Information (CUI) cannot be disseminated freely due to law, regulation, or government policy. Who can access these data, and how the data is stored, is limited and the data must be marked as containing CUI. 

Brooke Langlitz (langlitz@iastate.edu), Associate Director of the Office of Research Ethics can assist with CUI questions.  

 

What is controlled unclassified information?

Controlled Unclassified Information (CUI) is any information that law, regulation, or governmentwide policy requires to have safeguarding or disseminating controls, excluding information that is classified under EO 13526 or any predecessor or successor order, or ATOM54, as amended. 
— NIST SP 800-171 Rev. 2 

 

This page is not intended to replace policy or consultation with the appropriate university offices.