Legal Issues

U.S. policies on the usage and export of encryption are controlled by the President (Title 22, Section 2778). Before the growth of electronic commerce, the International Traffic in Arms Regulations (ITAR) restricted both the strength of encryption that could be used in the United States and the export of encryption products. As the electronic commerce environment changed, there was pressure put on the administration to change its policies. Congress joined in the public discourse by introducing various bills to ease the regulations.

Starting in 1996, the Clinton administration started to ease these regulations. After moving enforcement of these policies to the Bureau of Export Affairs (BXA) of the Department of Commerce in December ...

Get Writing Information Security Policies now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.