Export Compliance Guidance for Sponsored Research

UNC-Chapel Hill works to maintain an open, welcoming atmosphere where visitors and scholars from all over the world can come to learn, collaborate, and perform research. The University’s Export Compliance Office (ECO) is the primary office responsible for assisting University faculty, staff, and students in ensuring export compliance on controlled research projects.

In order to better assist with these efforts, the ECO is providing information on the types of projects or other funding opportunities that may require additional security controls and information sharing restrictions if awarded to the University.

The following factors are considered “red flags” and if any are answered “yes,” you can contact the ECO to better understand the additional requirements associated with that project.

1. Language in an RFP or award that may require restrictions:
   1. Controlled Unclassified Information (CUI)
   2. Export-Controlled Information
   3. Covered Defense Information (CDI)
   4. Controlled Technical Information (CTI)
   5. For Official Use Only (FOUO)
   6. Other restrictions, especially publication restrictions, on information sharing linked to “national security”
2. Certain funding agencies are more likely to have the above language:
   1. Department of Defense (e.g. Army Research Lab, DARPA, DTRA)
   2. NASA
   3. Department of Energy and National Labs
3. Clauses of concern:
   1. DFARS 252.204-7000 (Disclosure of Information)
   2. DFARS 252.204-7008 (Compliance with Safeguarding Covered Defense Information Controls)
   3. DFARS 252.204-7012 (Safeguarding Covered Defense Information and Cyber Incident Reporting)
   4. DFARS 252.204-7020 (NIST SP 800-171 DoD Assessment Requirements)
   5. DFARS 252.204-7021 (Cybersecurity Maturity Model Certification Requirements)
   6. DFARS 252.227-7025 (Limitations on the Use or Disclosure of Government-Furnished Information Marked with Restrictive Legends)
   7. DFARS 252.225-7048 (Export-Controlled Items)
   8. FAR 52.204-2 (Security Requirements)
   9. FAR 52.227-14 (Rights in Data – General)
   10. FAR 52.227-17 (Rights in Data – Special Works)
   11. ARL 52.005-4401 (Release of Information)
   12. ARL 52.004-4400 (Foreign Nationals Performing Under Contract)
   13. AFMC 5352.227-9000 (Export-Controlled Data Restrictions)
   14. DEAR 952.204-71 (Sensitive Foreign Nations Controls)

The primary office that is responsible for managing and negotiating sponsored research projects is the Office of Sponsored Programs (OSP). Please email OSP with any specific questions concerning sponsored research with which you may be involved with.