ITAR - International Traffic in Arms Regulations 120.54: Rely on the activities that are not exports only within their conditions

What does 120.54 require?

Not exports, reexports, retransfers or temporary imports: launching items into space; transferring technical data to a U.S. person in the United States from a person in the United States; transfers within one foreign country among U.S. persons only, without release to a foreign person; moving defense articles within the United States; sending, taking or storing unclassified technical data secured with end-to-end encryption using FIPS 140-2 (or successor) modules or means of at least AES-128 strength, not intentionally sent to a person in or stored in a 126.1 country and not sent from one, where the recipient is the originator, a U.S. person in the United States or an authorised person and decryption means are not given to third parties; certain deployments of previously exported articles by authorised foreign forces; and certain returns of foreign articles (120.54). Access to encrypted data that meets the carve-out is not a release (120.54(c)).