Skip to main content

BIS Privacy Policy Statement

The kinds of information BIS collects

Automatic Collections - BIS Web servers automatically collect the following information:

  • The IP address of the computer from which you visit our sites and, if available, the domain name assigned to that IP address;
  • The type of browser and operating system used to visit our Web sites;
  • The date and time of your visit;
  • The Internet address of the Web site from which you linked to our sites; and
  • The pages you visit.
  • In addition, when you use our search tool our affiliate, USA.gov, automatically collects information on the search terms you enter. No personally identifiable information is collected by USA.gov.

This information is collected to enable BIS to provide better service to our users. The information is used only for aggregate traffic data and not used to track individual users. For example, browser identification can help us improve the functionality and format of our Web site.

Submitted Information: BIS collects information you provide through e-mail and Web forms. We do not collect personally identifiable information (e.g., name, address, phone number, e-mail address) unless you provide it to us. In all cases, the information collected is used to respond to user inquiries or to provide services requested by our users. Any information you provide to us through one of our Web forms is removed from our Web servers within seconds thereby increasing the protection for this information.

Privacy Act System of Records: Some of the information submitted to BIS may be maintained and retrieved based upon personal identifiers (name, e-mail addresses, etc.). In instances where a Privacy Act System of Records exists, information regarding your rights under the Privacy Act is provided on the page where this information is collected.

Consent to Information Collection and Sharing: All the information users submit to BIS is done on a voluntary basis. When a user clicks the "Submit" button on any of the Web forms found on BIS's sites, they are indicating they are aware of the BIS Privacy Policy provisions and voluntarily consent to the conditions outlined therein.

How long the information is retained: We destroy the information we collect when the purpose for which it was provided has been fulfilled unless we are required to keep it longer by statute, policy, or both. For example, under BIS's records retention schedule, any information submitted to obtain an export license must be retained for seven years.

How the information is used: The information BIS collects is used for a variety of purposes (e.g., for export license applications, to respond to requests for information about our regulations and policies, and to fill orders for BIS forms). We make every effort to disclose clearly how information is used at the point where it is collected and allow our Web site user to determine whether they wish to provide the information.

Sharing with other Federal agencies: BIS may share information received from its Web sites with other Federal agencies as needed to effectively implement and enforce its export control and other authorities. For example, BIS shares export license application information with the Departments of State, Defense, and Energy as part of the interagency license review process.

In addition, if a breach of our IT security protections were to occur, the information collected by our servers and staff could be shared with appropriate law enforcement and homeland security officials.

The conditions under which the information may be made available to the public: Information we receive through our Web sites is disclosed to the public only pursuant to the laws and policies governing the dissemination of information. For example, BIS policy is to share information which is of general interest, such as frequently asked questions about our regulations, but only after removing personal or proprietary data. However, information submitted to BIS becomes an agency record and therefore might be subject to a Freedom of Information Act request.

How e-mail is handled: We use information you send us by e-mail only for the purpose for which it is submitted (e.g., to answer a question, to send information, or to process an export license application). In addition, if you do supply us with personally identifying information, it is only used to respond to your request (e.g., addressing a package to send you export control forms or booklets) or to provide a service you are requesting (e.g., e-mail notifications). Information we receive by e-mail is disclosed to the public only pursuant to the laws and policies governing the dissemination of information. However, information submitted to BIS becomes an agency record and therefore might be subject to a Freedom of Information Act request.

The use of "cookies": BIS does not use "persistent cookies" or tracking technology to track personally identifiable information about visitors to its Web sites.

Information Protection: Our sites have security measures in place to protect against the loss, misuse, or alteration of the information on our Web sites. We also provide Secure Socket Layer protection for user-submitted information to our Web servers via Web forms. In addition, staff is on-site and continually monitor our Web sites for possible security threats.

Links to Other Web Sites: Some of our Web pages contain links to Web sites outside of the Bureau of Industry and Security, including those of other federal agencies, state and local governments, and private organizations. Please be aware that when you follow a link to another site, you are then subject to the privacy policies of the new site.

Privacy Impact Assessment: The purpose of a Privacy Impact Assessment (PIA) is to ensure there is no collection, storage, access, use or dissemination of identifiable personal information (and for some organizations business information) that is not both needed and permitted.
Commerce USXPORTS Exporter Support System PIA

Further Information: If you have specific questions about BIS' Web information collection and retention practices, please use the form provided.