United States companies can face heavy fines if the Department of State discovers they have, without approval or the use of an exemption, exposed non-US-Persons to ITAR-protected products or information such as designs, test data, processes, software code, etc.