22 CFR § 120.50 - Release.
(a) Technical data is released through:
(4) The use of access information to cause technical data outside of the United States to be in unencrypted form.
(b) Authorization for a release of technical data to a foreign person is required to provide access information to that foreign person, if that access information can cause or enable access, viewing, or possession of the unencrypted technical data.
The following state regulations pages link to this page.