General Export Permit No. 45 — Cryptography for the Development or Production of a Product

General Export Permit No. 45 — Cryptography for the Development or Production of a Product The Minister of Foreign Affairs, pursuant to subsection 7(1.1)a of the Export and Import Permits Actb, issues the annexed General Export Permit No. 45 — Cryptography for the Development or Production of a Product. S.C. 2004, c. 15, s. 56 R.S., c. E-19 Ottawa, July 27, 2012 The following definitions apply in this Permit. controlled means controlled in any manner that results in control in fact, whether directly through the ownership of securities or indirectly through a trust, an agreement or arrangement, the ownership of any corporation or otherwise. (contrôlé) designated country means Argentina, Australia, Austria, Belgium, Bulgaria, Czech Republic, Denmark, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Japan, Luxembourg, Netherlands, New Zealand, Norway, Poland, Portugal, Republic of Korea, Spain, Sweden, Switzerland, Turkey, Ukraine, the United Kingdom or the United States. (pays désigné) entity means a corporation, a trust, a partnership, a fund or an unincorporated association or organization. (entité) Export Controls Division means the Export Controls Division of the Department of Foreign Affairs and International Trade. (Direction des contrôles à l’exportation) government of a foreign country includes the government of any political subdivision of a foreign country; any agent or agency of a government of a foreign country or its political subdivisions; and any entity controlled by a government of a foreign country or its political subdivisions. (gouvernement étranger) Guide has the same meaning as in section 1 of the Export Control List. (guide) ineligible destination means Afghanistan, Belarus, Burma (Myanmar), Côte d’Ivoire, Cuba, Democratic People’s Republic of Korea, Eritrea, Guinea, Iran, Iraq, Lebanon, Liberia, Libya, Pakistan, Sierra Leone, Syria, Sudan or Zimbabwe. (destination inadmissible) In this Permit, “development”, “information security”, “production”, “software” and “use” have the same meaning as in the Guide under the heading “Definitions of Terms Used in Groups 1 and 2”. Subject to sections 4 and 5 any resident of Canada may, under this Permit, export or transfer from Canada to a designated country any good referred to in item 1-5.A.2. or 1-5.A.3. of the Guide, other than a good that is referred to in item 1-5.A.2.c., or 1-5.A.3.b.; any good referred to in item 1-5.B.2. of the Guide, other than a good that is used in the development or production of a good referred to in any of subparagraphs (a)(i) to (iii) or (b)(ii), or is specially designed to evaluate and validate the information security functions of a good referred to in any of subparagraphs (a)(i) to (iii) or (c)(i) to (iii); any good referred to in item 1-5.D.2. of the Guide, other than software that is used in the development, production or use of a good referred to in any of subparagraphs (a)(i) to (iii) or (c)(ii) or (iii), has the characteristics of a good referred to in any of subparagraphs (a)(i) to (iii) or that performs or simulates the functions of any of those goods, certifies software referred to in subparagraph (ii); and is specially designed or modified to support technology used in the development, production or use of a good referred to in any of subparagraphs (a)(i) to (iii), (b)(i) or (ii) or (c)(i) to (iii). any technology referred to in item 1-5.E.2. of the Guide, other than a technology that is used in the development, production or use of a good referred to in any of subparagraphs (a)(i) to (iii), (b)(i) or (ii) or (c)(i) to (iii). Subject to sections 4 and 5, a good or technology that may be exported or transferred under section 2 may be exported or transferred by a resident of Canada under this Permit to any country, other than a country that is an ineligible destination, if the export or transfer is made to a consignee that is controlled by a resident of Canada; an individual, other than an individual acting on behalf of a foreign country, who ordinarily resides in a designated country; or an entity, other than the government of a foreign country, that has its head office in a designated country. This Permit does not authorize export or transfer to a country that is an ineligible destination; a country that is listed in the Area Control List; a country in respect of which there is an order or regulation made under section 4 of the Special Economic Measures Act or section 2 of the United Nations Act; or a government of a foreign country. This Permit does not authorize the export or transfer of a good or technology that is intended for any use other than the development or production of a product; is used in the development or production of a product that is being developed for, or under contract with, the Government of Canada; is used in the development or production of a product that is intended for the exclusive use of a government of a foreign country; or is also referred to in any item of the Guide other than the items referred to in section 2, unless the export or transfer of the goods or technology is also authorized by another export permit issued under subsection 7(1.1) of the Export and Import Permits Act. A person who exports or transfers under this Permit must provide the following information in writing to the Export Controls Division before making their first export or transfer in a calendar year under this Permit: their name, address, telephone number, facsimile number and email address, if the person that exports or transfers is a corporation, the business number assigned to the corporation by the Minister of National Revenue and the name of a contact person and their address, telephone number, facsimile number and email address, and a description of the product whose production or development will be facilitated by the export or transfer; insert the term “GEP-45” or “LGE-45” in the appropriate field of the form prescribed under the Customs Act if the good exported is required to be reported under that Act; provide to the Export Controls Division, within 15 days after receipt of its request, the records referred to in paragraph (e) in respect of any export or transfer made during the period specified in the request; provide to the Export Controls Division, before January 31, the records referred to in subparagraphs (e)(ii) and (iii) in respect of any export or transfer made during the previous calendar year; and retain the following records for a period of six years after the year in which any export or transfer is made: the item number of the Guide which describes the good or technology, the name and any version number used to identify the good or technology, a description of the product whose development or production is facilitated by the export or transfer, including the name and any version number used to identify the product, the estimated value of the export or transfer and, in the case of a good or technology that can be quantified, the quantity of the export or transfer, the following information in respect of the good or technology: their cryptographic algorithms and the key sizes employed, the function performed by the cryptographic algorithms, and a description of how the keys are generated and managed, the date of the export or transfer, if it is known to the person who exports or transfers, and the consignee’s name, address, telephone number, facsimile number and email address. This Permit comes into force on the day on which it is registered.