The Office of Export Controls (OEC) provides this list of high-risk countries to inform university operations, including international travel, shipping and research collaboration. This list has been compiled from a number of sources, including the University of Colorado Systems Risk Management, the Department of State, the Department of Treasury, the Department of Commerce and the Federal Bureau of Investigation.


High Risk Countries

Please consult with OEC prior to traveling to, or otherwise engaging with (including shipping packagaes or exchanging data and information) a person or entity in the following countries:

  • Afghanistan
  • Algeria
  • Belarus
  • Burma/Myanmar*
  • Cambodia
  • Central African Republic
  • China**
  • Cuba*
  • Cyprus
  • Egypt

  • Ethiopia
  • Eritrea
  • Guinea
  • Iran*
  • Iraq
  • Liberia
  • Libya
  • Niger
  • North Korea*
  • Russia**

  • Sierra Leone
  • Somalia
  • South Sudan
  • Sudan
  • Syria*
  • Taiwan
  • Ukraine/Crimea and Donbas Regions*
  • Venezuela
  • Yemen

*Countries marked with an asterisk are subject to broad economic sanctions and embargoes from the Department of Treasury's Office of Foreign Assets Control (OFAC). Travel to these countries will require approval from OEC and potentially prior authorization from the United States Government.
 
**Countries marked with two asterisks, in addition to other risks, have a significant number of entities and individuals on government restricted and/or denied party lists. Please consult with the Office of Export Controls prior to engagement with individuals or entities in these countries, whether through travel or other methods.
 

Travel:

The FBI has stated that US travelers are priority targets for cyber-attack, data theft, and monitoring/surveillance, particularly if they are known to be engaged in classified or proprietary research in a STEM field (science, technology, engineering or mathematics).

Electronic devices and the information on these devices may be at risk of both physical tampering and cyber-attacks. In rare circumstances, electronic devices in a traveler's possession may be subject to involuntary official government review (such as foreign customs officers temporarily seizing devices). Additional risks include government retaliation for public comments deemed to be overly-critical or contrary to public morals. High value travelers may also become inadvertently involved in geopolitical actions, such as imprisonment on false pretenses in order to be exchanged for individuals in U.S. custody.

Additional recommendations:

  • Do not take sensitive or private information with you to a High Risk country. If possible, use a sanitized laptop that allows for access to required applications while minimizing any personal or controlled information that is taken abroad. Please see your department IT program to see if there are loaner laptops or other loaner mobile devices available for your trip.
  • Avoid the use of internet cafes or other types of untrusted internet networks. Do not use public Wi-Fi connections such as Wi-Fi at airports or hotels. If possible, use a reputable VPN when sending or recieving data over a wireless connection.
  • Do not accept thumb drives, or any other type of new/unknown removable device while traveling overseas. These removable devices can contain malware or other types of viruses that can expose your computer to unauthorized access and intrusion.
  • Be aware, certain state of the art, electronic devices may require licenses or additional authorization and documentation prior to leaving the United States. Do not take export controlled hardware, software, or information out of the United States without consulting the University of Colorado Boulder Export Controls Office.