General Export Permit No. 45 — Cryptography for the Development or Production of a Product

5 A person who exports or transfers under this Permit must

• (a) provide the following information in writing to the Export Controls Division before making their first export or transfer in a calendar year under this Permit:

  • (i) their name, address, telephone number, facsimile number and email address,

  • (ii) if the person that exports or transfers is a corporation, the business number assigned to the corporation by the Minister of National Revenue and the name of a contact person and their address, telephone number, facsimile number and email address, and

  • (iii) a description of the product whose production or development will be facilitated by the export or transfer;

• (b) insert the term “GEP-45” or “LGE-45” in the appropriate field of the form prescribed under the Customs Act if the good exported is required to be reported under that Act;

• (c) provide to the Export Controls Division, within 15 days after receipt of its request, the records referred to in paragraph (e) in respect of any export or transfer made during the period specified in the request;

• (d) provide to the Export Controls Division, before January 31, the records referred to in subparagraphs (e)(ii) and (iii) in respect of any export or transfer made during the previous calendar year; and

• (e) retain the following records for a period of six years after the year in which any export or transfer is made:

  • (i) the item number of the Guide which describes the good or technology,

  • (ii) the name and any version number used to identify the good or technology,

  • (iii) a description of the product whose development or production is facilitated by the export or transfer, including the name and any version number used to identify the product,

  • (iv) the estimated value of the export or transfer and, in the case of a good or technology that can be quantified, the quantity of the export or transfer,

  • (v) the following information in respect of the good or technology:

    • (A) their cryptographic algorithms and the key sizes employed,

    • (B) the function performed by the cryptographic algorithms, and

    • (C) a description of how the keys are generated and managed,

  • (vi) the date of the export or transfer, if it is known to the person who exports or transfers, and

  • (vii) the consignee’s name, address, telephone number, facsimile number and email address.