{"data":{"id":"us/15-cfr-791.312","jurisdiction":"us","citation":"15 CFR 791.312","heading":"Recordkeeping.","body":"(a) Except as otherwise provided herein, or through subsequent communication with BIS, VCS hardware importers, connected vehicle manufacturers, and/or third-party assessors (if applicable) shall keep all primary business records related to the execution of each transaction for which a Declaration of Conformity, general authorization, or specific authorization would be required under § 791.305, § 791.306, or § 791.307. Primary business records include contracts, import records, commercial invoices, bills of sale, corporate policy documentation, and reports produced by third parties created for the purposes of compliance with this rule. Regardless of whether these transactions are effectuated pursuant to a general authorization, specific authorization, or otherwise, such records shall be available for examination for at least 10 years after the date of such transactions.\n(b) Third-party assessors are required to maintain all records relating to third-party verification or assessment of a U.S. person's compliance with this rule.","path":["Title 15—Commerce and Foreign Trade","Subtitle B—Regulations Relating to Commerce and Foreign Trade","CHAPTER VII—BUREAU OF INDUSTRY AND SECURITY, DEPARTMENT OF COMMERCE","SUBCHAPTER E—INFORMATION AND COMMUNICATIONS TECHNOLOGY AND SERVICES REGULATIONS","PART 791—SECURING THE INFORMATION AND COMMUNICATIONS TECHNOLOGY AND SERVICES SUPPLY CHAIN","Subpart D—ICTS Supply Chain: Connected Vehicles"],"source_url":"https://www.ecfr.gov/api/versioner/v1/full/2026-08-25/title-15.xml","current_through":"2026-08-25","vintage":"","retrieved_at":"2026-08-27T02:24:24Z","sha256":"69f0f36c8678cc7bcd9979e03fb3fa4b3e3b155b3a57d225cfc8cbec6676a62d","source_id":"us-cfr","stale":true,"prev":"us/15-cfr-791.311","next":"us/15-cfr-791.313"},"notice":"GroundRules: Original legal text. Not legal advice."}