§ 800.248 TID U.S. business.

The term TID U.S. business means any U.S. business that:

(a) Produces, designs, tests, manufactures, fabricates, or develops one or more critical technologies;

(b) Performs the functions as set forth in column 2 of appendix A to this part with respect to covered investment critical infrastructure; or

(c) Maintains or collects, directly or indirectly, sensitive personal data of U.S. citizens.

(d) Examples:

(1) Example 1. Corporation A, a U.S. business, operates a munitions plant in the United States that produces a variety of military grade explosives. Some of the explosives manufactured by Corporation A are listed on the USML. Corporation A manufactures critical technologies and is therefore a TID U.S. business.

(2) Example 2. Corporation A, a U.S. business, produces an item (Item A) by purchasing various components from third-party suppliers and integrating them into Item A. One of these components (Component X) is a critical technology, but Item A is not a critical technology. Before integrating Component X into Item A, Corporation A merely verifies the fit and form of Component X solely as part of Item A. Assuming no other relevant facts, Corporation A does not test critical technologies and is therefore not a TID U.S. business.

(3) Example 3. Corporation A is a U.S. business that owns intellectual property rights and equipment for manufacturing a critical technology and maintains the know-how to manufacture that critical technology. It has been six months since Corporation A manufactured the critical technology. Because Corporation A retains the ability to manufacture the critical technology, Corporation A is a TID U.S. business.