UMass High-Risk and Cyber Risk Travel Destinations

	Country	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Department of State Level 3	US Department of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33 Country of Concern	Executive Order 14150	DOJ Bulk Data Rule
	Collaboration powered by Smartsheet   |   Report Abuse
1	A High-Risk Destination is any domestic or international country, region, province or city designated by the Systemwide Travel Risk Management Advisory Committee (TARMAC), or a campus, as posing substantive health, safety or security risk to a University Traveler and/or the University.	TARMAC High-Risk Destination Criteria	TARMAC Elevated Cybersecurity Risk Destination	Healix Risk Information	US Department of State Travel Advisories	US Department of State Travel Advisories	CDC Travel Health Notices	Country is comprehensively sanctioned	Country has significant restrictions on encryption	National Security Presidential Memorandum (NSPM)-33 identifies the country as a country of concern	Executive Order 14150 Annex	Department of Justice Bulk Data Rule
2	(A)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cybersecurity Risk Destination Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
3	Afghanistan	Yes	Yes	Countrywide	No	Countrywide	No	No	No	No	No	No
4	Albania	No	No	No	No	No	No	No	No	No	No	No
5	Algeria	Yes	No	No	No	Regional	No	No	No	No	No	No
6	American Samoa	No	No	No	No	No	No	No	No	No	No	No
7	Andorra	No	No	No	No	No	No	No	No	No	No	No
8	Angola	Yes	No	Regional	Regional	No	No	No	No	No	No	No
9	Anguilla	No	No	No	No	No	No	No	No	No	No	No
10	Antarctica	No	No	No	No	No	No	No	No	No	No	No
11	Antigua and Barbuda	No	No	No	No	No	No	No	No	No	No	No
12	Argentina	No	No	No	No	No	No	No	No	No	No	No
13	Armenia	Yes	No	Regional	No	Regional	No	No	No	No	No	No
14	Aruba	No	No	No	No	No	No	No	No	No	No	No
15	Australia	No	No	No	No	No	No	No	No	No	No	No
16	Austria	No	No	No	No	No	No	No	No	No	No	No
17	Azerbaijan	Yes	No	Regional	Countrywide	Regional	No	No	No	No	No	No
18	(B)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
19	Bahamas	No	No	No	No	No	No	No	No	No	No	No
20	Bahrain	Yes	No	No	Countrywide	No	No	No	No	No	No	No
21	Bangladesh	Yes	No	Countrywide	Countrywide	Regional		No	No	No	No	No
22	Barbados	No	No	No	No	No	No	No	No	No	No	No
23	Belarus	Yes	Yes	No	No	Countrywide	No	No	Yes	No	No	No
24	Belgium	No	No	No	No	No	No	No	No	No	No	No
25	Belize	Yes	No	No	Regional	No	No	No	No	No	No	No
26	Benin	Yes	No	Regional	No	Regional	No	No	No	No	No	No
27	Bermuda	No	No	No	No	No	No	No	No	No	No	No
28	Bhutan	No	No	No	No	No	No	No	No	No	No	No
29	Bolivia	Yes	No	No	No	Regional	No	No	No	No	No	No
30	Bonaire, Sint Eustatius and Saba	No	No	No	No	No	No	No	No	No	No	No
31	Bosnia and Herzegovina	No	No	No	No	No	No	No	No	No	No	No
32	Botswana	No	No	No	No	No	No	No	No	No	No	No
33	Brazil	Yes	No	No	No	Regional	No	No	No	No	No	No
34	British Indian Ocean Territory	No	No	No	No	No	No	No	No	No	No	No
35	Brunei	No	No	No	No	No	No	No	No	No	No	No
36	Bulgaria	No	No	No	No	No	No	No	No	No	No	No
37	Burkina Faso	Yes	Yes	Countrywide	No	Countrywide	No	No	No	No	No	No
38	Burundi	Yes	No	Countrywide	Countrywide	Regional	No	No	No	No	No	No
39	(C)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
40	Cambodia	Yes	No	Regional	No	Regional	No	No	No	No	No	No
41	Cameroon	Yes	No	Regional	No	Regional	No	No	No	No	No	No
42	Canada	No	No	No	No	No	No	No	No	No	No	No
43	Cape/Cabo Verde	No	No	No	No	No	No	No	No	No	No	No
44	Cayman Islands	No	No	No	No	No	No	No	No	No	No	No
45	Central African Republic	Yes	Yes	Countrywide	No	Countrywide	No	No	No	No	No	No
46	Chad	Yes	Yes	Regional	No	Countrywide	No	No	No	No	No	No
47	Chile	No	No	No	No	No	No	No	No	No	No	No
48	China	Yes	Yes	No	Regional	No	No	No	Yes	Yes	Yes	Yes
49	Christmas Island (Australia)	No	No	No	No	No	No	No	No	No	No	No
50	Cocos [Keeling] Islands (Australia)	No	No	No	No	No	No	No	No	No	No	No
51	Colombia	Yes	Yes	Regional	Countrywide	Regional	No	No	No	No	No	No
52	Comoros	NO	No	No	No	No	No	No	No	No	No	No
53	Congo - Democratic Republic of	Yes	Yes	Countrywide	Countrywide	Countrywide	No	No	No	No	No	No
54	Congo - Republic of	No	No	No	No	No	No	No	No	No	No	No
55	Cook Islands (New Zealand)	No	No	No	No	No	No	No	No	No	No	No
56	Costa Rica	No	No	No	No	No	No	No	No	No	No	No
57	Cote d'Ivoire	Yes	No	Regional	No	Regional	No	No	No	No	No	No
58	Croatia	No	No	No	No	No	No	No	No	No	No	No
59	Cuba	Yes	Yes	No	No	No	No	Yes	No	No	No	Yes
60	Curacao	No	No	No	No	No	No	No	No	No	No	No
61	Cyprus	Yes	No	No	Countrywide	No	No	No	No	No	No	No
62	Czech Republic	No	No	No	No	No	No	No	No	No	No	No
63	(D)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
64	Denmark	No	No	No	No	No	No	No	No	No	No	No
65	Djibouti	Yes	No	No	Regional	No	No	No	No	No	No	No
66	Dominica	No	No	No	No	No	No	No	No	No	No	No
67	Dominican Republic	No	No	No	No	No	No	No	No	No	No	No
68	(E)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
69	East Timor [Timor-Leste]	No	No	No	No	No	No	No	No	No	No	No
70	Ecuador	Yes	No	Regional	Regional	Regional	No	No	No	No	No	No
71	Egypt	Yes	No	Regional	No	Regional	No	No	No	No	No	No
72	El Salvador	No	No	No	No	No	No	No	No	No	No	No
73	Equatorial Guinea	No	No	No	No	No	No	No	No	No	No	No
74	Eritrea	No	No	No	No	No	No	No	No	No	No	No
75	Estonia	No	No	No	No	No	No	No	No	No	No	No
76	eSwatini, Kingdom of (Swaziland)	No	No	No	No	No	No	No	No	No	No	No
77	Ethiopia	Yes	No	Regional	Countrywide	Regional	No	No	No	No	No	No
78	(F)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
79	Falkland Islands (UK)	No	No	No	No	No	No	No	No	No	No	No
80	Faroe Islands (Denmark)	No	No	No	No	No	No	No	No	No	No	No
81	Fiji	No	No	No	No	No	No	No	No	No	No	No
82	Finland	No	No	No	No	No	No	No	No	No	No	No
83	France	No	No	No	No	No	No	No	No	No	No	No
84	French Guiana	No	No	No	No	No	No	No	No	No	No	No
85	French Polynesia	No	No	No	No	No	No	No	No	No	No	No
86	(G)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
87	Gaza Strip	Yes	Yes	Countrywide	No	Countrywide	No	No	No	No	No	No
88	Gabon	No	No	No	No	No	No	No	No	No	No	No
89	Gambia	No	No	No	No	No	No	No	No	No	No	No
90	Georgia	Yes	No	Regional	No	Regional	No	No	No	No	No	No
91	Germany	No	No	No	No	No	No	No	No	No	No	No
92	Ghana	Yes	No	No	Regional	No	No	No	No	No	No	No
93	Gibraltar	No	No	No	No	No	No	No	No	No	No	No
94	Greece	No	No	No	No	No	No	No	No	No	No	No
95	Greenland	No	No	No	No	No	No	No	No	No	No	No
96	Grenada	No	No	No	No	No	No	No	No	No	No	No
97	Guadeloupe	No	No	No	No	No	No	No	No	No	No	No
98	Guam	No	No	No	No	No	No	No	No	No	No	No
99	Guatemala	Yes	No	No	Countrywide	Regional	No	No	No	No	No	No
100	Guinea	Yes	No	Regional	No	No	No	No	No	No	No	No
101	Guinea-Bissau	Yes	No	No	Countrywide	No	No	No	No	No	No	No
102	Guyana	Yes	No	No	Countrywide	No	No	No	No	No	No	No
103	(H)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
104	Haiti	Yes	Yes	Countrywide	No	Countrywide	No	No	No	No	No	No
105	Holy See, The [Vatican City]	No	No	No	No	No	No	No	No	No	No	No
106	Honduras	Yes	No	Countrywide	Countrywide	Regional	No	No	No	No	No	No
107	Hong Kong	No	Yes	No	No	No	No	No	No	No	Yes	No
108	Hungary	No	Yes	No	No	No	No	No	Yes	No	No	No
109	(I)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
110	Iceland	No	No	No	No	No	No	No	No	No	No	No
111	India	Yes	No	Regional	Regional	Regional	No	No	No	No	No	No
112	Indonesia	Yes	No	Regional	No	Regional	No	No	No	No	No	No
113	Iran	Yes	Yes	Countrywide	No	Countrywide	No	Yes	Yes	Yes	No	Yes
114	Iraq	Yes	Yes	Countrywide	No	Countrywide	No	No	No	No	No	No
115	Ireland	No	No	No	No	No	No	No	No	No	No	No
116	Israel	Yes	Yes	Regional	Countrywide	Regional	No	No	Yes	No	No	No
117	Italy	No	No	No	No	No	No	No	No	No	No	No
118	(J)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
119	Jamaica	Yes	No	No	No	Regional	No	No	No	No	No	No
120	Japan	No	No	No	No	No	No	No	No	No	No	No
121	Jordan	Yes	No	Regional	Countrywide	Regional	No	No	No	No	No	No
122	(K)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
123	Kazakhstan	No	Yes	No	No	No	No	No	Yes	No	No	No
124	Kenya	Yes	No	Regional	Regional	Regional	No	No	No	No	No	No
125	Kiribati	No	No	No	No	No	No	No	No	No	No	No
126	Kosovo	Yes	No	No	Regional	No	No	No	No	No	No	No
127	Kuwait	Yes	No	No	Countrywide	No	No	No	No	No	No	No
128	Kyrgyzstan (The Kyrgz Republic)	Yes	No	Regional	No	No	No	No	No	No	No	No
129	(L)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
130	Laos	Yes	No	No	Regional	No	No	No	No	No	No	No
131	Latvia	No	No	No	No	No	No	No	No	No	No	No
132	Lebanon	Yes	Yes	Countrywide	No	Countrywide	No	No	No	No	No	No
133	Lesotho	No	No	No	No	No	No	No	No	No	No	No
134	Liberia	No	No	No	No	No	No	No	No	No	No	No
135	Libya	Yes	Yes	Countrywide	No	Countrywide	No	No	No	No	No	No
136	Liechtenstein	No	No	No	No	No	No	No	No	No	No	No
137	Lithuania	No	No	No	No	No	No	No	No	No	No	No
138	Luxembourg	No	No	No	No	No	No	No	No	No	No	No
139	(M)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
140	Macau	Yes	Yes	No	Countrywide	No	No	No	No	No	Yes	No
141	Madagascar	Yes	No	No	Regional	No	No	No	No	No	No	No
142	Malawi	No	No	No	No	No	No	No	No	No	No	No
143	Malaysia	No	No	No	No	No	No	No	No	No	No	No
144	Maldives	No	No	No	No	No	No	No	No	No	No	No
145	Mali	Yes	Yes	Countrywide	No	Countrywide	No	No	No	No	No	No
146	Malta	No	No	No	No	No	No	No	No	No	No	No
147	Marshall Islands	No	No	No	No	No	No	No	No	No	No	No
148	Martinique	No	No	No	No	No	No	No	No	No	No	No
149	Mauritania	Yes	No	Regional	Countrywide	Regional	No	No	No	No	No	No
150	Mauritius	No	No	No	No	No	No	No	No	No	No	No
151	Mayotte (France)	No	No	No	No	No	No	No	No	No	No	No
152	Mexico	Yes	No	Regional	Regional	Regional	No	No	No	No	No	No
153	Micronesia	No	No	No	No	No	No	No	No	No	No	No
154	Moldova, Republic of	Yes	Yes	No	Regional	No	No	No	Yes	No	No	No
155	Monaco	No	No	No	No	No	No	No	No	No	No	No
156	Mongolia	No	No	No	No	No	No	No	No	No	No	No
157	Montenegro	No	No	No	No	No	No	No	No	No	No	No
158	Montserrat	No	No	No	No	No	No	No	No	No	No	No
159	Morocco	No	Yes	No	No	No	No	No	Yes	No	No	No
160	Mozambique	Yes	No	Regional	No	Regional	No	No	No	No	No	No
161	Myanmar (Burma)	Yes	Yes	Countrywide	No	Countrywide	No	No	Yes	No	No	No
162	(N)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
163	Namibia	No	No	No	No	No	No	No	No	No	No	No
164	Nauru	No	No	No	No	No	No	No	No	No	No	No
165	Nepal	Yes	No	Regional	No	No	No	No	No	No	No	No
166	Netherlands	No	No	No	No	No	No	No	No	No	No	No
167	New Caledonia	Yes	No	No	Countrywide	No	No	No	No	No	No	No
168	New Zealand	No	No	No	No	No	No	No	No	No	No	No
169	Nicaragua	Yes	No	No	Countrywide	No	No	No	No	No	No	No
170	Niger	Yes	Yes	Countrywide	No	Countrywide	No	No	No	No	No	No
171	Nigeria	Yes	No	Countrywide	Countrywide	Regional	No	No	No	No	No	No
172	Niue	No	No	No	No	No	No	No	No	No	No	No
173	Norfolk Island (Australia)	No	No	No	No	No	No	No	No	No	No	No
174	North Korea	Yes	Yes	No	No	Countrywide	No	Yes	No	Yes	No	Yes
175	North Macedonia	No	No	No	No	No	No	No	No	No	No	No
176	Northern Mariana Islands	No	No	No	No	No	No	No	No	No	No	No
177	Norway	No	No	No	No	No	No	No	No	No	No	No
178	(O)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
179	Oman	Yes	No	No	Countrywide	Regional	No	No	No	No	No	No
180	(P)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
181	Pakistan	Yes	No	Countrywide	Countrywide	Regional	No	No	No	No	No	No
182	Palau	No	No	No	No	No	No	No	No	No	No	No
183	Panama	Yes	No	No	No	Regional	No	No	No	No	No	No
184	Papua New Guinea	Yes	No	Countrywide	Countrywide	Regional	No	No	No	No	No	No
185	Paraguay	No	No	No	No	No	No	No	No	No	No	No
186	Peru	Yes	No	Regional	No	Regional	No	No	No	No	No	No
187	Philippines	Yes	No	Regional	Regional	Regional	No	No	No	No	No	No
188	Pitcairn	No	No	No	No	No	No	No	No	No	No	No
189	Poland	No	No	No	No	No	No	No	No	No	No	No
190	Portugal	No	No	No	No	No	No	No	No	No	No	No
191	Puerto Rico	No	No	No	No	No	No	No	No	No	No	No
192	(Q)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
193	Qatar	Yes	No	No	Countrywide	No	No	No	No	No	No	No
194	(R)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
195	Reunion	No	No	No	No	No	No	No	No	No	No	No
196	Romania	No	No	No	No	No	No	No	No	No	No	No
197	Russia	Yes	Yes	Regional	No	Countrywide	No	Yes	Yes	Yes	No	Yes
198	Rwanda	Yes	No	No	Countrywide	Regional	No	No	No	No	No	No
199	(S)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
200	Saba	No	No	No	No	No	No	No	No	No	No	No
201	Saint Barthelemy	No	No	No	No	No	No	No	No	No	No	No
202	Saint Helena	No	No	No	No	No	No	No	No	No	No	No
203	Saint Kitts and Nevis	No	No	No	No	No	No	No	No	No	No	No
204	Saint Lucia	No	No	No	No	No	No	No	No	No	No	No
205	Saint Martin (French part)	No	No	No	No	No	No	No	No	No	No	No
206	Saint Pierre and Miquelon	No	No	No	No	No	No	No	No	No	No	No
207	Saint Vincent and the Grenadines	No	No	No	No	No	No	No	No	No	No	No
208	Samoa	No	No	No	No	No	No	No	No	No	No	No
209	San Marino	No	No	No	No	No	No	No	No	No	No	No
210	Sao Tome and Principe	Yes	No	No	Countrywide	No	No	No	No	No	No	No
211	Saudi Arabia	Yes	Yes	Regional	Countrywide	Regional	No	No	Yes	No	No	No
212	Senegal	No	No	No	No	No	No	No	No	No	No	No
213	Serbia	No	No	No	No	No	No	No	No	No	No	No
214	Seychelles	No	No	No	No	No	No	No	No	No	No	No
215	Sierra Leone	No	No	No	No	No	No	No	No	No	No	No
216	Singapore	No	No	No	No	No	No	No	No	No	No	No
217	Sint Maarten (Dutch part)	No	No	No	No	No	No	No	No	No	No	No
218	Slovakia	No	No	No	No	No	No	No	No	No	No	No
219	Slovenia	No	No	No	No	No	No	No	No	No	No	No
220	Solomon Islands	No	No	No	No	No	No	No	No	No	No	No
221	Somalia	Yes	Yes	Countrywide	No	Countrywide	No	No	No	No	No	No
222	South Africa	No	No	No	No	No	No	No	No	No	No	No
223	South Georgia & South Sandwich Islands	No	No	No	No	No	No	No	No	No	No	No
224	South Korea	No	No	No	No	No	No	No	No	No	No	No
225	South Sudan	Yes	Yes	Countrywide	No	Countrywide	No	No	No	No	No	No
226	Spain	No	No	No	No	No	No	No	No	No	No	No
227	Sri Lanka	No	No	No	No	No	No	No	No	No	No	No
228	Sudan	Yes	Yes	Countrywide	No	Countrywide	No	No	No	No	No	No
229	Suriname	No	No	No	No	No	No	No	No	No	No	No
230	Svalbard and Jan Mayen	No	No	No	No	No	No	No	No	No	No	No
231	Sweden	No	No	No	No	No	No	No	No	No	No	No
232	Switzerland	No	No	No	No	No	No	No	No	No	No	No
233	Syria	Yes	Yes	Countrywide	No	Countrywide	No	Yes	No	No	No	No
234	(T)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
235	Taiwan	No	No	No	No	No	No	No	No	No	No	No
236	Tajikistan	Yes	No	Regional	Regional	No	No	No	No	No	No	No
237	Tanzania	Yes	No	No	Countrywide	No	No	No	No	No	No	No
238	Thailand	Yes	No	Regional	No	Regional	No	No	No	No	No	No
239	Togo	Yes	No	Regional	No	Regional	No	No	No	No	No	No
240	Tokelau	No	No	No	No	No	No	No	No	No	No	No
241	Tonga	No	No	No	No	No	No	No	No	No	No	No
242	Trinidad and Tobago	Yes	No	No	Countrywide	No	No	No	No	No	No	No
243	Tunisia	Yes	Yes	Regional	No	Regional	No	No	Yes	No	No	No
244	Turkey	Yes	No	Regional	No	Regional	No	No	No	No	No	No
245	Turkmenistan	No	No	No	No	No	No	No	No	No	No	No
246	Turks and Caicos Islands	No	No	No	No	No	No	No	No	No	No	No
247	Tuvalu	No	No	No	No	No	No	No	No	No	No	No
248	(U)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
249	Uganda	Yes	Yes	Regional	No	Countrywide	No	No	No	No	No	No
250	Ukraine	Yes	Yes	Countrywide	No	Countrywide	No	Yes	Yes	No	No	No
251	United Arab Emirates	Yes	No	No	Countrywide	No	No	No	No	No	No	No
252	United Kingdom	No	No	No	No	No	No	No	No	No	No	No
253	United States	No	No	No	No	No	No	No	No	No	No	No
254	Uruguay	No	No	No	No	No	No	No	No	No	No	No
255	Uzbekistan	Yes	No	Regional	No	No	No	No	No	No	No	No
256	(V)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
257	Vanuatu	No	No	No	No	No	No	No	No	No	No	No
258	Venezuela	Yes	Yes	Countrywide	Countrywide	Regional	No	No	No	No	No	Yes
259	Vietnam	No	No	No	No	No	No	No	No	No	No	No
260	Virgin Islands, British	No	No	No	No	No	No	No	No	No	No	No
261	Virgin Islands, U.S.	No	No	No	No	No	No	No	No	No	No	No
262	(W)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
263	Wallis and Futuna	No	No	No	No	No	No	No	No	No	No	No
264	West Bank	Yes	No	Countrywide	Regional	No	No	No	No	No	No	No
265	Western Sahara	No	No	No	No	No	No	No	No	No	No	No
266	(Y)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
267	Yemen	Yes	Yes	Countrywide	No	Countrywide	No	No	No	No	No	No
268	(Z)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33	Executive Order 14150	DOJ Bulk Data Rule
269	Zambia	No	No	No	No	No	No	No	No	No	No	No
270	Zimbabwe	No	No	No	No	No	No	No	No	No	No	No
271
272	KEY
273	Last updated 05/18/2026
274	Pink shading indicates the country is designated as a high-risk destination but not an elevated cybersecurity risk destination
275
276	Blue shading indicates the country is designated as an elevated cybersecurity risk destination, but not a high-risk destination
277	Purple sharing indicates the country is designated as both a high-risk and an elevated cybersecurity risk destination