BAE Systems’ US subsidiary has agreed to pay a $36 million civil penalty after US authorities identified 104 violations of American arms export rules, including the unauthorised transfer of sensitive military technical data to China and other countries.