A technology exporter ships a component it classifies as EAR99 (the US Commerce Control List designation for items subject to the Export Administration Regulations but not assigned a specific Export Control Classification Number, meaning no licence is required for most destinations). The exporter's compliance team breathes easy. Then a European subsidiary flags that the same item triggers a review under the EU's dual-use rules. Two regimes, one shipment, two entirely different outcomes. Which analysis governs – and what does the gap cost if you get it wrong?
As of April 2026, EAR99 determinations under the US Export Administration Regulations and the EU's dual-use controls operate on distinct legal bases, administered by different authorities, and produce different obligations for the same physical item. A determination that an item is EAR99 under the EAR does not mean it is uncontrolled under EU law, under UK export-control rules, or under the secondary-sanctions overlay that OFAC imposes on certain transactions regardless of classification. The divergences are structural, not incidental, and they decide whether a cross-border shipment proceeds, stalls, or triggers an enforcement inquiry.
This analysis maps the key divergences across the US, EU, and UK regimes, identifies the risk flags that matter most for cross-border businesses, and sets out when specialist counsel should be involved.
What is an EAR99 determination and what legal work does it do?
An EAR99 determination is the US exporter's conclusion that an item is subject to the Export Administration Regulations but is not listed on the Commerce Control List under any specific ECCN (Export Control Classification Number, the alphanumeric code that identifies a controlled item and the reasons for its control). That conclusion removes the licence requirement for most destinations and end-users – but it is not a clean bill of health.
Three qualifications immediately apply. First, EAR99 status is transaction-dependent: the same item may require a licence if it is destined for a prohibited end-use, for a party on the Entity List (BIS's list of foreign persons subject to specific licence requirements), or for a destination subject to a comprehensive US embargo. Second, EAR99 says nothing about whether the item is controlled under another jurisdiction's rules. Third, and critically for any transaction with a sanctions dimension, OFAC's controls run in parallel to the EAR and are not satisfied by an EAR99 determination.
In practice, many compliance functions treat EAR99 as a terminus – the analysis ends when no ECCN attaches. In our experience, that is the single most common structural flaw we identify when reviewing an exporter's programme. The EAR99 label resolves one legal question under one US instrument. It leaves at least three others open.
How does the OFAC layer interact with an EAR99 item?
OFAC's sanctions programmes operate independently of EAR classification. An EAR99 item destined for a party on the SDN List (OFAC's Specially Designated Nationals and Blocked Persons List) is a prohibited transaction under IEEPA-based sanctions regardless of whether a BIS licence is needed. The two regimes are administered by different US government agencies – BIS within the Department of Commerce, OFAC within the Department of the Treasury – and they answer different legal questions.
BIS asks: is this item controlled, and does this export require a licence? OFAC asks: is this counterparty, transaction, or jurisdiction subject to a prohibition or asset-freeze? The first question can be answered with an ECCN classification or an EAR99 finding. The second cannot. A business that clears BIS but ignores OFAC has addressed only half the compliance obligation.
The interaction becomes particularly acute in three scenarios. First, secondary-sanctions risk (exposure that arises not because the exporter is a US person but because the transaction involves US-origin goods, US-dollar clearing, or US persons in the chain) can attach to an EAR99 item even where the exporter is a non-US company. Second, a deemed export – the release of controlled technology to a foreign national in the United States – may require a BIS licence even for EAR99 items if the technology itself carries an ECCN; the interaction requires careful sequencing. Third, the end-use and end-user certifications that BIS requires as a condition of some EAR99 transactions carry independent significance for OFAC's reasonable-care analysis in any subsequent enforcement inquiry.
The position above covers the standard case. Your specific counterparty, the destination, the transaction structure, and the precise nature of the item change the analysis materially.
For advice on your specific EAR99 classification or OFAC overlap, contact Calder & Vance at info@caldervance.com.
Where does EU dual-use law diverge from the EAR99 result?
The EU's dual-use controls are set out in the relevant Council Regulation on dual-use items, administered nationally by each Member State's competent authority. An item that is EAR99 under US law may be listed on Annex I of the EU regulation, which controls items according to a multilateral-derived control list that differs from the US Commerce Control List in its structure, scope, and updating cycle.
The divergence operates at three levels. First, list divergence: the EU list and the US list are derived from overlapping but not identical multilateral control lists. An item that falls outside every US ECCN category may nonetheless appear in an EU dual-use category. The reverse is also true, though less commonly a compliance problem for US-led transactions. Second, catch-all controls: the EU regime includes a broader catch-all provision that can trigger a licence requirement for non-listed items where the exporter has grounds to suspect the item will be used in a weapons-of-mass-destruction programme or in a military application in a country subject to an EU arms embargo. The US EAR contains analogous end-use and end-user controls, but the EU catch-all is applied in practice with somewhat different thresholds across Member States. Third, intra-EU movement: an EAR99 item moved between EU Member States may still require a notification or a general transfer licence under certain conditions, an obligation that has no direct US counterpart.
What does that mean operationally? A European exporter shipping an EAR99 item – US-origin technology re-exported from a European operation – must run both analyses. The EAR99 finding satisfies the BIS classification requirement. It does not satisfy the EU competent authority's requirement to assess the item against the EU dual-use list and the catch-all provision. These are sequential, not alternative, compliance steps.
How does the UK regime add a third layer of analysis?
The UK's export-control system, administered by the ECJU (Export Control Joint Unit, the UK licensing authority), maintains a Strategic Export Control List derived from the same multilateral control lists as the EU regulation but now updated independently following the UK's departure from the EU. As of April 2026, the UK list and the EU list have begun to diverge in pace and in scope, particularly in categories relevant to advanced semiconductors, quantum technology, and advanced manufacturing equipment.
An EAR99 item may therefore clear the US list, clear the EU list in a given Member State, and yet require a licence under the UK Strategic Export Control List – or vice versa. In our cross-border practice, we regularly advise companies that have mapped their product range against only one list, typically the US one, and have not conducted a parallel UK review. The gap is material. The ECJU has increased its scrutiny of export-licence applications in technology sectors, and the consequences of shipping a controlled item without a UK licence are equivalent in severity to a BIS violation for a UK-nexus transaction.
There is also an OFSI dimension. OFSI (the Office of Financial Sanctions Implementation, the UK financial-sanctions authority) operates independently of the ECJU on the sanctions side. Just as OFAC and BIS are separate authorities in the US, OFSI and the ECJU are separate in the UK. An EAR99 determination says nothing about whether a UK financial-sanctions obligation attaches to the transaction, nor about whether the counterparty appears on the UK Consolidated List.
What are the highest-risk divergences a cross-border business faces?
Five divergences generate the most enforcement risk in practice.
1. The re-export chain problem. US-origin EAR99 items exported to a third country are still subject to the EAR's re-export provisions. If that item is subsequently moved to a destination or end-user that would require a US licence, the re-exporter – even if not a US person – may be subject to BIS enforcement. The EU and UK regimes contain analogous controls on re-export, but they are triggered by different criteria and administered by different authorities. A single supply chain can therefore involve simultaneous obligations under three separate export-control regimes.
2. The end-use declaration gap. Under the EAR, certain EAR99 transactions require end-use certificates. The EU and UK have their own end-user-undertaking requirements, which differ in form, scope, and the circumstances in which they can be waived by a general authorisation. A compliance function that collects only one form of end-use documentation may satisfy one regime and fail the other.
3. The catch-all asymmetry. The EU's catch-all provision is activated by the exporter's knowledge or reasonable grounds to suspect a prohibited use. The US end-use and end-user controls are similarly knowledge-based, but the trigger thresholds and the range of covered programmes differ. In practice, an EAR99 item shipped with no red flags under the US analysis may require referral to the competent EU authority before it can be shipped by a European entity.
4. The OFAC–BIS sequencing failure. We have acted for businesses where the export-compliance function correctly identified an item as EAR99 but the sanctions-screening function used a different counterparty list and missed an OFAC designation. The two functions operated in separate silos. The resulting apparent violation required a voluntary self-disclosure exercise and a compliance-programme rebuild that far exceeded the value of the original transaction.
5. The technology-transfer dimension. Deemed exports (the release of controlled technology to a foreign national within the United States, treated as an export to the person's home country) can attach to items that have an ECCN even when the physical item itself is EAR99. In our experience, technology companies frequently underestimate this risk because they focus on physical shipments. The EU and UK contain analogous intangible-technology-transfer controls, which again diverge from the EAR in their precise scope.
If a transaction has already been flagged or an apparent violation has been identified, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com.
How does the stricter-prohibition principle apply across regimes?
Where the US, EU, and UK regimes all attach to the same transaction, the applicable rule is that the strictest prohibition governs. This is not a formal legal principle that appears in any single instrument – it is the practical outcome of operating under multiple parallel regimes simultaneously. A transaction that requires no BIS licence (EAR99), no EU dual-use licence (item not on Annex I, no catch-all trigger), but is prohibited under OFAC sanctions is a prohibited transaction. The two export-control clearances do not cure the OFAC prohibition.
The same logic runs in reverse. An item that is EAR99 under the EAR but is listed on the EU dual-use list requires an EU licence regardless of the US position. A European exporter cannot rely on the US classification as the applicable standard for its obligations under EU law.
This multi-regime interaction is particularly pronounced in technology sectors where supply chains span the US, Europe, and Asia. Practitioners advising on these chains note that the points of greatest divergence – the catch-all provisions, the deemed-export rules, and the re-export chain obligations – are precisely the areas where single-regime compliance programmes fail. Does your programme address all three simultaneously, or does it stop at the first clean classification?
A practical scenario: the three-jurisdiction export chain
In a recent matter, a US-headquartered technology group with a manufacturing operation in a European Member State sought to fulfil a contract with a commercial buyer in a third market. The item had been classified as EAR99 in the US entity's classification log. The European subsidiary, which would physically ship the goods, had not independently verified the EU classification.
We were instructed to conduct a parallel three-regime classification review. The result: the item was EAR99 under the EAR and was not on the EU Annex I list in the applicable entry. However, the third-market buyer's parent company appeared on the EU's restrictive-measures list under a separate sanctions programme. The transaction was prohibited under EU sanctions regardless of the clean export-control classification. An OFAC screen of the same parent company returned a different result – the EU listing did not correspond to an OFAC SDN designation – raising a divergence between the regimes that required specific legal advice before the deal structure could be finalised.
The matter illustrates the three-layer analysis that every cross-border export transaction requires: export-control classification under each relevant regime, sanctions screening under each applicable authority, and a reconciliation of the positions where they diverge. We assessed the exposure, mapped the licensing and authorisation options under the EU regime, and the client was able to restructure the transaction in a way that satisfied both the EU sanctions obligation and the commercial objective.
What are the most common myths about EAR99 and cross-border compliance?
The most persistent myth is that an EAR99 determination satisfies all applicable export-control and sanctions obligations. It does not. EAR99 is a finding under one US instrument, administered by one US agency. It has no legal effect under EU law, under UK export-control rules, or under any OFAC sanctions programme. A compliance policy that treats EAR99 as the end of the analysis leaves the business exposed on at least three dimensions: EU dual-use classification, UK strategic export controls, and OFAC sanctions screening.
A second myth is that the EU list and the US Commerce Control List are effectively the same because both derive from multilateral control lists. The lists share a common origin but are not identical, are updated on different cycles, and are applied by different authorities with different administrative practices. An item that falls outside every US control list category may be on the EU list. Assuming equivalence without independent verification is not a defensible compliance position.
A third myth is that OFAC and BIS are interchangeable arms of the same regulatory system. In fact, they administer different statutory authorities, pursue different policy objectives, and apply different analytical frameworks. A BIS licence does not authorise a transaction that OFAC prohibits. A clean OFAC screen does not satisfy a BIS licence requirement. The two analyses are complementary, not substitutable.
Related practices
- Deemed Export and Technology Controls (BIS/EAR) – classification, licence assessment, and deemed-export programme design for US-technology transactions
- EAR99 Determinations: OFAC vs OFSI Analysis – divergences between the US and UK sanctions overlays on EAR99 items
- EAR99 Determinations: OFSI vs Australia Analysis – comparison of UK and Australian export-control and sanctions obligations for EAR99 goods