A technology business prepares to export a batch of advanced optical sensors from the United States to a European distributor, who will then re-export components to customers in Asia. The US export-control team classifies each item under the Export Administration Regulations ("EAR"), the rules administered by the Bureau of Industry and Security ("BIS") that govern US-origin goods, technology, and software. The European subsidiary then looks at the same items under EU dual-use rules and reaches a different conclusion on one product line. Two classification decisions. One product. The discrepancy stalls the transaction and triggers a downstream licence question nobody had anticipated.
EU dual-use classification diverges from BIS / EAR classification in structure, list architecture, threshold criteria, and catch-all controls. An item that requires a BIS licence may need no EU authorisation, or vice versa. The stricter prohibition governs in each jurisdiction, and a business operating across both regimes must satisfy both independently.
This analysis maps the key divergences criterion by criterion, identifies the practical risk flags that arise at the intersection, and sets out when cross-border counsel should be involved before a shipment moves.
Governing Regimes and Administering Authorities
BIS administers the EAR under the authority of the Export Control Reform Act, using IEEPA as the primary emergency powers base. The EAR controls US-origin items, foreign-produced items incorporating a threshold level of US-controlled content, and items produced using certain US technology – the last two categories extending US jurisdiction far beyond the US border.
The EU dual-use regime operates under the EU Dual-Use Regulation, revised and modernised in a regulation that entered into force in 2021. The Regulation is directly applicable across all EU member states, but each member state has a competent authority that administers export licences within its territory. The European Commission coordinates policy and maintains the EU Common List of controlled items, but licensing decisions are national. That structural split – one list, twenty-seven licensing authorities – has no equivalent in the US system, where BIS is the single federal authority.
At the UN level, the Wassenaar Arrangement, the Australia Group, the Missile Technology Control Regime, and the Nuclear Suppliers Group supply the common control lists that both regimes largely translate into their own instruments. In our experience, practitioners treating the Wassenaar lists as identical on each side of the Atlantic are routinely surprised: the translation is close, but it is not exact, and the differences concentrate in the areas most relevant to advanced technology sectors.
How Do the Classification Lists Compare?
Both the EAR's Commerce Control List ("CCL") and the EU Common List use a ten-category structure drawn from the Wassenaar Arrangement, with each category subdivided by type of control (systems, equipment, components, software, technology). On that foundation, however, the two lists diverge in ways that matter operationally.
The CCL assigns each controlled item an Export Control Classification Number ("ECCN"), a five-character code that specifies the category, product group, and reason for control. An ECCN drives the licence determination: which countries require a licence, which licence exceptions are available, and which end-uses trigger a licence requirement regardless of destination. Items that do not fall within an ECCN fall under the catch-all designation "EAR99," which means they are subject to the EAR but do not require a licence for most destinations.
The EU Common List is structured by control list entry number – formatted by category and part – and assigns items to one of the ten categories. There is no direct equivalent of the ECCN as a driver of licence determination in the same mechanical way. Instead, EU member-state authorities apply the entry against the destination, end-use, and end-user to determine the licence requirement. The result is that two member states applying the same EU list entry to the same item destined for the same third country may reach different licensing conclusions, because each authority exercises a degree of national discretion.
Does your dual-use classification procedure account for the possibility that the same item may be controlled under one regime but not the other? And has it been verified that EAR99 does not mean uncontrolled under EU rules?
Threshold Criteria: Where the Technical Parameters Diverge
The most operationally significant divergences arise in the technical thresholds that define when an item falls within a controlled entry. Both regimes nominally translate Wassenaar parameters, but the translation is not always word for word, and updates do not occur on identical schedules.
Processing speed thresholds for information security equipment, performance parameters for sensors, and radiation-hardening specifications for electronics are areas where the CCL and the EU Common List have at various times stated different numeric limits. An item that falls just above the CCL threshold for a given parameter may sit just below the equivalent EU entry, or vice versa. The direction of divergence changes by product line and by the date of the last list update.
Software controls illustrate a further structural divergence. The EAR separately controls technology and software, and the CCL contains dedicated software entries with specific parameters for controlled functionality. The EU Regulation similarly controls technology and software, but the scoping of what constitutes "technology" for the purposes of a particular list entry can produce different results in classification practice. Intrusion software controls – added to both regimes following Wassenaar Agreement decisions – are an area where the exact scope of the EU entry and the EAR entry has been the subject of ongoing technical debate among practitioners.
Calibration is the operational word. A product that passed a classification review two years ago may have moved across a threshold as technical parameters were revised. In our practice, we recommend a scheduled re-classification review at least annually for any product line operating near a threshold, and immediately whenever either regime updates the relevant list entry.
Catch-All Controls: A Significant Structural Difference
Catch-all controls require a licence for the export of items not on the control list where the exporter knows, or has been informed, that they will be used for specified prohibited purposes – proliferation of weapons of mass destruction being the primary example.
Both regimes operate catch-all controls, but the EU Dual-Use Regulation introduced a significantly expanded catch-all in its 2021 revision. Under the EU rules, member states may require authorisation for non-listed items intended for use in connection with human rights violations, internal repression, or mass-surveillance end-uses. This is an EU-specific expansion that has no direct equivalent in the EAR structure. An item that is EAR99 and freely exportable under the EAR may nonetheless require an EU authorisation if the EU catch-all provision is triggered by the end-use or the destination.
The practical implication is that screening for catch-all triggers cannot be conducted on a single-regime basis. A compliance programme that asks only "does this item have an ECCN requiring a licence?" and stops there will miss the EU catch-all dimension for items moving from an EU territory or by an EU-established exporter. The exporter of record matters: the party established in an EU member state who physically places the goods outside EU customs territory is the party on whom the EU obligations fall.
In a recent matter, a technology business that distributed US-origin software had correctly confirmed EAR99 status and applied a standard export transaction for a commercial communications tool. When the EU subsidiary became the re-exporting party, the EU catch-all assessment had not been conducted. The matter required a post-shipment review and a revised compliance procedure before the distribution arrangement could continue. No penalty resulted in that instance, but the position illustrated how a single-regime approach creates blind spots precisely where the regimes diverge most sharply.
Extraterritorial Reach: The BIS Dimension
The EAR's extraterritorial reach is the most significant structural asymmetry between the two regimes. BIS controls extend to foreign-produced items that incorporate US-controlled content above the applicable de minimis threshold, to foreign-produced items that are the direct product of certain US technology or software, and to technology and source code regardless of where it is transmitted or the nationality of the recipient.
The EU Dual-Use Regulation is principally territorial: it applies to exports from EU customs territory, to brokering services provided by EU-established persons, and to certain intra-EU transfers of the most sensitive categories. It does not assert the same extraterritorial reach over foreign-produced goods as the EAR does over US-origin content. The Foreign Direct Product Rule – BIS's primary extraterritorial mechanism, which can bring a foreign-manufactured item within the EAR if it is the direct product of certain US technology – has no EU counterpart.
This asymmetry means that a company operating entirely within EU jurisdiction may find that its products are subject to EAR controls it did not anticipate, because the chipsets or software libraries embedded in its product were produced using US technology. The question "is any US-origin content present, and at what level?" must be part of every dual-use classification exercise for a company operating in the EU, regardless of whether the exporting entity is US-established. We regularly advise European manufacturers and distributors who discover US-origin content in their supply chain only when a US counterparty raises a re-export licence requirement.
The position above covers the standard extraterritoriality analysis. Your facts – the specific US content, the product configuration, the destination, and the end-user – change the analysis materially.
For advice on deemed-export and technology-transfer obligations under the EAR, see our dedicated service page: Deemed Export and Technology Controls under BIS / EAR.
Licence Exceptions and General Authorisations: A Structural Contrast
Licence exceptions under the EAR are codified, named categories – LVS (low-value shipments), TMP (temporary exports), STA (strategic trade authorisation), and others – each with specific eligibility conditions that the exporter must verify and document before relying on them. The exporter self-determines eligibility; BIS does not pre-authorise use of an exception. Documentation must be retained.
The EU regime provides for Union General Export Authorisations ("UGEAs"), which are standing authorisations issued at EU level covering specific items to specified destinations. Member states may also issue national general authorisations covering additional items or destinations. A UGEA covers the exporter by operation of the Regulation, provided eligibility conditions are satisfied and registration requirements in the relevant member state are met. The exporter must register with its competent authority before relying on a UGEA in some member states; in others, use is automatic subject to record-keeping.
The structural contrast matters for a business planning a high-volume distribution programme across multiple destinations. Under the EAR, the self-certification model for licence exceptions is consistent and federal. Under EU rules, the availability of a UGEA for a given item-destination combination depends on which UGEA applies, and the registration and reporting requirements differ by member state. A company shipping from Germany and from the Netherlands to the same third country under the same UGEA may face different notification requirements in each country. That variance is one of the practical operational costs of the twenty-seven-authority structure.
Intra-EU Transfers and the US-Equivalent Gap
The EAR does not generally restrict exports between two US domestic locations; once an item is within US customs territory, the EAR's export controls apply at the point of export from the United States. There is a deemed export rule for technology transferred to foreign nationals within the United States, but no general intra-US transfer restriction for physical goods.
The EU Dual-Use Regulation requires prior authorisation for intra-EU transfers of certain items in Annex IV of the Regulation – items considered particularly sensitive and for which member states cannot individually waive the authorisation requirement. The list is limited, but it covers items at the high end of the sensitivity spectrum: the most controlled categories of nuclear-related equipment and certain biological items among them.
For a business that moves controlled items between EU subsidiaries before final export, the intra-EU transfer obligation layer adds a step that has no EAR counterpart. The practical frequency of Annex IV triggering is low for most commercial technology sectors, but a business in the nuclear-adjacent space or with defence-related product lines should verify whether intra-EU transfers are covered before treating them as unrestricted.
Common Misunderstandings and Practical Risk Flags
The most persistent misunderstanding we encounter is that EAR99 classification ends the export-control analysis. It does not. EAR99 means the item is not on the CCL and does not require a BIS licence for most destinations under normal circumstances. It does not mean the item is uncontrolled under EU rules; it does not address the EU catch-all; and it does not resolve the question of whether a EU-established exporter has EU authorisation obligations independently.
A second common risk flag is the assumption that classification done once is durable. Both regimes update their control lists periodically. Wassenaar Arrangement plenary decisions typically feed into CCL and EU list updates within a defined period, but the timing and the exact translation differ. An ECCN determined as a result of a Wassenaar update may not map precisely to the revised EU entry at the same time. Businesses that classify once and do not schedule review cycles carry a classification risk that grows with time.
A third flag: the identity of the exporter of record. When a US parent ships directly, the EAR obligations fall on the US exporter. When a European subsidiary re-exports US-origin goods from EU territory, it is simultaneously the party carrying EU obligations. Two sets of obligations, one shipment. We have acted for businesses that maintained strong EAR compliance and had no EU programme at all for exactly these transactions.
A fourth flag concerns technology and software transfers. An engineer in an EU-based subsidiary who receives US-origin controlled source code from a US parent is the subject of an EAR deemed export (or re-export) analysis. If that engineer's nationality triggers a licence requirement under the EAR, the question is a US one – but the transfer takes place in EU territory. The EU subsidiary's compliance team must be part of the workflow, not just the US export-control function.
If a transaction is already in motion and a classification gap has surfaced, an early review preserves options. A mid-stream reassessment is far more manageable than a post-shipment enforcement response.
For a comparative analysis of OFAC and BIS / EAR positions on dual-use classification questions, see: OFAC vs BIS / EAR: Dual-Use Classification – Key Divergences.
Addressing the Common Assumption: One Classification Does the Work of Both
A widely held view among in-house teams managing dual-use classification for the first time is that a thorough BIS / EAR classification exercise is sufficient, because the CCL is the more detailed and the more demanding of the two systems. The EU list, on this view, is a subset.
That view is incorrect, and acting on it creates exposure. The EU list is not a subset of the CCL; it is a parallel instrument derived from the same international control arrangements but maintained independently. Three points demonstrate why the two-regime exercise is non-negotiable. First, the EU catch-all for human rights and mass-surveillance end-uses has no EAR equivalent; an EAR99 item may require EU authorisation under this provision. Second, EU general authorisations may cover items for which the EAR requires a specific licence, meaning the EU treatment is sometimes more permissive – and failing to identify that route wastes time and cost. Third, EU member-state competent authorities apply the EU list; if a business has not confirmed the EU position, it is operating on an assumption, not a compliance finding.
Our practice regularly advises exporters who have invested significantly in US export-control compliance and have not built an equivalent EU programme. The gap is not a reflection of bad faith; it is a structural consequence of the US regime's relative prominence in many sectors. Addressing it requires a dedicated EU classification exercise, not a mapping exercise onto the CCL result.
For further analysis of how the EU and Canadian regimes compare on dual-use classification, see: EU Dual-Use Classification vs Canada: Key Divergences.
When to Involve Counsel
There are four points in the product and transaction lifecycle where involving specialist export-control counsel adds the most value and prevents the most cost.
First: at initial product classification, particularly for items with parameters near a threshold, items containing encryption or information security functionality, and items with dual-use characteristics in advanced electronics or sensors. A classification advisory at this stage sets the compliance baseline for all subsequent transactions.
Second: when an existing product is modified or upgraded. A design change that moves a performance parameter across a threshold changes the classification. If the classification review does not track the engineering review, the product ships under a stale determination.
Third: when the distribution model changes – new territory, new re-exporter, new end-user sector. Each change may move the item into a different classification or licence-requirement position under one or both regimes.
Fourth: when an enforcement inquiry is received, a transaction is blocked by a counterparty's compliance team, or a voluntary self-disclosure is being considered. At this point speed matters, and the window to manage the outcome narrows quickly.
To assess your classification position under the EAR and the EU Dual-Use Regulation, or to discuss a specific transaction, contact Calder & Vance at info@caldervance.com.
Related practices
- Deemed Export and Technology Controls – BIS / EAR service – technology-transfer obligations and licence requirements under the EAR
- OFAC vs BIS / EAR: Dual-Use Classification – comparative analysis of US regime positions on controlled items
Frequently Asked Questions: EU Dual-Use Classification and BIS / EAR
Where do the regimes diverge on EU dual-use classification?
The most operationally significant divergences are: the EU's expanded catch-all covering human rights and mass-surveillance end-uses (with no EAR equivalent); differences in the technical threshold parameters for specific list entries, which mean an item can be controlled under one regime but not the other; the EAR's extraterritorial reach through the Foreign Direct Product Rule, which extends US control to foreign-manufactured items with no EU counterpart; and the EU's twenty-seven-authority licensing structure, which produces member-state variation in how the same EU entry is applied.
Which regime is stricter on EU dual-use classification?
Neither regime is categorically stricter. For items within the EAR's extraterritorial reach – US-origin goods, items subject to the Foreign Direct Product Rule, and technology transfers to foreign nationals – the EAR imposes controls that the EU Regulation does not. For items triggering the EU's expanded catch-all, or items near a threshold where the EU entry is broader, EU controls are stricter. The correct analysis is item-specific and destination-specific: the stricter prohibition governs in each jurisdiction, and both must be satisfied independently.
What should a cross-border business do about EU dual-use classification?
A cross-border business should conduct a separate classification exercise under both the CCL and the EU Common List for each controlled product line – not a mapping exercise from one to the other. It should establish a scheduled review cycle to capture list updates and product modifications. It should verify the exporter-of-record position in each shipping jurisdiction and ensure that the EU compliance programme covers the expanded catch-all triggers. Where classification is genuinely uncertain, a classification advisory from specialist export-control counsel before the shipment moves is significantly less costly than a post-shipment review.
About the Author
Viktor Lindqvist advises exporters and trading houses on dual-use export controls, maritime and trade sanctions, and end-use compliance. He has particular experience advising technology businesses, advanced-manufacturing companies, and distributors on classification questions at the intersection of the EAR and EU dual-use rules, including licence applications, end-use certificates, and post-shipment compliance reviews. Calder & Vance – International Sanctions & Export Control Counsel.
About Calder & Vance
Calder & Vance is an independent international sanctions and export-control boutique. We advise multinationals, financial institutions, exporters, and individuals on the major regimes – OFAC and BIS in the United States, OFSI and ECJU in the United Kingdom, the EU Council regulations and the EU General Court, the United Nations Consolidated List, and the regimes of Switzerland, Canada, Australia, the UAE, Singapore, and Japan. Our work is limited to lawful compliance, licensing, delisting, enforcement defence, and due diligence. To discuss a matter, contact info@caldervance.com.
Disclaimer: This material is general information, not legal advice, and is not a substitute for advice on your specific facts. Sanctions and export-control rules change frequently and differ by regime; verify the current position before relying on anything stated here. Calder & Vance does not advise on circumventing or evading sanctions. For advice on your situation, contact info@caldervance.com.