A precision-engineering company based in Germany holds a supply agreement with a distributor in South-East Asia. The goods sit squarely on the EU dual-use list. They also incorporate US-origin components that carry an Export Control Classification Number. Two licensing regimes apply simultaneously – and they do not agree on what the exporter must do next.
Export-licence determinations under OFAC and under the EU dual-use regime diverge at almost every level: governing authority, the legal instrument that triggers a requirement, the classification methodology, the licence types available, and the standard of review applied at each stage. As of April 2026, a cross-border exporter who benchmarks only against one regime faces material exposure under the other.
This analysis maps the key divergences criterion by criterion, identifies the risk flags that arise when the two regimes collide, and explains when cross-border counsel should be engaged. It also draws comparisons with the UK position under ECJU where the divergence is practically significant for businesses that previously relied on a unified approach.
What governs export-licence determinations in each regime?
In the United States, export-licence determinations flow from two overlapping bodies of authority: OFAC administers sanctions-based controls under IEEPA and related statutes, while BIS administers the Export Administration Regulations under the Export Control Reform Act. An exporter must satisfy both simultaneously. A transaction may be clear of OFAC sanctions yet still require a BIS licence; conversely, an item may fall outside BIS control but still be caught by an OFAC programme if the end-user or end-use is sanctioned. The two US agencies do not issue joint determinations. Each operates its own application process, its own review timeline, and its own denial authority.
In the EU, the primary authority is the dual-use regulation, which establishes a single common framework administered by competent authorities in each Member State – the export-control authority of the country from which the goods depart. The EU does not have a sanctions licensing body equivalent to OFAC; sanctions authorisations under the relevant Council regulations are handled separately by national competent authorities and, in practice, involve a different team and a different legal test. A European exporter dealing with a dual-use item subject to both EU dual-use rules and an EU sanctions restriction therefore faces two national-level processes with different legal bases.
The structural divergence matters immediately. A US exporter follows a federal process with nationwide uniformity. A European exporter faces a Member-State-level determination that, while guided by common regulation, can vary in interpretation, processing speed, and documentation expectations from one competent authority to another. In our cross-border practice, this inconsistency in national implementation is one of the most common sources of compliance gaps for exporters operating across multiple EU jurisdictions.
How does item classification drive the licence requirement under each regime?
Under the EAR, every item is assigned an ECCN (Export Control Classification Number under the US Commerce Control List), which determines the licence requirement for a given destination, end-user, and end-use combination. If no ECCN applies, the item is classified EAR99 and generally does not require a licence, unless the end-user or end-use is controlled. The classification process is the exporter's responsibility. BIS guidance supports self-classification, but commodity classification requests can be submitted for a formal determination. OFAC's overlay is independent of the ECCN: if the end-user is a Specially Designated National or is located in a comprehensively sanctioned jurisdiction, the ECCN is irrelevant – the transaction is blocked.
Under the EU dual-use regulation, the common list of controlled items is set out at the Union level, but the national competent authority issues the export authorisation. An item that does not appear on the EU control list may still require a national licence if the exporter has reason to believe it could contribute to specified programmes of concern – the so-called catch-all mechanism. The catch-all introduces a subjective element that the EAR does not replicate in the same way; under the EAR, the end-user controls and the Entity List serve a comparable function but operate through a list-based trigger rather than an exporter's knowledge assessment.
Where does this diverge in practice? An item that is EAR99 under US classification may nonetheless appear on the EU dual-use list, and vice versa. A harmonised classification for common goods reduces but does not eliminate this gap, because the EU list and the US CCL track each other imperfectly. We regularly advise exporters who have completed a BIS self-classification and assumed the EU position is aligned – only to discover that the EU control list entry applies different technical parameters.
What licence types are available, and how do they compare?
OFAC issues specific licences and general licences. A specific licence (a case-by-case authorisation to conduct an otherwise prohibited transaction) is applied for directly and reviewed against OFAC's licensing policy for the relevant sanctions programme. A general licence (a standing authorisation that permits a defined category of transactions without a separate application) is self-executing: the exporter or financial institution determines whether the transaction fits within its terms. BIS operates a parallel structure: individual validated licences for controlled items requiring case-by-case approval, and licence exceptions that function similarly to OFAC general licences but are defined by destination, item, and end-user category. Neither the OFAC-specific licence process nor BIS licence-exception analysis has a direct EU equivalent in structure or terminology.
The EU dual-use regime provides Union general export authorisations for defined low-risk destinations, global export authorisations that a Member State can issue to a company for repeated exports of listed items, and individual export authorisations for specific shipments. The global authorisation is the closest EU analogue to a BIS licence exception, but it is issued by a national competent authority rather than at Union level, which means its geographic scope is limited to exports departing from that Member State. A company with operations in multiple EU countries may need a global authorisation from each relevant national authority – a burden with no equivalent in the US federal structure.
For exporters moving the same goods through both the US and EU supply chains, the practical question is whether a BIS licence exception covers the US leg while a national authorisation or Union general authorisation covers the EU leg. They are assessed independently. Approval of one gives no weight to approval of the other. Denial of one does not automatically inform the other authority – though a pattern of denied applications in one regime is a risk signal that warrants attention in any parallel proceeding.
The position above covers the standard case. Your facts – the goods' classification, the end-user, the route, and any US-origin content – change the analysis materially. For a cross-regime classification review or a licence-eligibility assessment, contact Calder & Vance at info@caldervance.com.
Where do OFAC and EU sanctions controls diverge on the export-licence determination itself?
When a sanctions overlay applies – as distinct from the pure export-control classification – the divergence between OFAC and the EU becomes sharper. OFAC's sanctions-based licence determination is transactional: the question is whether this specific transaction, involving this end-user and these goods, is authorised under a general licence or eligible for a specific licence. The legal standard applied by OFAC weighs the US foreign-policy interest, the humanitarian impact, the risk of diversion, and the degree of US nexus. OFAC does not publish a binding decision tree, but its programme-specific licensing policies signal what category of transactions it will and will not approve.
The EU sanctions licensing framework, administered at Member-State level under the relevant Council regulations, applies a different test. Competent authorities assess whether the transaction is consistent with the objectives of the relevant Council decision and whether adequate safeguards against diversion are in place. The EU licensing framework explicitly incorporates humanitarian carve-outs in many programmes and has, in recent years, introduced significant consistency mechanisms between Member States. However, the absence of a single EU-level licensing authority means that interpretive divergence between Member States persists. A licence granted by one competent authority does not automatically authorise the same transaction when goods pass through a second Member State.
Is the EU standard objectively more permissive, or more restrictive? Neither characterisation is accurate across the board. Certain EU programmes impose asset-freeze provisions that go further than their OFAC counterpart in respect of non-US persons. Certain OFAC programmes, particularly those with secondary-sanctions reach, impose obligations on non-US businesses that have no EU equivalent. The correct analytical approach is to identify, for each transaction, which regime imposes the stricter prohibition and ensure compliance with that – because both apply to the same goods if both have nexus.
How does extraterritorial reach affect the comparison?
Extraterritoriality is the single greatest source of practical complexity for cross-border businesses comparing OFAC and EU positions. OFAC's jurisdiction extends to US persons wherever they are located, to transactions conducted in whole or in part in the United States, and to transactions involving US-origin goods, technology, or software – regardless of where the exporter is based. The de minimis and foreign-direct product rules under the EAR extend BIS jurisdiction to non-US-produced items that incorporate US-origin content above specified thresholds or that are the direct product of controlled US technology. A European exporter whose product contains US-origin components may need a BIS licence for a transaction that the EU competent authority would approve without restriction.
The EU operates a strictly territorial licensing framework. The EU dual-use regulation applies to exports departing from EU territory, to brokering services provided by EU persons, and – for the most sensitive categories – to technical assistance and intangible transfers. The EU does not assert extra-territorial jurisdiction over non-EU entities on the basis of EU-content inclusion in the same way that BIS asserts jurisdiction through the foreign-direct product rules. This divergence produces a gap that is commonly misread: a non-EU company that received no EU approval for an export may still have needed one if its goods incorporate EU-controlled technology and an EU-origin content rule were to apply. Conversely, a company that is clear of EU controls may still need a BIS licence because of US-origin components in the product.
If a transaction has already been flagged, or a filing has been refused by one authority, an early review of the parallel regime can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential cross-regime assessment.
The UK position under ECJU adds a third dimension for businesses with UK-based operations or UK-origin content. Following the UK's departure from the EU, the ECJU administers its own strategic export licensing regime. UK exporters can no longer rely on an EU global authorisation or Union general export authorisation. UK-origin content in a product exported from a third country may require a separate UK licence where ECJU controls apply. We have acted for exporters who assumed that EU approval and BIS clearance together covered the UK leg – only to discover that ECJU had a separate control entry for the same item.
What are the principal risk flags and common errors in cross-regime determinations?
The most common error we see is sequential rather than parallel analysis: a compliance team completes the BIS classification, confirms a licence exception applies, and closes the file without running the EU dual-use check. The reverse error is equally frequent. Both are particularly costly when the goods involve US-origin components but are exported from an EU country, because the exporter manages both regimes as owner of the supply chain.
A second risk arises from the catch-all. Under the EU catch-all, an exporter who has information suggesting that a non-listed item may contribute to a programme of concern must notify the competent authority. The failure to make that notification – because the exporter relied on the absence of an EU list entry – can constitute a violation even when the item would have been licensed had the application been made. Under the EAR, the end-user controls and the knowledge standard in the regulations serve a comparable function; an exporter who proceeds with a transaction despite red flags cannot rely on the absence of a formal denial order.
A third risk concerns record-keeping. Both regimes require exporters to maintain records for a defined period. Under the EAR, the record-keeping period is five years from the date of the transaction or the filing of the export control document, whichever is later. EU member-state requirements vary but are generally aligned with a multi-year retention obligation. An exporter who cannot produce contemporaneous classification records, end-user statements, or licensing correspondence faces a materially weaker position in any enforcement review.
A fourth and often underappreciated risk is the deemed export – the release of controlled technology to a foreign national within the exporting country, which is treated by BIS as an export to that person's country of nationality. The EU dual-use regulation addresses intangible transfers and technical assistance, but the deemed-export concept as applied by BIS has no precise EU equivalent. For technology companies and research-intensive manufacturers, this divergence can create exposure that conventional goods-export analysis misses entirely.
Related practices:
- Deemed export and technology controls under BIS and the EAR – analysis of US technology-transfer controls and their application to foreign nationals
- OFSI vs Australia: export-licence determinations compared – practitioner comparison of the UK and Australian licensing regimes
- OFSI vs EU: export-licence determinations compared – analysis of the UK and EU positions following regulatory divergence
A common misconception: EU clearance covers the US requirement
A persistent assumption among European exporters is that obtaining an EU export authorisation – whether a Union general export authorisation or an individual licence from the national competent authority – effectively resolves the question of whether the shipment is lawful. It does not. EU authorisation addresses the EU-law dimension of the transaction. It says nothing about whether BIS jurisdiction attaches because of US-origin content, or whether OFAC prohibits the transaction because the end-user is on the SDN List (OFAC's list of Specially Designated Nationals and blocked persons) or is owned by a listed person at the 50 percent or more threshold.
The converse assumption – that BIS clearance or an OFAC licence resolves the EU dimension – is equally mistaken. OFAC and BIS have no competence over EU law. A specific OFAC licence authorises the US-person dimension and the US-nexus dimension of the transaction; it creates no authorisation under the EU dual-use regulation, no derogation from an EU financial-sanctions asset freeze, and no clearance for EU-law purposes whatsoever.
In our experience, the businesses most exposed to this misconception are those that ran compliance programmes built around a single primary regime and then expanded into a second market without restructuring the analysis. The corrective is a regime-mapping exercise conducted before the supply agreement is signed, not after the goods have shipped. At that point, the options narrow considerably.
When should a cross-border business involve counsel?
Counsel should be involved at the classification stage, not after a licence application has been submitted. By the time an application is under review, the goods description, end-user documentation, and transaction structure are largely fixed. Errors in those materials are difficult to correct without withdrawing and refiling, which restarts the clock and may signal inconsistency to the reviewing authority.
Four situations consistently warrant early involvement. First, any item that has US-origin content and is also on or near the EU dual-use list requires parallel classification work that most in-house compliance teams are not resourced to run simultaneously. Second, any end-user that has indirect connections to a listed person – even below the OFAC ownership threshold – requires an ownership and control (the UK and EU test for whether a non-listed entity is caught through a listed person) analysis before any submission is made. Third, any transaction involving technology transfer, software provision, or technical assistance requires a deemed-export assessment under BIS that goes beyond the goods-export analysis. Fourth, any transaction that has been queried, held, or informally flagged by a freight forwarder, bank, or screening system requires immediate review, because the flag may indicate that the counterparty or the goods have already attracted regulatory attention in one of the relevant regimes.
In a recent matter, a manufacturer of precision industrial equipment faced a licence query from both a BIS-licensed freight forwarder and a national EU competent authority in the same week. The goods incorporated US-origin components above the de minimis threshold and appeared on a specific EU control-list category. We assessed the ECCN, confirmed the applicable BIS licence exception, prepared the EU individual export authorisation application with the necessary end-user undertakings, and managed the communications with both authorities. The matter was resolved without a finding of violation. Had either application been submitted without knowledge of the parallel proceeding, the risk of inconsistent representations to two regulators would have been significant.
To discuss a licence application, a classification review, or a parallel-regime compliance assessment, contact Calder & Vance at info@caldervance.com.