A UK-based defence-component manufacturer receives an order from an Australian distributor. The goods are listed under the UK's Military List and fall within Australia's Defence and Strategic Goods List (DSGL). The manufacturer's legal team assumes that, because Australia is a close UK security partner, the licensing burden will be light on both sides. That assumption costs them eight weeks and nearly costs them the contract.
Export-licence determinations under OFSI and the UK Export Control regime differ from Australia's DFAT-administered system in structure, timing, and the conditions attached to any approval. The two regimes share a common strategic-goods classification architecture but diverge materially on procedural timelines, denial grounds, end-use verification requirements, and the interplay with financial-sanctions obligations. Businesses that treat the two as equivalent miss risk on both ends of the transaction.
This analysis maps the divergence point by point: governing authority, classification methodology, the licence-application procedure, cross-border compliance obligations, common errors, and when to instruct specialist counsel. As of April 2026, both regimes are active and enforcing.
Who administers export-licence determinations in the UK and Australia?
In the United Kingdom, export-licence determinations sit with two separate authorities whose remits partially overlap, and that division is the first thing businesses miss. The Export Control Joint Unit (ECJU) administers strategic export controls under the Export Control Order and related instruments; it receives and decides applications for individual export licences and open licences. OFSI – the Office of Financial Sanctions Implementation, sitting within HM Treasury – administers UK financial sanctions and issues licences to conduct otherwise prohibited transactions involving sanctioned parties. A cross-border transaction involving a sanctioned counterparty and a controlled good therefore engages both authorities simultaneously, under distinct legal tests and distinct application processes.
In Australia, the Department of Foreign Affairs and Trade (DFAT) administers the Defence Export Controls programme under the Defence Export Controls framework, which governs the export of goods, software, and technology listed on the DSGL. Australia does not operate a dedicated financial-sanctions licensing body analogous to OFSI; sanctions licensing flows through the same DFAT machinery, though the legal bases differ between the Autonomous Sanctions regime and the UN-mandated obligations. That consolidation simplifies the contact point for Australian exporters but can obscure the distinct legal tests applying to goods-export approval and sanctions-related authorisation.
The practical consequence is immediate. A UK business exporting dual-use or military goods to or through a party with any sanctions nexus must run parallel processes. An Australian business in the same position handles queries through a single agency but still navigates two legal regimes internally. Neither system offers a single-window determination that resolves both the goods-control and the sanctions-authorisation questions at once.
In our experience, the separation of ECJU and OFSI functions is the single most common structural misunderstanding among UK exporters operating in multi-regime environments. Clients regularly arrive with an ECJU licence in hand, unaware that a financial-sanctions check under OFSI is still outstanding.
How do classification methodologies compare between the two regimes?
Both regimes draw on the Wassenaar Arrangement control lists and the associated international export-control architecture, which creates superficial similarity. The deeper analysis shows meaningful divergence in how each jurisdiction implements those lists, updates them, and applies catch-all controls.
The UK implements the EU-origin dual-use regulation (carried forward in retained law) and the Military List through the Export Control Order. Classification under the UK system references the UK Strategic Export Controls lists, which are periodically updated by statutory instrument. The ECJU provides a commodity-checking service – an informal pre-assessment – but that service does not bind the ECJU and does not constitute a formal determination. A business relying on a commodity-check outcome without a formal licence application carries the classification risk itself.
Australia's DSGL mirrors the Wassenaar lists and the Australia Group, Nuclear Suppliers Group, and Missile Technology Control Regime schedules. DFAT's Defence Export Controls team similarly offers preliminary guidance on classification, but again without legal binding effect. The catch-all provision in the Australian regime permits the minister to require a permit even for goods not formally listed where the exporter knows or has reason to know that the goods may be used in connection with weapons of mass destruction or certain military applications. The UK catch-all operates on a comparable logic under the Export Control Order.
Where the regimes diverge sharply is in the treatment of intangible technology transfers and deemed exports. The UK regime captures technology transfers – including email, verbal disclosure, and remote access – within its control scope. Australia's framework captures the same, but the administrative guidance on how transfers are assessed and what records must be kept differs. For businesses running R&D or engineering operations across both jurisdictions, that gap is operationally significant. Our cross-border practice regularly sees clients who have managed the physical export correctly and overlooked the technology-transfer dimension entirely.
What does the licence-application procedure look like under each regime?
The procedural architecture of the two systems reflects their different administrative traditions, and the differences affect planning, resourcing, and risk management.
Under the UK regime, an ECJU export-licence application is submitted through the online SPIRE system. The ECJU assesses applications against a set of criteria that include end-use, end-user, and destination considerations. Processing times vary by application type and by the volume of applications in the queue; indicative government-published timelines exist, but actual determination periods have differed substantially in periods of high activity. The ECJU may issue a licence with conditions – restrictions on end-use, end-user undertakings, reporting obligations on re-export – and those conditions travel with the goods.
Where a financial-sanctions nexus exists, the exporter must also apply to OFSI for a specific licence under the relevant thematic sanctions regulations. OFSI's licensing process is separate from ECJU's; it applies its own licensing grounds (which vary by regime and include grounds such as humanitarian need, prior obligation, and the overarching public interest test). Having a valid ECJU export licence does not satisfy OFSI's licensing requirement, and having an OFSI licence does not resolve the export-control question. Both must be in place before the transaction proceeds.
In Australia, DFAT's Defence Export Controls team receives permit applications through the DECC Online platform. The processing framework distinguishes between permit types – individual permits, open permits for approved exporters, and brokering permits – and different timelines and documentary requirements apply to each. Australia has progressively moved toward an Approved Exporter scheme that streamlines repeat exporters' access, but first-time applicants or those exporting novel goods categories should not assume light-touch processing.
The key procedural divergence for cross-border operators is the conditionality architecture. UK ECJU licences routinely carry end-use assurance requirements, including pre-shipment and post-shipment checks for certain categories. Australian permits impose their own conditions, and those conditions are not automatically aligned with the UK conditions attached to the same goods. A re-export from Australia to a third country of goods originally exported from the UK is therefore subject to both regimes' conditions simultaneously – and a breach of either set of conditions can trigger enforcement proceedings in the respective jurisdiction.
Where does financial-sanctions exposure interact with export-licence determinations?
The intersection of export controls and financial sanctions is the point of highest regulatory density in any dual-regime transaction, and it is where compliance failures tend to cluster.
OFSI's mandate covers the prohibition of making funds and economic resources available to designated persons. The export of goods with real-world commercial value to or for the benefit of a designated party is capable of constituting the provision of an economic resource, even if the primary regulatory handle is an ECJU export licence. UK businesses therefore face a double gate: the goods must be licensable under export-control rules, and the transaction must be either permissible or licensed under the applicable financial-sanctions regime.
Australia's Autonomous Sanctions regime operates similarly in concept but differs in its list architecture. Australia maintains its own consolidated autonomous-sanctions list administered by DFAT, distinct from the UN Consolidated List. A counterparty that is designated under Australian autonomous sanctions but not listed by OFSI – or vice versa – creates an asymmetric exposure that screening against a single list will miss. In our cross-border practice, we regularly advise clients who screen comprehensively against OFAC's SDN List (OFAC's list of Specially Designated Nationals and blocked persons) and the UN Consolidated List but do not run the Australian consolidated list as a separate check. That gap is becoming more consequential as the two regimes diverge in their listing decisions.
One practical consideration that practitioners frequently encounter is the ownership-and-control question. The UK and EU apply an ownership and control test – the analysis of whether a non-listed entity is caught through a listed person's ownership or direction – which requires looking beyond the direct counterparty to the shareholder and beneficial-ownership structure. Australia's framework applies a comparable analysis, but the administrative guidance differs. A counterparty that passes an ownership-and-control analysis under UK OFSI rules may still require a separate assessment under Australian sanctions rules before the permit question can be resolved.
The position above describes the standard analytical path. Your transaction – the specific goods, the counterparty's ownership structure, the destination, and the route of the shipment – changes the analysis at each step. For an assessment of your exposure under these regimes, contact Calder & Vance at info@caldervance.com.
What are the most common errors businesses make in cross-regime export-licence determinations?
Practitioners advising on UK-Australia export transactions see a consistent set of errors, and correcting them before a shipment is significantly cheaper than responding to an enforcement inquiry afterwards.
The first error is treating the goods classification as resolved once one regime has confirmed it. A commodity check from the ECJU, or a preliminary classification view from DFAT, does not bind the other regime. Goods that fall below the control threshold in one list may sit within it in the other, because list implementations are not perfectly synchronised even when they draw from the same international source.
The second error is the sequential rather than parallel approach to the ECJU and OFSI processes. Businesses that apply to ECJU first, wait for the outcome, and then turn to OFSI lose weeks unnecessarily. The two applications can and should be run simultaneously where a sanctions nexus has been identified at the outset.
The third error is underestimating the reach of the technology-transfer rules. A UK engineer presenting technical data to an Australian partner company's staff in a video call is engaged in a technology transfer. Whether that transfer is controlled depends on the classification of the technology. Businesses that have correctly licensed the physical export but have not separately assessed the technology-transfer question are exposed even though no goods have crossed a border.
The fourth – and in our experience the most damaging – is the failure to map permit conditions across regimes. An ECJU licence may require a pre-shipment end-use check; the Australian permit may require written assurances from the consignee regarding re-export. If either condition is not documented and retained, the licence or permit may be treated as not having been validly used. Record-keeping obligations under both regimes require exporters to maintain documentation for a defined period after the shipment, and a missing record is an enforcement risk even where the substantive transaction was entirely lawful.
A fifth error is assuming that the goods-export determination resolves the brokering or arranging position. If a UK intermediary is facilitating an export between a non-UK supplier and an Australian consignee, that activity may itself require a UK trade-control licence independent of any export licence held by the direct exporter.
How do the enforcement postures of the two regimes compare?
Understanding the enforcement posture of each regime matters for risk calibration, and the two systems differ in both the range of available sanctions and the published guidance on how regulators approach penalty determination.
OFSI has published enforcement guidance that sets out how it approaches civil-monetary-penalty assessments. The guidance describes an aggravated/mitigated framework in which voluntary disclosure, co-operation, and the presence of a compliance programme are factors that can reduce a penalty. OFSI's civil-penalty powers are tied to the Sanctions and Anti-Money Laundering Act ("SAMLA") and the relevant thematic regulations; the penalty ceiling is a function of the value of the breach or a fixed upper figure, whichever is higher. Businesses that identify a potential OFSI breach and are considering whether to disclose should obtain legal advice before approaching OFSI, because the manner of the approach affects how co-operation is assessed.
The ECJU's enforcement posture for export-control violations operates alongside – and separately from – OFSI's. The primary criminal offences under the Export Control Order carry significant custodial sentences and unlimited fines on indictment. Civil-penalty powers also exist for less serious contraventions. ECJU enforcement activity tends to focus on deliberate or wilful violations, but negligent record-keeping failures have also resulted in enforcement action.
Australia's Defence Export Controls regime carries both criminal and administrative penalty mechanisms. DFAT refers serious cases to the Australian Border Force and, where criminal conduct is suspected, to the Commonwealth Director of Public Prosecutions. The penalties on conviction are substantial, and Australia has progressively increased its enforcement activity in the dual-use and military-goods space in line with broader allied export-control coordination.
A common myth in this space is that allied-nation status reduces enforcement risk. It does not. The enforcement frameworks of both the UK and Australia apply irrespective of the nationality of the counterparty or the destination country's ally status. What matters is the classification of the goods, the status of the parties under the applicable lists, and whether a valid licence or permit was held at the time of the transaction.
If a transaction has already been flagged, or a filing has been refused or conditioned in a way your business did not anticipate, an early review can preserve options that narrow with time. Write to Calder & Vance at info@caldervance.com for a confidential review.
When should a business instruct specialist export-control counsel?
The decision to instruct counsel should be made before the problem materialises, not after. Several trigger points in a UK-Australia export transaction warrant specialist input.
The first is classification uncertainty. Where goods sit near a threshold on either the UK Strategic Export Controls lists or the Australian DSGL – or where software or technology is involved and its classification is not clear-cut – a classification opinion from counsel provides a defensible record of reasonable care. That record matters in enforcement proceedings.
The second trigger is the identification of any ownership or beneficial-interest connection to a designated party on any of the relevant lists. At that point, both the ECJU and OFSI processes must be engaged, and the sanctions-related analysis requires an assessment of the applicable licensing grounds and the realistic prospects of approval. Instructing counsel at that stage – rather than after the application has been filed and perhaps refused – preserves the option to present the best possible case.
The third trigger is a notification from either DFAT, ECJU, or OFSI that a transaction is under review or that a licence application has been refused. Refusals can be reviewed; they are not always final. The procedural routes differ between regimes. Under the UK system, a refused ECJU licence application can be appealed to the ECJU Review Team and, beyond that, to the independent Trade Control Consultative Committee. An OFSI licensing refusal may be subject to internal review and, in appropriate cases, judicial review before the High Court. In Australia, DFAT's decision is subject to administrative review mechanisms. Instructing counsel promptly after a refusal preserves the review window.
In a recent matter, a technology company exporting proprietary software tools to an Australian government contractor identified mid-transaction that one element of the software fell within the UK Strategic Export Controls lists. The company had obtained no ECJU licence. We assessed the classification, identified the applicable open-licence route for this category of controlled software to an approved destination, and structured the transaction documentation to bring it within that route. The matter concluded without an enforcement referral. No outcome of that kind can be guaranteed, but early identification of the issue was decisive.
The decision matrix in practical terms is this: where both regimes apply and classification is clear, run the ECJU and DFAT permit processes in parallel; factor in a realistic processing window for each; and build the end-use assurance and record-keeping obligations into the transaction from the outset. Where classification is uncertain, or a sanctions nexus exists, or conditions on a prior licence create ambiguity, counsel should be instructed before the application is submitted. Waiting until a refusal or an enforcement inquiry narrows the options materially.
Related practices
- Deemed export and technology controls under the EAR – US BIS classification, deemed-export analysis, and licence determination for technology transfers
- OFSI vs EU: Export-licence determinations compared – regime-by-regime analysis of UK and EU export authorisation procedures and divergence points
- Licence exception eligibility: BIS EAR vs EU dual-use rules – comparative analysis of exception routes under US and EU export-control frameworks