Port-call and port-access restrictions: BIS / EAR and EU compared

A vessel on a regular run between European ports and a trading hub in a third market calls at an intermediate port. The shipowner's compliance team discovers, mid-voyage, that the intermediate port is subject to restrictions under both the US Export Administration Regulations and an EU Council Regulation. The cargo includes dual-use components. Two regimes are simultaneously engaged. Which restrictions govern? Do they overlap, conflict, or simply impose parallel obligations that must each be satisfied in full?

Port-call and port-access restrictions under the BIS / EAR and the EU operate on different legal bases, target different triggers, and impose obligations that can run simultaneously on the same operator. The BIS / EAR approach attaches to the item, its classification, and the end-user and end-use chain, including where a vessel calls. The EU approach attaches to the vessel itself, to designated persons connected with it, and to the specific prohibitions in the applicable Council Regulation. Where both regimes apply to the same voyage, the stricter prohibition governs – and in our experience, operators who treat them as interchangeable miss the structural differences that determine liability.

This analysis walks one representative cross-border scenario through both regimes in sequence, mapping points of divergence, identifying the risk flags that practitioners encounter most frequently, and setting out when legal counsel must be engaged before the vessel sails.

The scenario: a dual-use cargo shipment through a restricted intermediate port

A European exporting company ships advanced electronic components – dual-use goods with a US-origin content element – from a port in a Member State to a buyer in South-East Asia. The most efficient routing calls at an intermediate port in a jurisdiction subject to a sector-specific EU Council Regulation and to BIS export-control country-group restrictions. The vessel is third-flag, chartered from an independent owner. Both the shipowner and the charterer are incorporated in EU Member States; the cargo was originally sourced partly from a US supplier.

This scenario is not unusual. In our cross-border practice, multi-leg voyages of this kind routinely engage overlapping controls before departure. The question is always the same: what does each regime require, at what point in the voyage does it bite, and who bears the obligation?

Cargo that incorporates controlled US-origin content carries EAR jurisdiction with it, regardless of where it is subsequently shipped or re-exported. The Foreign Direct Product rules (FDP rules – US authority to regulate the export or re-export of certain foreign-produced items that are the direct product of controlled US technology or software) can extend this reach even to items that are not themselves of US origin. For the EU exporter and the charterer, this means that the BIS analysis does not disappear once the goods leave the United States. It travels with the cargo.

How the BIS / EAR regime applies to port calls

Under the EAR, port-call restrictions do not operate as a stand-alone vessel prohibition. Instead, they arise because the act of routing cargo through a controlled destination – or calling at a port in a jurisdiction subject to country-group restrictions – can constitute a prohibited export, re-export, or transfer of the controlled item.

The Export Control Classification Number (ECCN – the item's classification on the Commerce Control List, which determines which licence requirements apply to it) is the first analytical step. Items designated EAR99 (items subject to the EAR but not listed on the Commerce Control List) carry far fewer restrictions than items with an ECCN that triggers controls for national security, anti-terrorism, or other reasons. But even an EAR99 item can be subject to restrictions if the end-user appears on the Entity List (the BIS list of parties with whom dealings require a licence or are prohibited) or the Denied Persons List, or if the end-use is a prohibited military application.

For our scenario, the intermediate port call introduces a second analytical question: does the physical presence of the cargo in that jurisdiction, even in transit, constitute a re-export or in-country transfer requiring a BIS licence? The answer turns on country-group classification. A jurisdiction's placement in the BIS country groups determines which licence exceptions are available and whether a licence is required at all. A reclassification of a destination changes the analysis prospectively – an important point for operators on fixed routing arrangements that pre-date a regulatory change.

Military end-use and end-user (MEU) restrictions are a particular concern for advanced components. BIS administers MEU controls that can attach to specified destinations regardless of the ECCN of the item. In our experience, exporters of precision electronic components frequently underestimate MEU exposure when their components are capable of integration into military or surveillance systems. The intermediate port call, if it is in a MEU-restricted jurisdiction, can trigger an analysis that was not performed at the original export stage.

A deemed export (the release of controlled technology to a foreign person within the exporting country, treated as an export to their country of nationality) does not directly govern a maritime voyage, but it is relevant where technical data accompany the cargo – for instance, installation manuals or calibration data shared with a port-handling crew.

How the EU regime applies to the same voyage

The EU approach to port-call and port-access restrictions is structurally different. Under EU Council Regulations, port-access restrictions operate as vessel-level prohibitions: a listed vessel, or a vessel associated with a designated person, may be denied access to EU ports and locks. The prohibition is not cargo-contingent. It attaches to the vessel itself.

This distinction matters enormously in practice. Under the EAR, a compliant cargo can still be routed through a restricted jurisdiction if a licence or exception applies. Under the EU regime, a designated vessel cannot access an EU port regardless of what it carries. The two analyses must therefore be run independently – they answer different questions.

The EU ownership and control test (the test for whether a non-listed entity is caught because it is owned or controlled by a designated person) applies to vessels through their corporate owners. A vessel beneficially owned 50 percent or more by a designated person is treated as itself subject to restrictions under the applicable Council Regulation, as currently in force – verify before reliance. The same logic applies to a chartered vessel where the charterer is a designated person or is owned or controlled by one. In our practice, the most common gap we see is a charterer who screens the shipowner but does not screen the beneficial owner of the vessel behind the registered owner.

EU dual-use export controls – governed by the recast EU Dual-Use Regulation – operate in parallel with asset-freeze and vessel-access restrictions. They apply their own classification system, their own licence requirements, and their own end-use certificate obligations. For dual-use cargo routed through the intermediate port in our scenario, the EU exporter must assess compliance with both the asset-freeze regime and the dual-use export-control regime. These are separate analyses, administered by different competent authorities in each Member State.

A designation may also cascade. Under EU rules, making funds or economic resources available, directly or indirectly, to or for the benefit of a designated person is prohibited. Port services, fuel, and pilotage rendered to a designated vessel can fall within that prohibition. Port authorities themselves carry exposure. This is not a theoretical risk: it is a point we regularly advise on for operators who provide services to third-flag vessels in EU waters.

Where the regimes diverge: a criterion-by-criterion comparison

The divergence between the BIS / EAR and EU approaches to port-call restrictions runs through five structural dimensions. Each is a decision point for a cross-border operator.

First, the trigger. BIS restrictions are item-triggered: the ECCN of the cargo, the country-group classification of the destination, and the end-user determine whether a licence is needed. EU vessel-access restrictions are person- and vessel-triggered: the designation of the operator, owner, or vessel is what activates the prohibition.

Second, the legal basis. BIS authority derives from the Export Control Reform Act and the EAR. Enforcement sits with BIS and, for criminal matters, with the US Department of Justice. EU restrictions derive from Council Regulations, which are directly applicable across all Member States. Each Member State enforces through its own competent authority; there is no single EU enforcement body for port-access measures.

Third, the scope of persons bound. The EAR can apply extraterritorially to re-exports of controlled items by non-US persons, particularly through the FDP rules. An EU exporter whose cargo contains controlled US-origin content is therefore subject to both BIS extraterritorial jurisdiction and EU law simultaneously. The EU regime binds EU operators and any operator conducting an activity within EU jurisdiction.

Fourth, the licensing pathway. Under the EAR, a licence or a validated licence exception can authorise a port call or a re-export through a restricted jurisdiction, subject to conditions. Under EU law, a specific licence (a case-by-case authorisation to conduct an otherwise prohibited transaction) may be available for certain transactions with designated persons, but port-access restrictions for designated vessels do not admit the same licensing carve-out – the vessel itself is the problem, not merely the transaction.

Fifth, the insurance dimension. A designation of an insurer cascades into loss of cover for vessels it insures, as currently in force. Loss of insurance cover is itself a compliance trigger for charterers and ports. Under the EAR, loss of insurance is not a direct trigger. Under EU law, the prohibition on providing economic resources to a designated person can reach insurance services, making the coverage analysis inseparable from the sanctions analysis.

Risk flags: where operators make costly mistakes

Regulator inquiries with criminal exposure in the background are increasingly common in the maritime sector. The risk flags below are those we encounter most frequently in engagements that begin as a compliance review and expand into an enforcement matter.

AIS manipulation and transmission gaps. Maritime compliance commonly turns on monitoring Automatic Identification System transmission gaps. A vessel that disables or disrupts its AIS transmitter in a sensitive region creates a significant red flag – not only for regulators but for counterparties who have AIS monitoring obligations under charterparty compliance clauses. Under the EAR, an unexplained AIS gap during a voyage carrying controlled cargo is precisely the kind of pattern that triggers an end-use check failure. Under the EU regime, it is evidence that raises the question of port access in a restricted zone.

Ship-to-ship transfers. Ship-to-ship transfers in international waters are a recognised diversion mechanism. A sharp change in trade flows to a neighbouring or transit jurisdiction is treated as a diversion red flag by both BIS and EU competent authorities. In our experience, operators who accept a ship-to-ship transfer instruction mid-voyage without re-running their compliance analysis expose themselves to attribution risk – particularly where the receiving vessel is associated with a designated person.

Transit without licence analysis. Transit through a third country does not change a controlled item's status. The item retains its ECCN and its country-group restrictions throughout the voyage. Operators who assume that physical transit – as opposed to importation – is outside EAR jurisdiction are consistently wrong. The legal position is clear: origin and end-use analysis follows the item, not the route.

Ownership screening gaps. Port-access restrictions under EU law attach to the vessel and its owners. The beneficial-ownership chain behind a registered shipowner is frequently opaque. A chartered vessel passed through a chain of intermediate beneficial owners can be associated with a designated person at a layer that a name-screen of the registered owner will not detect. Screening that stops at the first legal owner is not by itself a complete control.

Parallel record-keeping obligations. Sanctions records must be kept for five years, as currently in force. Blocked property and rejected transactions are subject to reporting obligations under the EAR and OFAC regimes with short statutory windows. If a vessel call is blocked or a shipment is refused because of a screening hit, the obligation to report runs from the date of the event. Operators who correct the problem and then close the file without reporting make the position significantly worse.

The anti-circumvention dimension: a common misunderstanding

One persistent misconception in the market is that a routing modification – calling at a different intermediate port, or re-flagging a vessel – can remove the controlled item from BIS or EU jurisdiction. This is the myth that staying structurally separate from a restricted jurisdiction is equivalent to legal compliance.

It is not. The EAR follows the item. The EU regime follows the person and the vessel. A re-routing that avoids a port-access restriction may satisfy the vessel-access element of the EU analysis, but it does not change the ECCN of the cargo or the end-use analysis. If the end-user remains the same, the risk remains the same. If the re-routing channels the cargo through a jurisdiction that functions as a transit point for onward delivery to a restricted destination, both regimes treat that as a diversion red flag.

An EU anti-circumvention instrument allows restrictions to be directed at operators in third countries where measures are being circumvented; it was applied for the first time in 2026 – verify the current application against the applicable Council Regulation before relying on it. This development means that the operational response to a port-call restriction must now include an assessment of whether the alternative routing itself engages circumvention exposure. That assessment requires legal advice, not only a logistics calculation.

The position under both regimes is consistent: compliance counsel must be involved before the vessel sails, not after it has arrived in a restricted port. In a recent matter, a trading company sought advice only after a vessel carrying controlled dual-use components had already docked at an intermediate port subject to both BIS country-group restrictions and an EU Council Regulation restriction. The compliance options available before arrival were materially broader than those available once port services had been taken. We conducted an end-use analysis, assessed the voluntary disclosure question, and structured the company's response to a regulator inquiry. The lesson is the same in every comparable engagement: the window for the best outcome closes with the gangway.

Voluntary self-disclosure: the critical decision point

Both the BIS / EAR and the EU enforcement regimes recognise the significance of an operator's response to an apparent violation. Under OFAC's Enforcement Guidelines, voluntary self-disclosure (VSD – disclosure of an apparent violation to the relevant regulator before the regulator independently discovers it) is a recognised mitigating factor. BIS operates an analogous VSD mechanism. In both cases, the posture an operator adopts in the first days after identifying a potential breach shapes the enforcement outcome.

The myth that staying silent is safer than self-disclosing is demonstrably incorrect. Regulators who discover a violation independently – through a counterparty disclosure, a port-authority report, or AIS monitoring – treat the absence of proactive disclosure as an aggravating factor. Under the EAR, facilitation of a prohibited transaction is itself a violation. Silence in the face of a known apparent violation can transform a civil matter into a criminal referral.

EU Member State enforcement authorities operate their own penalty regimes. The EU directive on the criminalisation of sanctions violations sets minimum penalties, with maximum terms of imprisonment of at least five years for serious offences and corporate fines expressed as a percentage of worldwide turnover or a fixed maximum. Member States were required to transpose that directive by May 2025; transposition continued through 2026. For a multinational operator facing a simultaneous BIS inquiry and a Member State enforcement investigation, the absence of a coordinated VSD strategy across both regimes is an avoidable aggravation.

How should an operator structure a cross-regime VSD? The answer is not identical for each regime. BIS, OFAC, and Member State enforcement authorities each have their own procedures, timelines, and requirements. The critical point is sequencing: a disclosure to one authority before a coordinated legal assessment of the position across all relevant authorities can inadvertently narrow the operator's options. This is the case for early engagement with counsel who can assess the full multi-regime exposure before any filing is made.

What a cross-border business must do before a vessel sails

The practical question for a compliance officer or general counsel is not whether these regimes are complex – they are – but what a proportionate pre-voyage compliance process looks like. The decision sequence that follows is based on how we structure the analysis for exporters and charterers on multi-regime maritime matters.

First, classify the cargo under both the EAR (ECCN or EAR99) and the applicable EU dual-use classification. Do not assume that a US classification maps directly to an EU classification: the two systems diverge. If the cargo contains US-origin content above the applicable thresholds, the FDP rules require assessment even if the exporter is not a US person.

Second, screen the voyage: the vessel, its registered owner, its beneficial owner, the charterer, the intermediate ports, and the end-user. Screening that checks only listed names against the EU Consolidated List and the SDN List is insufficient. The ownership chain behind the vessel, the port authority at each call, and the final consignee's own ownership structure must all be assessed. Sanctions screening obligations attach on a risk basis; a name check is not by itself a complete control.

Third, assess the country-group classification of each port of call under the EAR. A jurisdiction's classification determines which licence exceptions are available and whether a licence is required. If a licence is required and no exception applies, the voyage as planned is not compliant.

Fourth, identify any active vessel-access restrictions under the applicable EU Council Regulation. These are not identical to cargo-level restrictions. If the vessel itself is subject to a port-access prohibition, re-routing is a necessary step – but re-routing must itself be assessed for diversion risk and anti-circumvention exposure before implementation.

Fifth, document the analysis. Sanctions records must be kept for five years, as currently in force. A well-documented pre-voyage compliance review is the operator's primary defence in any subsequent enforcement inquiry. Documentation that shows a genuine, structured analysis at the time of the decision consistently produces better outcomes than documentation assembled after a regulator makes contact.

Finally, establish a monitoring protocol for the voyage. AIS gaps, unexpected port calls, and ship-to-ship transfer instructions mid-voyage are not logistical problems to be resolved by the vessel's master alone. They are compliance events that must be escalated to the legal team immediately.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.