A trading house operating across transatlantic supply chains submits an export filing under the Export Administration Regulations ("EAR" – the US Commerce Department regime governing the export, re-export, and in-country transfer of commercial and dual-use goods) for a shipment of precision optical components. The logistics team assumes a standing authorisation covers the transaction. Three weeks later, BIS queries the filing. The standing authorisation did not apply. The shipment is frozen, the customer is frustrated, and the compliance team is reviewing every licence determination made in the past two years.
Choosing between specific and general licences under BIS / EAR and EU export-control rules is the foundational decision in any dual-use or controlled-technology transaction. The two regimes share the same structural logic – a general authorisation for lower-risk transactions, a specific case-by-case authorisation for everything else – but they diverge sharply on scope conditions, end-use controls, and the documentation required to invoke a standing authorisation. Getting the choice wrong is not a technical oversight. It is the exposure point that regulators examine first.
This analysis sets out the architecture of each regime's authorisation system, maps the key points of divergence, and identifies the risk flags that most frequently arise in cross-border practice. The comparison covers BIS / EAR (United States), the EU dual-use rules, and, where relevant, the UK export-control regime administered by ECJU.
How the BIS / EAR authorisation architecture works
Under the EAR, every export, re-export, or in-country transfer of a controlled item begins with classification. An ECCN (Export Control Classification Number under the US Commerce Control List) determines which licence requirements and exceptions apply. If the ECCN and destination combination triggers a requirement, the exporter must either obtain a specific licence from BIS or confirm that an licence exception (the EAR term for what other regimes call a "general licence" or "open general authorisation") is available and fully satisfied.
The EAR's licence exceptions are self-executing: the exporter assesses eligibility, records the determination, and ships. There is no prior filing with BIS. That self-executing structure is both the system's strength and its largest compliance risk. A determination made without rigorous analysis – or made once and never reviewed when the classification, the destination, or the end-user changes – sits invisibly in a transaction record until an enforcement review surfaces it.
In our cross-border practice, the most frequent source of errors in EAR exception claims is the end-use and end-user conditions. Several licence exceptions restrict the class of permissible end-user, prohibit use in certain programmes or activities, or require an importer statement. These conditions are embedded in the exception text. They are not flagged by the classification itself. A business that identifies the correct ECCN and confirms the destination is not controlled-country-restricted has done only part of the work.
How the EU authorisation architecture works
EU dual-use export authorisations operate under the EU dual-use regulation, which sets a tiered system: Union general export authorisations ("UGEAs" – standing authorisations covering defined items, destinations, and conditions, available to all EU exporters without a prior registration obligation under some UGEAs), national general authorisations (issued by individual member states for items and destinations they choose to cover), and individual licences (case-by-case authorisations equivalent to a BIS specific licence).
The EU architecture differs from the EAR in one structurally important respect. Several UGEAs require the exporter to register before first use and to report exports on a periodic basis. The self-executing feature of the EAR licence exception does not have a direct EU parallel for all items. A business that treats a UGEA as unconditional – no registration, no reporting – risks operating without a valid authorisation even where the underlying item and destination are within scope.
Member states also retain authority to introduce national measures that are more restrictive than the EU baseline. In our experience, this means that an authorisation strategy calibrated to the UGEA framework may still require a national individual licence for a specific member state's territory. The regime is EU-wide in its floor; it is not uniform at the ceiling.
What are the key differences between BIS and EU general authorisations?
The two regimes share the concept of a standing authorisation but diverge across five practical dimensions that regularly drive compliance decisions.
Scope and item coverage. EAR licence exceptions typically operate by ECCN and, in some cases, by parameter rating within the ECCN. EU UGEAs operate by Combined Nomenclature code, destination group, and in some instances by technology category. The mapping between a US classification and an EU authorisation category is not direct. A compliance team that has determined EAR eligibility cannot assume UGEA eligibility without a separate EU classification step.
Destination architecture. The EAR uses a country-group scheme that assigns countries to lettered groups, and most licence exceptions are available for some groups but not others. The EU dual-use regulation groups destinations by control tier, with UGEAs covering a defined set of lower-risk destinations. The two destination architectures overlap substantially but not perfectly. A destination covered by an EAR exception may not be covered by a UGEA, and vice versa.
End-use and end-user conditions. Both regimes impose end-use and end-user restrictions on certain authorisations. The EAR conditions are embedded in the exception provisions. EU UGEA conditions include restrictions on military end-use, mass-destruction-programme end-use, and specific prohibited end-user classes. The UGEA conditions in this respect are broadly analogous to EAR restricted-destination prohibitions, but the precise scope of each condition differs. A transaction that passes EAR end-use screening may still fail UGEA conditions if the EU military end-use controls apply to items within the shipment.
Registration and reporting obligations. As noted above, several EU UGEAs require prior registration and periodic export reporting. The EAR does not impose a general registration condition on licence exception use. It does, however, require records to be kept. Both regimes impose record-keeping obligations, and in both cases the records must be capable of demonstrating eligibility at the time of export. The record-keeping standard matters: regulators examining a past transaction will ask whether the exporter documented the determination contemporaneously, not whether it can reconstruct it after a query.
What does your EU licence register look like? In enforcement reviews under both regimes, the absence of a contemporaneous licence determination record is treated as an aggravating factor. This is one of the few areas where the two regimes converge without qualification.
When is a specific licence the right choice?
A specific licence – whether a BIS individual validated licence ("IVL") or an EU individual licence – is the right instrument when the transaction falls outside the scope of every available general authorisation, when the end-user or end-use presents material risk, or when the business needs regulatory certainty for a high-value or long-term supply relationship.
Under the EAR, a specific licence is required wherever no exception applies and the item, destination, and end-use combination triggers a licence requirement from the Commerce Control List. The application is made directly to BIS. Processing times vary by complexity and are not fixed by statute; in our experience, applications for items with significant proliferation or military-use implications take materially longer than standard commercial applications, and applicants should build realistic timelines into contract negotiations rather than assuming a short approval window.
Under the EU dual-use regulation, an individual licence is the route when no UGEA or national general authorisation covers the transaction. It is also the operationally preferable route when the scale of a supply programme makes the registration-and-reporting obligations under a UGEA administratively burdensome, or when the transaction partner requires documentary proof of authorisation status for their own downstream obligations.
In a recent matter, a precision-engineering business supplying controlled components to a regional integrator sought to rely on a UGEA for a multi-year contract. On review, several of the contracted items fell outside the UGEA's item scope, and the integrator's broader programme triggered end-use concerns that the UGEA did not resolve. We advised that an individual licence, though requiring more upfront preparation, provided the only route that covered the full contract scope and gave the integrator the downstream documentation it needed. The application was structured to address the end-use concern directly in the supporting statement. The matter resolved without a supply interruption.
Cross-border risk: where BIS and EU rules apply simultaneously
A transaction originating from an EU exporter may carry EAR obligations if the items are of US-origin or contain US-controlled content above the applicable de minimis threshold (the EAR rule under which items below a specified US-content value percentage avoid re-export licence requirements). This is the EAR's extraterritorial reach. It means that an EU business exporting from within the EU may need both an EU authorisation and an EAR licence determination for the same shipment.
The interaction cuts in the other direction as well. A US exporter whose items are re-exported within the EU by a distributor must ensure that the distributor's re-export is covered by a valid authorisation under both the EAR and the applicable EU national rules. A US specific licence does not authorise a subsequent EU re-export. The distributor needs its own EU authorisation. In practice, this means that supply-chain structuring must address both regimes at the transaction design stage, not at the point of each individual shipment.
UK ECJU obligations add a third layer for businesses with a UK nexus. The UK Export Control Order operates on a classification system that tracks the EU dual-use regulation in many respects but has diverged in certain categories since 2021. A transaction that was covered under EU UGEA architecture prior to the UK's departure from the EU single market may now require a UK open general export licence (OGEL) check as well. The position is not automatic. Does your supply chain team account for the UK classification separately from the EU classification?
The position above covers the structural interaction between regimes. Your specific facts – the goods, the origin of the technology, the re-export route, and the end-user's activities – change the analysis materially. For a preliminary review of your cross-border authorisation position, contact Calder & Vance at info@caldervance.com.
Common risk flags in choosing between specific and general licences
Practitioners advising on EAR matters note that the most consistent source of enforcement exposure is not the selection of the wrong licence type but the failure to re-verify the determination when conditions change. A licence exception that was correctly identified on day one may become inapplicable if the end-user is subsequently added to the Entity List (BIS's list of parties subject to additional licence requirements), if the item is reclassified, or if the export destination changes. The exception determination is not a one-time event. It must be re-run against current conditions at the point of each transaction.
Under the EU dual-use regulation, the equivalent risk flag is the failure to check for updates to the UGEA annexes and to national implementing measures. The EU regime allows member states to add items to national control lists, and UGEAs are periodically amended. A business that has not reviewed its UGEA eligibility since the original determination may be relying on an outdated assessment.
Both regimes impose controls on brokering and technical assistance. A transaction that involves no physical export – a remote technology transfer, a software licence, a training programme – may still require authorisation. This is an area where the parallel structure of the regimes creates genuine traps: the EAR technology controls and the EU's controls on technical assistance do not align precisely, and a business that has analysed only the physical shipment may have missed the technology-transfer dimension entirely.
The following risk flags are the most frequently encountered in our cross-border licensing practice:
- Reliance on a UGEA for items that have moved across an EU/UK classification boundary since the original assessment.
- EAR licence exception claims that do not address end-user screening against the current Denied Persons List and Entity List.
- Dual-nationality technology transfers treated as domestic transactions without EAR analysis.
- Re-exports under a US-origin item covered by a specific licence but not reviewed against EAR re-export provisions.
- UGEA registration obligations overlooked because the exporter has previously shipped under a national general authorisation rather than the UGEA directly.
- Absence of a contemporaneous written determination record for exception or general-authorisation claims.
If a transaction has already been flagged by a regulator, or if an internal review has surfaced a determination that cannot be supported, an early assessment is essential. Options narrow with time, and the availability of a VSD (voluntary self-disclosure to a regulator) route depends on the timeline from identification to disclosure. Contact Calder & Vance at info@caldervance.com to discuss the options.
How the specific-licence process compares across BIS and the EU
BIS specific-licence applications require a structured submission identifying the item by classification, the end-user, the end-use, the destination, and the transaction value. BIS may issue a return without action (RWA) requiring additional information, or it may refer the application to other agencies for input – a process that can extend the timeline substantially. The applicant has no right to a fixed decision period under the standard process, and approval conditions (reporting, end-use verification, re-export restrictions) vary by item and programme.
EU individual licences are issued by the competent national authority of the member state from which the export departs. Processing times and documentation requirements vary by member state. Some member states operate electronic licensing systems with publicly stated processing targets; others operate on a paper-file basis with less predictable timelines. This is a practical asymmetry that affects supply-chain planning for businesses operating from multiple EU member states. A multinational with manufacturing in three member states cannot assume that the process in each state will be equivalent in speed or documentation burden.
Both regimes allow the licence to carry conditions. BIS conditions may include reporting on end-use, restrictions on re-export, and requirements to obtain end-user certificates before delivery. EU individual licence conditions vary by member state and by the nature of the control concern. In our experience, conditions imposed on licences for items with proliferation-relevant applications are the most operationally challenging to implement and monitor across a multi-shipment programme. Designing the downstream controls before the licence is applied for – rather than after approval – is materially easier and produces better outcomes.
Related practices
- BIS / EAR licensing and account management – specialist support for US export-control licence applications and compliance.
- OFAC vs BIS / EAR: specific and general licences compared – analysis of the US sanctions and export-control licensing regimes side by side.
- OFAC vs EU: specific and general licences compared – how the US and EU licensing architectures diverge in practice.
The myth of the interchangeable authorisation
A persistent misconception in cross-border compliance is that a valid authorisation under one regime reduces the compliance burden under another. This appears most often in the form of a belief that a BIS licence "covers" an EU re-export, or that UGEA eligibility confirms EAR exception eligibility. Neither is correct.
The two regimes are legally independent. Each applies its own classification criteria, its own destination architecture, its own end-use and end-user conditions, and its own documentary requirements. A BIS specific licence is issued by BIS under US law. It does not create an authorisation under EU law, and the EU competent authority does not recognise a BIS licence as a substitute for a required EU authorisation. The reverse is equally true.
We regularly advise businesses that have structured a transaction correctly under one regime and overlooked the parallel obligation under the other. The commercial pressure to move quickly is understandable. But the cost of an unlicensed shipment – which under both regimes can include denial of export privileges, significant civil penalties, and in serious cases criminal exposure – is not proportionate to the time saved by skipping the second analysis.
Experience before both BIS and EU competent authorities indicates that regulators take a dim view of an argument that the exporter was authorised under the other regime. The question each authority asks is: were you authorised under our rules? The answer must stand on its own.
When should a business involve export-control counsel?
There is no universal trigger, but our cross-border practice consistently encounters situations where earlier involvement would have prevented a material compliance problem. The patterns that recur most often are: a new product line whose classification has not been formally determined; a new distribution arrangement in a destination that sits at the edge of the general authorisation scope; a transaction where the end-user's activities have changed since the last screening; and a supply programme where the US-origin content of EU-sourced goods has never been assessed for EAR applicability.
Each of these situations is recoverable with early analysis. Each becomes significantly more difficult once a shipment has moved, a regulator has asked a question, or a customer has disclosed a use that was not anticipated.
The decision to involve counsel is also directly relevant to voluntary self-disclosure. Under both the EAR and EU national enforcement frameworks, the availability of a VSD route and the weight given to it in any subsequent enforcement determination depend in part on how quickly the business identified the issue and acted on it. A business that identifies a potential violation and takes no action for months before involving counsel has, in most cases, already narrowed its options.
To stress-test your authorisation strategy, map your cross-regime obligations, or assess a potential exposure, contact Calder & Vance at info@caldervance.com.