A UK-based technology distributor signs a distribution agreement with a US supplier. The supplier's products carry ECCN (Export Control Classification Number under the US Commerce Control List) markings. The UK distributor's compliance team asks: does OFSI care about these US classification numbers? And if so, what does that mean for our export licence obligations under UK law? These questions sit at the intersection of two regimes that many businesses treat as unrelated.
As of April 2026, OFSI administers UK financial sanctions – it does not itself issue ECCN classifications or export licences. That responsibility falls to the ECJU under the Export Control Order. However, ECCN classifications matter to UK businesses because US-origin goods and technology carry extraterritorial controls under the EAR (the Export Administration Regulations, administered by BIS), and those controls interact directly with UK trade routes, re-export decisions, and sanctions screening. Understanding where OFSI's reach ends and where ECJU and BIS authority begins is the practical question this guide answers.
This guide works through the classification regime step by step, explains the cross-regime interaction between UK financial sanctions and US export controls, identifies the common failure points, and sets out when to involve counsel.
Step 1: Understand which authority governs classification and why OFSI is in the picture
ECCN classification is a US construct, administered by BIS under the EAR, and it governs US-origin items and certain foreign-produced items with US-controlled content or technology. OFSI's role is different: OFSI enforces UK financial sanctions under the Sanctions and Anti-Money Laundering Act ("SAMLA") and the relevant thematic UK sanctions regulations, targeting assets, transactions, and payments rather than the movement of physical goods.
So why does a guide on ECCN classification reference OFSI at all? Because UK businesses regularly encounter three situations where the two regimes intersect. First, a UK exporter of US-origin goods must comply with both the EAR (BIS/ECCN) and UK export controls (ECJU), and any end-user who is a designated person under UK sanctions will also trigger OFSI prohibitions on the financial side of the transaction. Second, a UK financial institution financing a trade that involves controlled goods must screen the counterparty against both OFSI's consolidated list and, for US-nexus transactions, the SDN List. Third, a UK company re-exporting US-origin technology must assess ECCN controls alongside its own UK Strategic Export Licence obligations – and sanctions designations affect both analyses simultaneously.
The practical implication is this: ECCN classification is the starting point for the export-control analysis, but it does not exhaust the compliance obligation. Every classification exercise for a UK business must run in parallel with an OFSI sanctions screen and, for US-nexus transactions, an OFAC screen. In our experience, firms that treat these as separate workstreams miss interactions that produce liability on both sides.
Step 2: Locate the item on the Commerce Control List – the classification process in sequence
ECCN classification follows a defined sequence: identify the item's technical parameters, compare them against the Export Control Classification Number entries on the Commerce Control List, determine whether any entry matches, and if no entry matches, assign EAR99 (the default designation for items subject to the EAR but not specifically controlled). Each step is technical and fact-specific; the parameters that matter vary by product category.
The sequence in practice runs as follows.
- Define the item precisely. Assemble the technical specifications – performance parameters, materials, software functions, or technology characteristics. Vague product descriptions produce unreliable classifications.
- Identify the relevant product category on the Commerce Control List. The list is organised into ten categories (from nuclear to aerospace and propulsion) and five product groups within each. Start with the category most likely to apply; check adjacent categories for dual-use cross-references.
- Compare the specifications against the ECCN entry parameters. An item is controlled if it meets or exceeds the thresholds stated in the applicable ECCN. "Below threshold" does not automatically mean uncontrolled: some entries capture items by function rather than performance.
- Check for the de minimis rule and the foreign-produced direct product rule. These are the principal routes by which non-US items acquire EAR jurisdiction. The de minimis threshold – set at a defined percentage of US-controlled content by value – determines whether a foreign-produced item is subject to the EAR at all. The direct product rule extends US jurisdiction over items produced using certain US technology or equipment.
- Assign the classification: ECCN or EAR99. Document the reasoning. An undocumented classification provides no audit trail and limited mitigation value if a question later arises.
This is not a one-time exercise. Products evolve, and so do the entries on the Commerce Control List. A classification that was correct at product launch may be incorrect eighteen months later if the technical specifications change or if BIS amends the relevant entry. Review triggers should be built into the product lifecycle, not treated as one-off events.
How does the UK export-control regime align with ECCN classification?
The UK operates its own export-control regime under the Export Control Order, administered by the ECJU. The UK's control list is derived from international agreements – primarily the Wassenaar Arrangement, the Missile Technology Control Regime, and the Australia Group – and it runs parallel to, but separately from, the US Commerce Control List. A UK exporter cannot simply rely on an ECCN classification to satisfy UK licence requirements: the two lists are not identical, and a controlled item under the EAR may carry different or additional controls under the UK regime, and vice versa.
The mapping exercise matters. In our cross-border practice, we routinely see businesses assume that an EAR99 item requires no UK licence. That assumption is wrong in a meaningful number of cases. Some items with no US-controlled classification carry a UK Strategic Export Licence requirement because of military, paramilitary, or security end-use concerns. Conversely, some items that are ECCN-controlled for US-origin reasons fall below the UK control threshold. Neither regime's classification can substitute for the other.
For UK businesses, the ECJU is the licensing authority. The OFSI financial-sanctions check runs alongside but does not replace the ECJU assessment. What OFSI does add is this: if the end-user or a party in the supply chain appears on the UK financial sanctions consolidated list, OFSI prohibitions apply to the payment and financing of the transaction – even if the ECJU assessment would otherwise support a licence. Both analyses must be completed before a transaction proceeds.
The position above covers the standard case. Your facts – the technical parameters of the item, the end-user's profile, the transaction route, and the regimes in play – change the analysis. For an initial assessment of your classification obligations under the UK and US regimes, contact Calder & Vance at info@caldervance.com.
Step 3: Run the OFSI sanctions screen and the parallel US screens
Once the classification is established, the sanctions screen must run against every party in the transaction: exporter, freight forwarder, end-user, consignee, financial institution, and any intermediate entity that appears in the ownership or control chain. This is not a formality. A correctly classified item shipped to a sanctioned end-user is still a sanctions violation, regardless of whether a licence would otherwise have been available.
Under OFSI, the key question is whether any party to the transaction is a designated person under the relevant UK sanctions regulations, or whether a non-designated entity is owned or controlled by a designated person. The UK ownership and control test differs from the US approach. OFSI and the EU apply a control test in addition to the ownership threshold – meaning an entity can be caught even where no single listed person owns a majority stake, if a designated person holds effective control through voting rights, board composition, or contractual arrangements. This distinction is operationally significant: it requires a deeper ownership investigation than a threshold-based screen alone will produce.
For transactions with a US nexus, a parallel OFAC screen is required. OFAC applies the 50 percent rule (OFAC's rule treating entities owned 50 percent or more in the aggregate by blocked persons as themselves blocked), but OFAC's control analysis is narrower. The divergence between the OFSI/EU control test and OFAC's ownership-focused rule means the same counterparty can produce different screening outcomes across regimes. Neither a clean OFAC screen nor a clean OFSI screen is sufficient on its own when the transaction touches both regimes.
Singapore, Japan, and the UAE each maintain their own financial-sanctions lists derived from UN Security Council resolutions and, in some cases, autonomous measures. A transaction routing through those jurisdictions requires a screen against the applicable country regime in addition to OFSI and OFAC. Assuming that a clean UN Consolidated List check covers all of these is a common and costly error.
What are the risk flags that practitioners watch for?
Certain patterns recur in matters where classification or sanctions screening has failed. Recognising them early reduces the risk of a mandatory disclosure or enforcement action.
- Product descriptions that lag the technical reality. A product described as a "general-purpose sensor" may have been upgraded to meet military-grade performance thresholds. If the product description has not been updated, the classification will be wrong.
- Software and technology treated as uncontrolled because they are intangible. EAR controls on technology (technical data supporting the development, production, or use of a controlled item) and software apply regardless of the delivery method. An email containing controlled technical specifications is a controlled export. A cloud-based transfer is equally caught. ECJU controls follow the same logic.
- Reliance on a supplier's ECCN without independent verification. A supplier-provided classification is a starting point, not a conclusion. If the item changes or the supplier's classification is wrong, the exporter bears the regulatory exposure. Downstream businesses routinely accept ECCN markings without reviewing the underlying technical basis.
- Ownership chains screened only to the first level. As noted above, both OFSI and OFAC require a search through the full ownership and control structure. Screening tools that return clean results at the direct-counterparty level may miss a sanctioned intermediate holding company at the second or third tier.
- Failure to reassess on re-export or re-transfer. A licence granted for an initial export does not authorise a subsequent re-export to a different end-user or destination. Under the EAR, re-export controls attach to the item wherever it travels. Under the UK regime, re-export and transit licensing requirements apply separately. Compliance programmes that do not track post-shipment use create significant exposure.
- Assuming EAR99 means no controls. EAR99 items can still be restricted under OFAC's country-based sanctions, under ECJU end-use controls, and under anti-boycott and other US trade rules. EAR99 is a classification, not a clearance.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential review.
When does cross-border divergence change the classification outcome?
The same physical item can carry different control statuses under the US and UK regimes – and that divergence has direct operational consequences. Consider a component manufactured in the UK with no US-controlled content. It is subject to the UK Export Control Order and the ECJU licensing regime, but it is not subject to the EAR. The ECCN classification process is irrelevant to it. Now suppose a US supplier provides technical data that supports the component's production. That technical data may bring the component within the scope of the EAR's foreign-produced direct product rule, even though the item itself was manufactured outside the United States.
This extraterritorial reach of US export controls is the most important cross-border divergence a UK practitioner must understand. BIS's authority does not stop at the US border. It follows US-origin technology, software, and certain items into foreign production processes. A UK company that receives US technical data – even under a legitimate technology licence agreement – may be manufacturing items that are subject to US export controls, regardless of whether that company has ever filed anything with a US regulator.
The EU dual-use rules add a third layer. For UK businesses with EU operations or EU subsidiaries, the EU's own dual-use regulation governs intra-EU transfers and exports from EU territory. Post-Brexit, the UK's control list and the EU list are no longer identical. An item controlled under the EU regime may have a different control status under the UK Export Control Order, and vice versa. Businesses operating on both sides of the Channel must maintain separate classification matrices rather than relying on a single determination.
In our practice, we regularly advise businesses that have inherited classification documentation from pre-Brexit compliance programmes. Those programmes often assumed alignment between EU and UK lists. That assumption no longer holds, and a review is warranted in every case where the documentation predates the UK's exit from the EU single market.
Common misconception: OFSI does not issue export licences, so it is not my problem
A recurring assumption among UK exporters is that OFSI is a financial-sanctions authority with no relevance to goods-export compliance, and that all export-related obligations run through the ECJU. This is the most common myth we encounter – and it is wrong in three specific ways.
First, OFSI prohibitions on payments and financial services bite on the financing side of a controlled-goods transaction. A UK exporter that completes a physical shipment under a valid ECJU licence may still commit an OFSI violation if the payment for that shipment passes through a counterparty that is a designated person or is owned or controlled by one. The licence does not authorise the financial transaction.
Second, OFSI's reporting obligation applies to UK financial institutions that handle trade finance for controlled-goods transactions. A bank or trade-finance provider that discovers it is financing a transaction involving a designated end-user must report that to OFSI under the applicable UK sanctions regulations. That obligation runs regardless of whether the exporter has a valid ECJU licence.
Third, OFSI's enforcement posture has moved toward active investigation of financial flows associated with sanctioned trade. Businesses that focus exclusively on export-licence compliance and neglect the financial-sanctions screen are managing half of the regulatory exposure. The two compliance workstreams must be integrated.
This interaction between OFSI's financial-sanctions mandate and the ECJU's export-licensing function is precisely why a practitioner advising a UK exporter of controlled goods must work across both regimes simultaneously. Separating them into different teams without a shared review gate is a structural risk.
Related practices
- Deemed export and technology controls under BIS and the EAR – US-origin technology controls, foreign-national deemed-export analysis, and BIS licensing
- ECCN classification under OFSI: advanced issues – de minimis calculations, direct product rule, and post-shipment verification
- ECCN classification under SECO – Swiss export-control obligations and their interaction with SECO financial sanctions