A Canadian exporter ships specialised optical equipment to a distributor in a third country. The distributor has plausible commercial credentials. Six months later, the equipment appears in a report linked to a prohibited end-use. Canada's Global Affairs Canada (GAC) opens an inquiry. Was the exporter's end-use assessment sufficient? Could the exporter have seen the risk earlier? The answers carry serious consequences under the Export and Import Permits Act ("EIPA") and the Special Economic Measures Act ("SEMA"), the two instruments that together govern Canada's export-control and sanctions regime.
End-use and end-user controls under Canada require exporters to assess not only whether a good or technology appears on Canada's Export Control List ("ECL"), but also who will use it and for what purpose. GAC administers both streams. As of April 2026, a mis-assessed end-user can expose an exporter to permit revocation, civil penalties, and criminal liability under the EIPA, independent of whether a SEMA-designated party is involved.
This guide walks through the governing regime, the step-by-step assessment a Canadian exporter must conduct, the cross-border considerations that arise when a shipment touches the United States, the European Union, or the United Kingdom, the most common risk flags, and when to involve specialist counsel.
Step 1 – Understand the governing regime: EIPA, SEMA, and GAC's role
Canada's end-use and end-user controls operate through two parallel legal instruments, and a practitioner must read them together from the outset.
The EIPA establishes the Export Control List and the Automatic Firearms Country Control List. It requires exporters to obtain an export permit for goods and technology that appear on the ECL. The ECL is constructed around international control-list commitments – the Wassenaar Arrangement, the Nuclear Suppliers Group, the Australia Group, and the Missile Technology Control Regime. Crucially, the EIPA's permit conditions impose end-use obligations: an exporter who obtains a permit must ensure the goods reach the declared end-user and serve the declared end-use. A diversion that the exporter enabled – or failed to prevent through reasonable diligence – can attract liability even where the initial application was accurate.
SEMA is distinct. It enables Canada to impose economic and trade measures in response to foreign policy situations recognised in law. Designations under SEMA prohibit dealings with named persons and entities. For exporters, a SEMA designation of a foreign end-user is a hard stop: no permit will issue and no permit condition can authorise the shipment. The intersection matters because a distributor can appear entirely off the ECL classification radar while still being SEMA-designated or owned by a designated party.
GAC sits at the centre of both instruments. The Export Controls Bureau within GAC administers the permit process. The sanctions branch manages the SEMA list. In our cross-border practice, exporters frequently treat these as separate teams with separate risk registers. The practical reality is that a single shipment can trigger both simultaneously. Have you mapped your compliance process to cover both streams in a single pre-shipment check?
Step 2 – Classify the goods and identify whether an end-use trigger applies
Before an end-user assessment is necessary, an exporter must confirm classification: not every shipment requires the same depth of end-use scrutiny, but classification errors routinely lead exporters to under-assess the obligation.
The ECL contains groups of controlled goods and technology. Military goods, dual-use items, and certain controlled nuclear and chemical items each carry their own conditions. Dual-use goods (goods designed for civil use but capable of military or weapons-proliferation application) attract the most intense end-use scrutiny because the same item can serve wholly legitimate commercial purposes or contribute to a controlled application depending on who holds it and what they intend to do with it.
The classification exercise must address three questions in sequence. First, does the good or technology appear on the ECL? Second, if it does not appear as described, does a characteristic of the item bring it within a catch-all or a note to a category? Third – and this is where many exporters stop too early – is there a reason, independent of a formal listing, to believe the item could be used in a prohibited end-use? The last question is not rhetorical. Canada's export-permit conditions routinely incorporate end-use declarations, and a permit granted on the basis of an incorrect or incomplete end-use statement is voidable.
A practical point on dual-use items: the fact that a buyer operates in a recognised civilian sector (telecommunications, agriculture, medical devices) does not extinguish the end-use inquiry. In our experience, the riskiest transactions are precisely those where the buyer's commercial profile is entirely plausible but the combination of goods, destination, and stated application raises a concern that a paper review would not surface.
Step 3 – Conduct the end-user assessment: the four-stage diligence sequence
Canada's end-user assessment does not follow a codified checklist in the same way as some other regimes, but GAC's published guidance and the conditions attached to permits together create a de facto standard against which post-event conduct is measured.
The assessment proceeds in four stages.
Stage one: identity verification. Confirm the legal identity of the buyer and the end-user where they differ. Obtain incorporation documents, trade registry details, and, where the transaction involves a distributor or agent, the identity of the known downstream customer. A permit application that names a distributor as end-user without identifying the ultimate recipient creates a diligence gap that GAC may query on review.
Stage two: screening against controlled-party lists. Screen the end-user, the buyer, any intermediary, and the ultimate consignee against the SEMA consolidated list, the United Nations Security Council Consolidated List, and – where the goods have US-origin content or US-developed technology – the OFAC SDN List (OFAC's list of Specially Designated Nationals and blocked persons) and BIS lists including the Entity List. The 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) extends to Canadian subsidiaries of US-origin transactions. That extraterritorial reach is discussed in Step 4.
Stage three: end-use verification. Obtain a written end-use statement from the buyer. Assess whether the stated end-use is consistent with the buyer's sector, the technical specifications of the goods, and any open-source information about the buyer's operations. A statement that a buyer will use military-grade optical equipment in agricultural surveying warrants additional inquiry.
Stage four: red-flag analysis. Before submitting a permit application or releasing goods under a permit, run a structured red-flag review. GAC does not publish a formal red-flag list, but the international control-list organisations' published guidance identifies recurring indicators: unusual payment terms, requests to omit end-user information from documentation, buyers who are unfamiliar with the technical specifications of goods they are purchasing, requests for delivery to a freight forwarder without a named end-user, and destinations that are inconsistent with the buyer's stated market. Any one of these warrants a pause.
Step 4 – Cross-border considerations: how Canada interacts with US, EU, and UK controls
Canada's export-control regime does not operate in isolation. For the great majority of Canadian exporters, the cross-border dimension is not optional analysis – it is a primary risk vector.
US re-export controls. Where goods contain US-origin components, or where technology was developed in the United States, the Export Administration Regulations ("EAR") apply extraterritorially. A Canadian exporter who ships US-origin goods to a third country is required under US rules to assess whether that re-export would require a licence from the Bureau of Industry and Security (BIS). BIS's Entity List and Denied Persons List must be checked alongside GAC's lists. In our practice, the most frequent oversight is treating a GAC permit as sufficient when the goods contain US-content that triggers an independent EAR obligation. The two regimes operate in parallel; a Canadian permit does not satisfy the EAR, and a BIS licence does not satisfy GAC.
EU dual-use controls. Where a Canadian exporter sources components from the EU, or transships through an EU member state, the EU's dual-use regulation can apply. The EU regime uses its own classification list, which overlaps substantially with but is not identical to the ECL. An item that is uncontrolled under one list may be controlled under the other. Exporters operating in both markets should map their products against both lists at the point of product development, not at the point of export.
UK export controls. Post-Brexit, the UK operates a standalone export-control system through the Export Control Joint Unit ("ECJU"). UK-origin goods and UK-incorporated entities are subject to UK controls independently of EU rules. For Canadian exporters with UK subsidiaries or UK-origin inputs, ECJU licensing requirements are a separate obligation. OFSI's financial-sanctions list must also be screened where a UK-connected person is party to the transaction.
The governing principle across all three is consistent: where two or more regimes apply, the stricter prohibition governs for that regime's reach. A transaction that is permissible under Canada's EIPA may still be prohibited under the EAR or require a UK licence. Compliance counsel covering a multi-origin, multi-destination shipment must work through each applicable regime separately.
The position above covers the standard case. Your facts – the origin of components, the destination, the end-user's profile, the contractual chain – change the analysis significantly. For an assessment of your exposure across the relevant regimes, contact Calder & Vance at info@caldervance.com.
Step 5 – Red flags that require escalation before shipment
Certain patterns consistently indicate that a transaction merits review by legal counsel before it proceeds. Identifying these patterns early preserves options; identifying them after the goods have shipped does not.
The following indicators, individually or in combination, warrant escalation.
- The end-user cannot be verified through open sources, trade registries, or commercially available screening databases.
- The buyer's sector does not align with the technical specifications of the goods.
- The contract or the purchase order contains instructions to alter, omit, or misrepresent the goods' technical description in export documentation.
- Payment is routed through a third-country intermediary with no apparent connection to the transaction.
- The shipping destination or route is inconsistent with the buyer's stated commercial location.
- The buyer shows no knowledge of export-licence obligations or requests that the exporter handle all documentation without buyer input.
- The end-use statement is generic, incomplete, or uses language that mirrors a permit condition verbatim without explanation.
These indicators do not, individually, establish a violation. They establish a duty to inquire further. An exporter who proceeds without resolution of a material red flag is exposed to a finding that the permit application was incomplete or that the exporter failed to exercise reasonable diligence under the EIPA's conditions.
A common myth worth addressing here: some exporters believe that once a permit is in hand, end-use obligations are discharged. That is not correct. A GAC export permit is granted on the basis of the declared end-user and end-use. If a shipment is diverted – or if the stated end-use was inaccurate from the outset – the permit does not provide a defence. The obligation to verify extends through the lifecycle of the permitted transaction, and post-shipment record-keeping is part of that obligation.
If a transaction has already been flagged, or if post-shipment information suggests diversion or a mis-stated end-use, early legal review can preserve options that narrow quickly with time. Contact Calder & Vance at info@caldervance.com.
Step 6 – Record-keeping, voluntary disclosure, and enforcement posture
A sound end-use and end-user compliance programme requires documentary evidence that the assessment was conducted, not merely an assurance that it was.
GAC expects exporters to retain records supporting each permit application and each end-use assessment. The record set should include the classification analysis, the end-use statement obtained from the buyer, the screening outputs against controlled-party lists, the red-flag review, and any further diligence conducted in response to a flag. Where goods are exported under a permit, the shipping documentation, the bill of lading, and any post-shipment delivery confirmation should be retained alongside the permit. Verify the current retention period required under the EIPA before setting your document-retention policy.
Voluntary self-disclosure ("VSD") – an exporter's own report to GAC of a potential violation before enforcement action is initiated – is a recognised factor in Canada's export-control enforcement posture. GAC's published guidance acknowledges VSD as a mitigating consideration. A VSD should be submitted only after legal advice: the scope of the disclosure, the framing of the facts, and the decision on whether to disclose at all require analysis of the likely enforcement risk and the applicable limitation period.
Canada's enforcement posture under the EIPA includes both administrative and criminal tracks. Civil penalties under the administrative track can be significant; the criminal track carries potential imprisonment for serious violations. In our cross-border practice, exporters frequently underestimate the criminal exposure because export-control violations are perceived as regulatory rather than penal matters. That distinction is not supported by the statute.
Where a Canadian exporter is also a US person, or holds US-origin goods, a EIPA violation may trigger a parallel BIS referral to the Department of Justice ("DOJ") under US export-control criminal provisions. The cross-border enforcement dimension means that a domestic Canadian compliance failure can become a multi-jurisdiction enforcement matter with considerable speed.
Step 7 – When to involve specialist counsel
Specialist export-control counsel should be involved before a permit application is filed for transactions involving dual-use goods to higher-risk destinations, intermediary distributors without known end-users, or buyers whose profile raises any of the red flags set out in Step 5.
Counsel involvement is also warranted – and should be treated as urgent – in three specific situations: first, where a post-shipment report or a GAC inquiry suggests that goods have been diverted or the end-use was inaccurate; second, where a business is evaluating whether to make a voluntary self-disclosure; and third, where a Canadian exporter receives a request from BIS, OFAC, DOJ, or a foreign regulatory authority that relates, directly or indirectly, to the same shipment.
We regularly advise exporters at each of these stages. The value of early involvement is concrete: it preserves disclosure options, allows a controlled response to an inquiry, and enables the exporter to correct a programme gap before a systemic issue becomes an enforcement file.
A micro-scenario illustrates the point. In a recent matter, a manufacturer of precision measurement instruments received a post-shipment notification that a third-country consignee had resold equipment to a party that appeared on a controlled-party list. The exporter had conducted a permit-stage check but had not documented a post-shipment delivery review. We assessed the apparent violation, advised on the VSD decision, and prepared the disclosure package. The matter was resolved through the administrative track. The absence of a documented post-shipment review was a significant factor in the regulator's initial assessment; the quality of the VSD package was a significant factor in the outcome.
Related practices
- Deemed export and technology controls under the EAR – US BIS classification, deemed-export analysis, and licence applications for technology transfers
- End-use and end-user controls: cross-border guide – multi-regime comparison of end-use obligations across major export-control regimes
- End-use and end-user controls under the EU – EU dual-use regulation, classification, and end-use undertaking requirements