A European technology company ships a consignment to a distributor in a third country. The goods are classified under EU dual-use rules and the export licence is in order. But the distributor's ultimate parent appears on OFAC's SDN List (OFAC's list of Specially Designated Nationals and blocked persons). Does the EU classification protect the exporter? Almost certainly not – and that gap is where significant exposure arises.
EU dual-use export classification and OFAC sanctions are parallel, independent regimes. Holding an EU export licence does not authorise a transaction that US law prohibits. As of May 2026, any business with a US nexus – including US-dollar payments, US-origin goods, or US-person involvement – must satisfy both regimes before a shipment proceeds.
This guide walks through the classification procedure, identifies where the two regimes interact, and sets out the practical pitfalls that cause well-managed exporters to incur violations. Each step pairs the EU framework with the OFAC analysis that sits alongside it.
Step 1: Understand the two regimes and why both apply simultaneously
EU dual-use controls and OFAC operate on entirely different legal bases, cover different objects, and are enforced by different authorities – yet they fire at the same moment on many cross-border transactions.
EU dual-use rules govern the export, brokering, and transit of goods, software, and technology that can serve both civilian and military applications. The regime covers the physical movement of controlled items from EU territory and, critically, the intangible transfer of technology. Enforcement sits with national competent authorities in each EU member state, with the European Commission providing coordination and oversight at the supranational level.
OFAC, by contrast, administers economic sanctions programmes under IEEPA and other US statutes. Its prohibitions do not attach to goods or technology as such. They attach to persons, entities, and – where a country-wide programme applies – entire jurisdictions. OFAC's reach extends to US persons (citizens, permanent residents, US-incorporated entities, and persons in the United States) and, through secondary-sanctions provisions and de facto US-dollar dominance, to a much wider circle of non-US parties.
The practical intersection is this: a shipment may be lawfully classified under EU rules and covered by a valid EU general or specific export authorisation. Yet if the end-user, the consignee, or an intermediate party in the chain is an SDN or is owned 50 percent or more by blocked persons, OFAC prohibitions apply to any US person involved in the transaction – including the correspondent bank processing the payment. In our experience, exporters who treat EU classification as a complete compliance sign-off are the ones most likely to receive an OFAC query.
Step 2: Classify the item under the EU dual-use list
Classification begins with the EU dual-use list, which is structured around ten categories corresponding to technology and product domains, each subdivided by type of control (export, re-export, transit, brokering).
The classification exercise has four sequential questions. First: does the item appear on the control list by description or by technical parameters? Second: does it fall within a catch-all provision covering items intended – or with reason to believe they are intended – for a proliferation-related programme? Third: is the item subject to any national-level controls in the exporter's member state? Fourth: does a general export authorisation cover the transaction, or is a specific licence required?
Technical parameters matter most at the first stage. The control list entries carry precise numerical thresholds for performance characteristics. If the item sits below the threshold, it is not listed – though catch-all provisions may still apply. Accurate classification requires both an understanding of the item's specification and knowledge of the applicable list entry. In our practice, misclassification most often occurs not from ignorance of the list but from an over-optimistic reading of a performance specification prepared for commercial rather than regulatory purposes.
A note on software and technology: intangible transfers – including technical assistance, training, and electronic transmission of controlled source code – are subject to control separately from the physical goods. An exporter who ships hardware within a valid authorisation but then emails technical parameters or offers remote support may still require a separate authorisation for that transfer.
Step 3: Run the OFAC person and sanctions screen in parallel
Before the first EU classification question is answered, the OFAC screen should already be running. Sanctions compliance is not a final-gate check; it is a parallel process.
The OFAC screen covers five layers. First: the direct counterparty – the buyer or consignee. Second: the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked, applied to all entities in the ownership chain). Third: any intermediate party – freight forwarder, agent, subsidiary, or joint-venture partner. Fourth: the end-user, where known. Fifth: the jurisdiction of the ultimate delivery point and any transit countries subject to country-wide programme controls.
The 50 percent rule warrants particular care. Aggregation applies across multiple listed persons. Two SDNs each holding 26 percent of the same entity together reach the threshold; neither does so alone. Screening tools that check only direct holdings, without tracing indirect ownership, produce a false clean result. How confident are you that your screening tool reads the full ownership chain rather than just the first layer?
OFSI (the UK Office of Financial Sanctions Implementation) applies an ownership and control test (the UK and EU test for whether a non-listed entity is caught through a listed person) that goes further: control, even below 50 percent ownership, can trigger designation-equivalent treatment. The EU applies a similar control analysis in its regulations. A transaction that clears the OFAC 50 percent ownership test may still require careful analysis under OFSI and EU rules if the listed person exercises effective control through board rights, veto powers, or contractual arrangements. Every cross-border transaction involving a potentially linked entity should be assessed against all three regimes, not just one.
The position above covers the standard case. Your facts – the counterparty, the goods, the route, the regime in play – change the analysis. For an initial assessment of how OFAC, OFSI, and EU rules intersect on your specific transaction, contact Calder & Vance at info@caldervance.com.
Step 4: Identify the applicable OFAC programme and any US nexus
Once a potential sanctions concern is identified, the next step is to determine which OFAC programme applies and whether a US nexus exists that brings OFAC into play at all.
OFAC administers multiple discrete programmes. Each operates under its own executive order or statutory basis, covers a defined set of persons or jurisdictions, and carries its own licensing policies. The prohibited transactions, available licences, and enforcement priorities differ between programmes. A transaction involving an SDN designated under one programme may be authorised by a general licence (a standing authorisation that permits a defined category of transactions without a separate application) available under that programme but not another.
US nexus is the jurisdictional hook. It exists wherever the transaction involves a US person (including US-incorporated entities acting outside the United States), where goods or technology are of US origin or contain more than a de minimis proportion of US-controlled content, or where the transaction clears through the US financial system. The last point is practically significant: a euro-denominated payment that routes through a US correspondent bank, or that is intermediated by a bank with US operations, can bring OFAC's prohibitions to bear on what appears to be a purely European transaction.
For exporters with no US ownership, no US staff, and no US-dollar payments, the OFAC nexus may be genuinely absent. But the analysis must be done explicitly, not assumed. We regularly advise European exporters who are surprised to discover that their US-headquartered group insurance policy, their US-listed parent entity, or the US operations of their freight forwarder creates a sufficient nexus to engage OFAC prohibitions.
How do OFAC licensing options interact with EU export authorisations?
Where both regimes apply and a potential prohibition exists under either, the question of licensing arises under each regime independently – and the outcomes do not mirror each other.
An OFAC specific licence (a case-by-case authorisation to conduct an otherwise prohibited transaction) authorises the identified transaction under US law. It does not address EU export-control requirements, which remain governed by the applicable EU general or specific export authorisation from the competent national authority. Conversely, a national competent authority granting an EU export licence makes no determination about OFAC compliance. The two authorisations operate in their own lanes.
The sequencing matters. OFAC licensing decisions can take considerable time, and timelines vary significantly by programme and transaction complexity – verify the current position before relying on any published estimate. EU export authorisations have their own processing windows and may require supporting documentation that overlaps with, but does not duplicate, an OFAC submission. Applicants who submit to one authority first, without preparing for the parallel process, often find that a licence granted by one authority expires or becomes contingent on a decision by the other.
Where a general licence under an OFAC programme covers the transaction, the analysis is faster. General licences operate by their terms: the exporter must confirm that its facts fit within every element of the licence's scope, and must document that confirmation. A common error is reading only the operative paragraph of a general licence and missing a condition or exclusion that defeats the authorisation. Every element of a general licence must be satisfied, not just the first positive condition.
If a transaction has already been flagged, or an application has been refused, an early review preserves options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential assessment.
What are the most common risk flags in EU dual-use classification under OFAC?
In our cross-border practice, the following patterns recur with enough frequency to constitute a risk register for any exporter managing both regimes.
Reliance on a prior classification without re-assessment. An item classified as EAR99 (not subject to the Export Administration Regulations licensing requirements) or as below a dual-use list threshold several years ago may have had its parameters updated, may now be integrated into a system that changes its classification, or may be destined for an end-user whose designation post-dates the classification review. Classification is not a once-and-done exercise.
Treating the distributor as the end-user. Where a distributor will on-sell goods, the end-user screen must reach the distributor's customers. This is standard under both EU and OFAC rules, but the obligation is routinely underweighted in distributor agreements. A contractual commitment from the distributor to apply equivalent screening – backed by an audit right – is not a substitute for the exporter's own due diligence on known or anticipated end-users.
Overlooking the secondary-sanctions dimension. Secondary sanctions do not require a US nexus in the traditional sense. OFAC's secondary-sanctions authorities under certain programmes can expose non-US parties to designation risk if they engage in significant transactions with SDNs or with parties in targeted jurisdictions, even where no US-person involvement exists. A European exporter that considers itself entirely outside OFAC's primary jurisdiction may still face secondary-sanctions risk. This is one of the most consistently misunderstood aspects of the US regime.
Treating technology exports as identical to goods exports. Under both EU rules and the EAR, the transfer of technology – including technical assistance, remote access to controlled systems, and training – is a separate controlled act. An exporter who ships a controlled item under a valid authorisation but provides post-sale technical support without a separate authorisation has committed a separate potential violation.
Incomplete record-keeping. Both regimes impose record-keeping obligations. OFAC expects records sufficient to demonstrate the basis for any compliance determination. Practitioners advising on OFAC matters note that record-keeping failures are a consistent aggravating factor in enforcement actions. Maintaining clear documentation of the classification decision, the screening results, and any licensing analysis is not administrative overhead – it is the primary evidence base if questions arise later.
When should you involve counsel?
This question has a cleaner answer than many compliance officers expect. Involve specialist counsel when the transaction involves any of the following: an end-user or intermediate party for whom a sanctions concern has been identified and cannot be immediately cleared; an item at or near a dual-use list threshold where the classification is genuinely uncertain; a supply chain that passes through a jurisdiction subject to a country-wide OFAC programme; a post-sale technical support obligation that was not assessed at the outset; or any transaction where a voluntary self-disclosure (VSD – a proactive report of an apparent violation to the regulator) is under consideration.
The VSD point is worth particular attention. Both OFAC and OFSI treat a timely and complete VSD as a significant mitigating factor in penalty determinations. But the decision to disclose, the scope of what is disclosed, and the timing are all consequential. A poorly scoped VSD – one that discloses some apparent violations but inadvertently omits related conduct – can be treated less favourably than a well-prepared disclosure. Counsel should be involved before a VSD is submitted, not after a draft has already been prepared internally.
The OFAC classification question is not purely a legal question. It sits at the intersection of technical specification, legal analysis, and operational compliance. Involving counsel with cross-regime fluency – able to read both the EU dual-use list and the relevant OFAC programme simultaneously – produces a more accurate and more defensible result than routing the two enquiries to separate teams in sequence.
Related practices
- Deemed Export and Technology Controls under BIS and the EAR – assessing intangible technology transfers and EAR classification for cross-border transactions
- EU Dual-Use Classification: Catch-All Controls and End-User Screening – detailed guidance on catch-all provisions and distributor due diligence obligations
- EU Dual-Use Licensing Procedures: Application to Decision – step-by-step guidance on EU export authorisation applications and parallel OFAC licensing