A European technology exporter signs a distribution agreement with a US-based reseller. The goods have been classified under the EU dual-use list. The reseller then asks whether the same items require a US export licence before re-export to a third country. The exporter's compliance team has never run the analysis under the Export Administration Regulations (the EAR, the primary US export-control instrument administered by the Bureau of Industry and Security, BIS) and has no view on OFAC's sanctions exposure. Two classification regimes are now in play simultaneously – and the answers are not the same.
The EU dual-use regime and the US export-control and sanctions regimes operate in parallel, not in sequence. A product classified – or not controlled – under the EU list may still require a US licence or authorisation, and a counterparty that is clean under EU screening may be listed on OFAC's SDN List (OFAC's list of Specially Designated Nationals and blocked persons). As of May 2026, both regimes are fully in force and actively enforced. Getting the classification right under one regime does not satisfy the obligations under the other.
This guide walks through the classification steps under each regime, explains where the two systems diverge, identifies the risk flags that practitioners see most often, and explains when cross-border counsel is necessary.
Why EU dual-use classification and OFAC are separate but connected obligations
EU dual-use classification and OFAC sanctions are legally distinct obligations that can nonetheless converge on the same transaction, creating compounded exposure for businesses that treat them as interchangeable.
The EU dual-use regime controls the export from EU territory of items listed in the relevant Council Regulation (commonly referred to as the EU dual-use regulation). Classification under that regime determines whether an EU export authorisation is required before goods, software, or technology leave the EU. The administering authority in each Member State is the relevant national competent authority; at the EU level, coordination is provided through the Council framework.
OFAC, by contrast, administers economic sanctions programmes under IEEPA and related statutory authority. OFAC does not classify goods – it designates persons, entities, and vessels. Its prohibitions are transactional: US persons, and in some programmes non-US persons, are prohibited from dealing with designated counterparties or with countries subject to a sanctions programme, regardless of what the goods are. An EU exporter shipping to a non-listed buyer in a third country may face no EU licence requirement, yet the transaction may still be prohibited if the end-user has links to an OFAC-designated person or entity.
BIS, a separate US agency from OFAC, administers the EAR and controls exports, re-exports, and transfers of items on the Commerce Control List (the CCL, the US schedule of controlled items identified by Export Control Classification Number or ECCN). BIS and OFAC sit within different parts of the US government. A transaction may require engagement with both. In our experience, the most common structural error is treating EU classification as the only step, with no parallel US analysis.
The cross-border position is this: where any US person is involved in the transaction, where the goods contain a US-origin component that meets the de minimis threshold (the proportion of controlled US content that triggers EAR jurisdiction over a foreign-made item), or where the end-destination falls under a US sanctions programme, the EU classification result is relevant context – but it does not determine the US position.
Step 1 – Identify the item and its characteristics
Classification under both regimes begins with a technical description of the item: its function, the parameters that determine its performance, whether it contains software with encryption or other sensitive functionality, and whether it was designed for a military or civilian end use.
Under the EU dual-use regulation, the item is compared against the Annex I list, which is structured across ten categories (from Category 0 covering nuclear-related items to Category 9 covering aerospace and propulsion). Each entry specifies technical parameters – thresholds of frequency, power, accuracy, or material composition – that determine whether the item falls within the control. Items that do not fall within a list entry may still be subject to end-user controls or catch-all provisions where the exporter has knowledge that the item is destined for weapons-related end use.
Under the EAR, the analysis follows the same general logic: the item is compared against the CCL, identified by its ECCN. An item not on the CCL falls under the classification EAR99, which is generally exportable without a licence except to embargoed destinations or designated end-users. The technical parameters that determine EU classification and US classification often overlap but are not identical. A product may be controlled at a lower technical threshold under the EU list, or vice versa. Neither controls the other.
Practical first step: prepare a technical brief that captures the item's key performance parameters, its software content, the country of origin of its components, and the intended end use. That document is the foundation for both analyses. Without it, neither classification is reliable.
Step 2 – Apply the EU dual-use list and determine the authorisation requirement
Matching the item's technical specification to the EU dual-use list requires a structured comparison against the relevant category and control parameter in Annex I. The entry will specify whether the control applies to the item itself, to software designed for a specified use, or to technology (meaning technical data) relating to the development, production, or use of a controlled item.
Once a match is confirmed, the next question is the destination. The EU dual-use regulation creates different authorisation requirements depending on whether the destination is within the EU, a country covered by a Union General Export Authorisation (which permits exports to certain allied destinations without a prior licence), or a third country requiring a national or global licence. The competent authority in the relevant Member State administers the licence application. Timelines and documentary requirements vary by Member State.
Catch-all provisions are a particular source of risk. An item that does not meet the technical threshold for a list entry can still be subject to authorisation requirements if the exporter has been informed by the competent authority, or otherwise has reason to know, that the item may contribute to weapons of mass destruction or certain other end uses. In our practice, we regularly advise exporters who have not considered the catch-all because their product sits just below the technical threshold. That assumption is not safe where the end use is uncertain.
Record-keeping is a substantive obligation, not an administrative nicety. The EU dual-use regulation requires exporters to maintain records of export transactions and the basis for any authorisation relied on. Verify the current retention period in your Member State, as it varies.
Step 3 – Run the parallel US analysis under BIS and OFAC
Running the parallel US analysis means addressing two distinct questions: (a) does the item or technology require a BIS/EAR licence for the proposed export, re-export, or transfer, and (b) does the transaction involve an OFAC-designated party or a country subject to US sanctions?
For the BIS/EAR analysis, the starting point is whether the item is subject to the EAR at all. Items physically located in the US, items of US origin wherever located, and certain foreign-made items incorporating controlled US-origin content or technology (the de minimis rule and the foreign direct product rule, or FDPR, which extends EAR jurisdiction to foreign-made items produced using certain US technology or equipment) may all be subject to EAR jurisdiction. An EU exporter whose product contains US-origin components should map those components before the transaction, not after. If the FDPR applies, a US licence or licence exception may be required even for a shipment that never touches US territory.
For the OFAC analysis, the question is whether any party in the transaction – the buyer, the end-user, a financial intermediary, a freight forwarder, or an intermediate consignee – appears on the SDN List, on the Consolidated List maintained by OFAC of all sanctioned persons across its programmes, or is owned 50 percent or more in the aggregate by one or more SDN-listed persons. The 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) applies even where the entity is not itself listed. Ownership must be traced through intermediate layers. Screening only the direct counterparty is insufficient.
OFAC also administers country-level sanctions programmes. Where the destination country, or a transshipment point, falls under such a programme, additional analysis is required regardless of whether any individual party is designated. The country-programme prohibitions apply to US persons and in certain contexts to non-US persons transacting in US dollars or through US financial institutions.
A question worth pausing on: does your organisation's standard compliance workflow trigger the BIS and OFAC checks at the same stage as the EU classification review, or does the EU result come first with the US analysis treated as a secondary step? In our experience, sequencing matters because the US analysis may affect the structure of the transaction – including whether a licence exception is available and whether the end-use certificate needs to be drafted to satisfy both regimes.
For detailed guidance on the BIS and EAR analysis in a US context, see our service page on deemed export and technology controls under BIS and the EAR.
How do EU dual-use classification and OFAC diverge in practice?
The most important structural divergence is that the EU dual-use regime is a goods-and-technology control, while OFAC is a person-and-country control. They catch different risks, and neither substitutes for the other.
Under the EU regime, the key question is: is this item controlled, and does the proposed export require authorisation? The identity of the buyer matters primarily at the end-use and catch-all level. Under OFAC, the item is in most programmes irrelevant; the question is: is any party to the transaction designated, or is the destination a sanctioned country? A shipment of entirely uncontrolled goods, exported freely under EU rules, can still be a prohibited transaction under OFAC if it is directed to a sanctioned party.
A second divergence concerns extraterritorial reach. The EU dual-use regulation applies to exports from EU territory by EU-based exporters. Its extraterritorial reach is limited. The EAR and OFAC reach further. The FDPR means that certain foreign-made items are subject to US export-control jurisdiction regardless of where they are manufactured, if US technology was used in the production process. OFAC's primary sanctions apply to US persons globally; its secondary sanctions – prohibitions that can affect non-US persons transacting with designated parties – apply in certain programmes to a broader set of actors, including entities that deal in US dollars or that have a nexus to the US financial system.
A third divergence concerns the authorisation mechanism. Under the EU dual-use regulation, a licence from the national competent authority permits the specific transaction. Under OFAC, the authorisation tool is a specific licence (a case-by-case authorisation to conduct an otherwise prohibited transaction) or a general licence (a standing authorisation that permits a defined category of transactions without a separate application). EU licences and OFAC licences are legally independent: holding one does not substitute for the other.
Finally, the ownership and control tests differ. OFAC's 50 percent rule is mechanical: own 50 percent or more and you are blocked. Under OFSI and the EU, a control test applies alongside ownership, and entities can be caught where a designated person exerts control even below 50 percent. For an exporter doing business in both the US and EU markets, and particularly for one screening counterparties with complex ownership structures, mapping the applicable test for each regime is a prerequisite – not an option.
Risk flags and when to involve counsel
Certain transactional features consistently generate classification and sanctions risk. The following are the patterns we see most frequently across our cross-border practice.
- US-origin content in a non-US product: if the item incorporates components, software, or technology of US origin, the FDPR and de minimis analyses are mandatory before shipment. The fact that the product was assembled outside the US does not remove EAR jurisdiction if the US-content thresholds are met.
- Re-export or transshipment through a third country: a re-export from a third country that is not itself subject to an EU authorisation may still require a US re-export licence if the item is EAR-controlled. The transaction may also trigger OFAC analysis if the transshipment country or an intermediary is sanctioned.
- Layered ownership structures: end-users and distributors with opaque shareholding arrangements are a consistent source of 50-percent-rule exposure. A buyer whose beneficial ownership includes a minority position held by an SDN-listed person through an intermediate holding company may be blocked even though that is not apparent from the first layer of screening.
- Dual-use technology and intangible transfers: the provision of technology by electronic means – software delivered by download, technical assistance provided by email, training delivered remotely – is an export under both the EU and US regimes. The classification analysis applies to intangible transfers as well as physical shipments.
- Items approaching but not meeting a technical threshold: an item whose parameters sit just below the threshold for a controlled entry is not automatically free of risk. A minor design change, an upgraded component, or a different software version may push the item over the threshold. Classification should be reviewed when the product specification changes.
- Catch-all trigger: uncertain end use: where the exporter has doubt about the ultimate end use of the goods – for example, because a buyer is evasive about the destination or the application – the catch-all provisions of both regimes may apply. Doubt does not disappear by proceeding; it creates exposure.
Involve counsel before the transaction closes if any of the following apply: the item sits close to a technical control threshold; a party in the chain has a complex ownership structure; the transaction involves a jurisdiction that is the subject of a US sanctions programme; US-origin content is present in a non-US product; or a competent authority or counterparty has raised questions about the classification or end use.
If a transaction has already been flagged by a competent authority, or if a filing has been refused or a shipment detained, an early review can preserve options that narrow with time. A voluntary self-disclosure (VSD, a proactive report to the relevant authority of a potential violation) is a mitigating factor under both OFAC and BIS enforcement practice. The window to make an effective disclosure is not indefinite.
For a confidential review of your classification position or a potential breach, contact Calder & Vance at info@caldervance.com.
A practical illustration: the distributor with a complex ownership chain
In a recent matter, a European manufacturer of precision instrumentation sought to supply a distributor based in a third-country market. The goods had been classified under the EU dual-use list and a national export authorisation obtained. The manufacturer's compliance team had not run an OFAC analysis, reasoning that the transaction was purely European.
We identified that the distributor's parent company was incorporated in a jurisdiction subject to a US sanctions programme, and that the distributor itself had two shareholders holding a combined interest of just above 50 percent, one of whom was listed on the SDN List through a subsidiary. The shipment, if made, would have been a prohibited transaction for any party with US person status in the supply chain – including the manufacturer's US-incorporated affiliate, which was providing after-sale technical support.
We advised on the restructuring of the transaction and the engagement with the relevant US authority. The EU licence remained valid; the US position required a separate licence application. The matter illustrated precisely why EU classification and OFAC are parallel tracks that both need to be run to completion before a contract is signed.
Common myths about EU dual-use classification and US sanctions compliance
A persistent belief in cross-border compliance practice is that an EU export licence covering a transaction provides protection against US enforcement action. It does not. EU authorisation and US authorisation are legally independent. An EU licence issued by a Member State competent authority has no legal effect on OFAC or BIS jurisdiction. The US agencies do not recognise foreign licences as substitutes for US authorisations.
A second common assumption is that small businesses or low-value transactions fall below the threshold of US enforcement interest. Both OFAC and BIS have brought enforcement actions against businesses of all sizes. The value of the goods is not the primary driver of whether a violation is pursued; the nature of the violation, the degree of knowledge, the existence of a pattern of conduct, and whether there was a VSD are far more significant factors than the transaction value alone.
A third myth: that classification is a one-time exercise. In our experience, classification needs to be reviewed whenever the product specification changes materially, when the regulatory list is updated (both the EU Annex I and the CCL are amended periodically), when the end-user changes, or when the destination changes. A classification memorandum prepared two years ago may not reflect the current list structure. Building a review trigger into the product-development and sales process is standard practice for exporters with dual-use exposure.
Related practices
- Deemed export and technology controls under BIS and the EAR – US-law analysis for technology transfers and intangible exports
- EU dual-use classification: advanced issues and licence applications – next-step guidance on authorisations and competent-authority practice
- OFAC sanctions screening and ownership mapping – methodology for tracing ownership chains and applying the 50 percent rule