A UK-based technology exporter finalises a supply agreement for advanced sensing equipment. The buyer is based in a European Union member state. Post-Brexit, the exporter's compliance team must now work through two separate regulatory regimes: the UK's own export-control rules administered by the Export Control Joint Unit, and the residual question of how EU dual-use classification interacts with the financial-sanctions obligations enforced by the Office of Financial Sanctions Implementation. The equipment may also be subject to OFAC reach if it contains US-origin components. Three regimes, one shipment, one signing deadline. Where does the analysis begin?
As of May 2026, EU dual-use classification under OFSI requires practitioners to distinguish between two legally distinct questions: whether a good, software, or technology is controlled under the UK Strategic Export Control Lists (which retained and adapted the pre-Brexit EU dual-use list), and whether the end-user or end-use triggers financial-sanctions obligations enforced by OFSI. The two questions are related but not identical. Misreading the relationship is the single most common compliance error we see in post-Brexit export transactions.
This guide walks through the classification test, the cross-regime interaction between UK export controls and OFSI financial sanctions, the points where EU rules still matter after Brexit, and the risk flags that should prompt early involvement of sanctions counsel.
Step 1: Understand the post-Brexit regulatory split
The United Kingdom retained the substance of the EU dual-use list at the point of departure from the EU, but that list is now maintained separately under the UK's own export-control regime, administered by the Export Control Joint Unit. OFSI enforces financial sanctions under the Sanctions and Anti-Money Laundering Act 2018 ("SAMLA") and the relevant thematic regulations made under it. These are two different bodies, two different legal instruments, and two different sets of obligations.
Why does this matter for a business classifying dual-use goods? Because a transaction can pass the export-licence test – the goods are not controlled, or a licence exception applies – and still be prohibited under OFSI's financial-sanctions regime if the counterparty is a designated person or an entity owned or controlled by one. Conversely, a transaction can be fully cleared by OFSI's sanctions screening and still require an export licence from the Export Control Joint Unit. Neither clearance substitutes for the other.
In our experience, compliance teams at exporters – particularly those that converted their pre-Brexit EU-law processes into UK processes in a single step – treat these as one question. They are not. The OFSI question is: does this transaction involve a designated person, or does it involve funds or economic resources that would benefit one? The export-control question is: does this item appear on the Strategic Export Control Lists, and does the destination, end-user, or end-use require a licence? Practitioners advising on post-Brexit transactions handle both questions in sequence, not in parallel.
Step 2: Classify the item against the UK Strategic Export Control Lists
Classification begins with the UK Strategic Export Control Lists, which group controlled goods into categories covering military items, dual-use goods and software, and items controlled for human-rights or other reasons. The dual-use categories mirror the structure of the EU dual-use list as it stood at exit, amended by subsequent UK statutory instruments. The Export Control Classification Number assigned to a good determines what destinations, end-users, and end-uses require a licence.
The classification process asks three questions in order. First: is the item described by any entry on the UK list? This is a technical question answered by reading the entry against the item's specification – its function, parameters, performance, and the software or technology that controls it. Second: does any catch-all control apply? Catch-all controls can require a licence even for uncontrolled items where the exporter has knowledge, or is informed by the Export Control Joint Unit, that the goods will be used in a weapons-related programme. Third: does a licence exception or open general export licence permit the export without a specific licence?
Here the EU list remains relevant even post-Brexit. A UK exporter shipping to an EU member state encounters a buyer who may themselves be subject to the EU dual-use regulation. The buyer's own classification obligations, and the EU's controls on re-export, affect how the goods move downstream. The EU regime was substantially updated, with revised categories and new controls on surveillance technology taking effect under EU Regulation 2021/821. UK exporters selling into the EU market need to understand what their EU buyers are permitted to do with the goods – because a re-export from the EU to a third country that would require a UK licence is a risk that travels back up the supply chain.
The practical check at this step: obtain the manufacturer's classification if you are not the manufacturer, verify it against the current UK list, and record the reasoning. Classification is a documented process, not a one-line assertion.
Step 3: Run the OFSI financial-sanctions screen
Once the item classification is resolved, the OFSI screen runs separately. OFSI administers the UK's financial-sanctions regime under SAMLA and the thematic regulations made under it. The prohibitions relevant to a dual-use export are the prohibitions on making funds or economic resources available to a designated person, directly or indirectly.
Screening requires checking the buyer, the ultimate end-user, any intermediary, and the freight or payment parties against the UK sanctions list maintained by OFSI. It also requires applying the ownership and control test – the UK test for whether a non-listed entity is caught through its relationship with a listed person. Under UK law, a non-listed entity can be caught if it is owned or controlled by a designated person, even if it does not appear on the consolidated list.
The ownership element of the UK test asks whether a designated person holds more than 50 percent of the shares or voting rights, or is entitled to more than 50 percent of the profits. The control element goes further. It asks whether a designated person can otherwise exercise control over the entity's activities. This is broader than the US OFAC test, which is purely mechanical above the 50 percent ownership threshold. Under UK and EU rules, an entity with a designated person holding, say, 40 percent and exercising decisive influence over management decisions can still be caught. That difference decides whether a transaction is permissible.
In a recent matter, a manufacturing business was selling optical components to a European trading house. Screening of the trading house returned clear. Deeper due diligence – prompted by the end-user certificate showing a destination that warranted enhanced scrutiny – revealed that the ultimate buyer was an entity over which a designated person exercised control through a management agreement, not through formal ownership. The transaction was paused while we assessed the position. The point: OFSI's control test requires substantive inquiry, not only a list-check.
The position above covers the standard screen. Your facts – the counterparty's ownership chain, the goods' classification, the destination, the payment route – change the analysis. For an assessment of your OFSI exposure before a transaction closes, contact Calder & Vance at info@caldervance.com.
Step 4: Address the EU dual-use dimension post-Brexit
Post-Brexit, UK exporters do not apply EU dual-use rules directly. The EU rules apply to EU-established exporters and, in some circumstances, to transactions touching EU territory. But two practical channels keep the EU regime relevant to a UK exporter.
First, where goods transit through an EU member state, or where the exporter's EU subsidiary handles the shipment, the EU dual-use regulation applies to those steps. EU Regulation 2021/821 – the recast dual-use regulation – introduced new controls, including end-user screening requirements and, for certain categories of cyber-surveillance technology, supply-chain obligations. A UK parent whose EU subsidiary is the exporter of record faces EU obligations at the subsidiary level, not just UK obligations at the group level.
Second, the EU Blocking Regulation may be relevant where a UK-based business also has US-dollar transactions subject to US secondary-sanctions risk. The EU Blocking Regulation prohibits EU persons from complying with certain US extraterritorial measures. Where a corporate group includes EU entities, the conflict between compliance with US secondary-sanctions guidance and the EU Blocking Regulation requires careful legal analysis. We regularly advise groups facing this tension on how to structure their decision-making to manage both sets of obligations lawfully.
The cross-regime picture therefore looks like this. The UK exporter applies the UK Strategic Export Control Lists and OFSI's financial-sanctions prohibitions. Any EU subsidiary applies the EU dual-use regulation and EU Council sanctions regulations. Where there is US-origin content in the goods, or US-dollar payment flows, BIS's export-administration rules and OFAC's sanctions programmes enter the analysis. All three regimes can apply to a single shipment, and the stricter prohibition governs at each step.
Step 5: Identify the risk flags that require counsel
Most classification and screening decisions can be handled by a well-resourced in-house team working through a documented process. Certain fact patterns, however, require specialist advice before the transaction proceeds.
The first flag is a positive hit or a close match on screening. A designated person appearing anywhere in the ownership chain, the payment chain, or the logistics chain requires legal analysis before the transaction continues. OFSI's licensing and enforcement guidance makes clear that proceeding in the face of a positive hit without a specific licence exposes the business to enforcement action, including substantial civil penalties.
The second flag is a catch-all risk – a situation where the goods are not controlled but the destination, end-user, or declared end-use raises concern about a programme of mass destruction, military end-use, or other restricted purpose. Catch-all controls require a judgment call that benefits from documented legal reasoning.
The third flag is a divergence between the UK list and the EU list for the goods in question. Post-Brexit amendments have introduced differences between the two lists in some categories. An exporter whose classification was prepared under the EU regime before Brexit needs to verify that the UK position has not changed.
The fourth flag – and the one most frequently under-appreciated – is a transaction structure involving multiple intermediaries, free-trade zones, or transit through jurisdictions with weaker export-control regimes. These structures can raise red flags under the catch-all, under OFSI's "indirect" prohibition, and under BIS's anti-diversion requirements if there is US-origin content. If a transaction has already been flagged by a freight forwarder, a correspondent bank, or a customs authority, an early legal review preserves options that narrow with time. For a confidential review of a potential issue, contact us at info@caldervance.com.
Step 6: Record-keeping and programme maintenance
Documentation is not a back-office function. It is the primary defence in an OFSI review or an Export Control Joint Unit audit. Both regulators will ask to see the classification reasoning, the screening records, the due-diligence steps taken on the end-user, and the decision rationale for any transaction that proceeded despite a complicating factor.
OFSI's enforcement guidance sets out the factors that affect the seriousness of a breach. A business that can show it had a documented, good-faith compliance process, acted on professional advice, and reported a suspected breach promptly will be in a materially better position than one that cannot. The difference is not theoretical – it affects whether a matter results in a public notice, a warning, or a more significant outcome.
Record-keeping for export-control purposes follows the Export Control Joint Unit's requirements. The required retention period for export-control records under the applicable regime is a period to be confirmed against the current rules, but practitioners consistently advise maintaining records for a minimum of five years from the date of the transaction, which aligns with the OFSI standard. Verify the current position before relying on any specific period.
Programme maintenance means revisiting classification decisions when the UK list is amended, when goods specifications change, and when new OFSI designations affect the counterparty universe. Sanctions and export-control lists change with short notice. A classification or a cleared counterparty that was correct six months ago may not be correct today. We regularly advise compliance teams on the cadence and scope of periodic reviews.
How does the OFSI financial-sanctions regime interact with the UK export-control regime?
The interaction works through a shared prohibition on making economic resources available to a designated person. Both the financial-sanctions prohibition and the export-control licensing requirement can be triggered by the same transaction – but the legal basis, the regulator, and the remedy differ.
An export licence from the Export Control Joint Unit does not authorise a transaction that OFSI's financial-sanctions prohibitions block. A specific licence from OFSI – authorising an otherwise prohibited transaction – does not substitute for an export licence where one is required. The two licences are independent; both may be needed.
Where a transaction requires both an export licence and an OFSI specific licence, the sequencing matters. Applying to OFSI for a specific licence before the export-licence position is clarified can lead to a licence being granted on assumptions about the goods that are then not borne out by the export-control analysis. In our practice, we advise running both analyses in parallel and resolving the more constrained question first, typically the export-control classification.
There is also an interaction with HM Treasury's broader financial-crime framework. OFSI works alongside the National Crime Agency and the Serious Fraud Office on cases that involve both sanctions breaches and money-laundering or fraud. An exporter facing an OFSI inquiry should be alert to the possibility that the inquiry has a broader perimeter than a pure sanctions question.
Related practices
- Deemed export and technology controls under BIS/EAR – US export-control classification and licence requirements for technology transfers
- EU dual-use classification and the UN Consolidated List – how UN Security Council designations interact with EU dual-use controls
- Export licence determination under the Australian autonomous sanctions regime – DFAT's export-control and sanctions framework for cross-border transactions
Common misconceptions about EU dual-use classification and OFSI
One persistent myth is that post-Brexit UK exporters no longer need to understand EU dual-use rules at all. The argument runs: the UK has its own list, the UK has its own regulator, the EU rules are a matter for EU businesses. That view is incomplete and creates real risk.
As set out above, EU rules apply to EU subsidiaries within a UK corporate group, to goods in transit through EU territory, and to buyers who are themselves EU-regulated exporters with their own downstream obligations. A UK exporter whose goods are re-exported by an EU buyer to a destination that requires an EU export licence is not legally responsible for the EU licence – but commercially and reputationally, the relationship is affected if the re-export triggers a regulatory event.
A second misconception is that an OFSI screen is a list-check and nothing more. OFSI's ownership and control test is substantive. It requires inquiry into the governance and economic arrangements of the counterparty, not merely a search of the consolidated sanctions list. Businesses that run automated screening against the consolidated list and stop there have an incomplete process. The control limb of the UK test will not appear on a standard sanctions list: it requires document review, corporate-structure analysis, and in some cases direct inquiry with the counterparty.
A third misconception, common among smaller exporters, is that export-control and sanctions obligations apply only to "sensitive" goods – arms, nuclear materials, or chemical precursors. In fact, a wide range of ordinary commercial goods, including electronics, sensors, software, and industrial equipment, appear on the UK Strategic Export Control Lists in dual-use categories. Classification is an obligation for any exporter with a cross-border supply chain, not only for defence or specialist manufacturers.