A UK-based technology exporter receives an order from a European distributor. The item – sophisticated sensing equipment with evident civil applications – was previously traded freely under EU rules. Post-Brexit, the legal environment has shifted. Does EU dual-use classification still determine the UK export-control position? Where does OFSI fit in? And what happens when the two regimes diverge? These questions have real commercial consequences, and the answers are less straightforward than many exporters assume.
As of May 2026, the classification of dual-use goods for UK export purposes is governed by UK retained law and administered through the Export Control Joint Unit (ECJU), not OFSI. OFSI administers UK financial sanctions. The two regimes are legally distinct, though a single transaction can engage both simultaneously. Exporters who conflate them risk mis-filing, unlicensed exports, and sanctions exposure in parallel.
This guide sets out the classification procedure under the UK dual-use regime, the role OFSI plays when a transaction also engages financial sanctions, the points at which EU rules remain operationally relevant for cross-border businesses, and the risk flags that most commonly arise in practice.
Why the EU dual-use regime still matters for UK exporters
The UK's exit from the EU did not eliminate the relevance of EU dual-use rules for businesses operating across both jurisdictions. UK exporters supplying EU-based intermediaries, subsidiaries, or customers must understand that the EU regime governs the onward movement of goods within and out of the EU. A UK export licence may clear the item from the UK; it does not licence the subsequent EU-controlled export.
The EU's dual-use rules apply to goods, software, and technology that have both civil and military applications. The regime is administered by member-state competent authorities under the relevant EU Council regulation on dual-use items. Since the end of the Brexit transition, the EU and UK lists have diverged – gradually, but in ways that already catch exporters off guard. An item that carries no licence requirement in the UK may be controlled under the EU list, and vice versa. We regularly advise exporters who have relied on a pre-Brexit classification without checking whether the retained UK list has since been updated to match, or diverged from, the EU position.
The cross-border angle is not theoretical. A UK manufacturer supplying components to a German integrator who then exports a finished system to a third country must consider, at minimum, the UK export-control position, the EU export-control position, and – where the end-user or the financing touches a sanctions regime – the OFSI financial-sanctions position. Each analysis is independent. Each can block the deal.
How does the UK dual-use classification procedure work?
UK dual-use classification is the process of determining whether a good, software, or technology is listed on the UK Strategic Export Control Lists and, if so, which export-control classification number it carries and what licence requirement results. The competent authority in the UK is ECJU, which sits within the Department for Business and Trade; OFSI, which sits within HM Treasury, has no role in classification.
The procedure follows a defined sequence. First, the exporter identifies the item's technical parameters against the UK Control List. The list mirrors the structure of the Wassenaar Arrangement, the Australia Group, the Nuclear Suppliers Group, and the Missile Technology Control Regime, but the UK version is a domestic instrument and has been updated independently since Brexit. Second, where the classification is unclear, the exporter may request a formal rating from ECJU – a process that generates a written determination. That determination does not constitute an export licence; it is a classification ruling only.
Third, once classification is established, the exporter determines whether an open general export licence (OGEL) covers the proposed transaction or whether a standard individual export licence (SIEL) or open individual export licence (OIEL) is required. The licence type turns on the destination, the end-user, the end-use, and the nature of the goods. Applications are submitted through the SPIRE system administered by ECJU.
In our experience, the classification stage is where most errors are made. Exporters often work from product specifications designed for commercial marketing, not for technical control-list matching. The control-list entries are technical and precise; a civilian product description may omit the parameter – a frequency range, a data rate, a materials specification – that places the item in a controlled entry.
Where does OFSI enter the transaction?
OFSI becomes relevant when a transaction involves a person or entity subject to UK financial sanctions, or when funds, economic resources, or payments connected to the transaction would engage a UK sanctions prohibition. OFSI administers UK financial sanctions under the Sanctions and Anti-Money Laundering Act 2018 (SAMLA) and the thematic regulations made under it.
The practical intersection with dual-use classification arises in several ways. A licensed dual-use export may still be prohibited if the buyer, the end-user, an intermediary, or the financing party is a designated person under a UK sanctions regime. Equally, an item that is not controlled under the UK dual-use list may nonetheless be the subject of trade sanctions – sector-based restrictions, asset freezes, or prohibitions on technical assistance – that OFSI enforces. The two regimes operate on different legal bases, with different competent authorities, different licence mechanisms, and different penalty structures.
Does your screening process treat ECJU classification and OFSI sanctions screening as a single check, or two? The answer should always be two. A positive ECJU classification ruling gives no protection against an OFSI enforcement action, and an OFSI licence does not authorise an export that requires an ECJU licence. The legal permissions are separate and must each be obtained.
The position above covers the standard case. Your facts – the counterparty, the goods, the route, and the regime in play – change the analysis. For a confidential review of a potential exposure, contact Calder & Vance at info@caldervance.com.
How does EU classification diverge from the UK position, and why does it matter?
Since the end of the Brexit transition period, the UK and EU dual-use control lists have been maintained independently, and they have begun to diverge in measurable ways. The EU has updated its dual-use regulation to incorporate new technology categories and to tighten controls on cyber-surveillance items. The UK has implemented its own updates on a separate legislative timetable. The result is that an exporter cannot assume that a UK classification transfers automatically to an EU classification, or that an EU classification ruling from a member-state authority determines the UK position.
The divergence has several practical effects. First, an item exported from the UK to an EU member state – and thus cleared under UK law – may require an EU export licence for its onward export from the EU to a third country. The EU regime governs that second movement. Second, technology transfers from an EU parent to a UK subsidiary, or from a UK entity to an EU entity, engage the regime of the jurisdiction from which the transfer originates. Third, EU financial sanctions regulations may designate persons or restrict transactions that are not yet captured under UK OFSI designations, or may be narrower. The applicable prohibition in each jurisdiction is determined by that jurisdiction's own instrument.
We have acted for manufacturers who obtained a clean UK classification, completed the export, and then discovered that the EU distributor required a separate member-state licence for the onward movement. In each case, the underlying error was treating UK clearance as sufficient for the full transaction chain. The cross-border analysis must follow every leg of the journey.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Contact us at info@caldervance.com.
What are the most significant risk flags in practice?
The risk flags that most commonly produce enforcement referrals, voluntary self-disclosures, and licensing failures are predictable in category, even when the specific facts vary. Recognising them early is the most effective risk-management step available.
Mis-classification through incomplete technical review. Control-list entries turn on specific technical parameters. A product classified as EAR99 equivalent under a previous assessment may have been upgraded, modified, or re-specified in ways that move it into a controlled entry. Classification must be reviewed each time the product specification changes materially, not just at first assessment.
Reliance on a pre-Brexit EU classification. A classification ruling issued by a member-state authority before the end of the UK transition period does not constitute a UK classification. Exporters who have inherited legacy classification records from a period of EU membership, or who have acquired a business with such records, must re-classify against the current UK list. We regularly advise on precisely this issue in the context of M&A diligence.
Failure to screen for sanctions across the full transaction chain. An OFSI financial-sanctions check that covers only the named buyer, without extending to the end-user, the intermediary, the freight forwarder, the financing bank, and the ultimate beneficial owner of each, leaves significant exposure uncovered. The ownership-and-control test under OFSI – which captures entities owned or controlled by a designated person – requires that the full beneficial-ownership structure be examined, not just the immediate counterparty.
Technology transfers treated as outside the regime. The UK dual-use regime controls not only physical goods but also technology and software. Emails containing technical specifications, software licences, and remote access to controlled systems can each constitute a controlled transfer. Where a UK engineer provides technical support to an overseas customer via video call or file transfer, the export-control position must be considered before the transfer takes place.
Catch-all controls ignored. Where an exporter has knowledge, or has been informed by ECJU, that an item is or may be intended for a prohibited end-use, the item cannot be exported without a licence even if it is not listed on the control list. Catch-all obligations are not a backstop for edge cases; they are an active requirement that demands positive end-use due diligence.
When should a business involve external counsel?
External counsel should be involved at the earliest point at which the classification or sanctions position is unclear, contested, or commercially significant. That threshold is lower than most exporters assume.
The following situations warrant immediate advice. First, where the item's technical parameters sit close to a control-list threshold and the classification is genuinely uncertain – the cost of an incorrect classification, and the penalties for an unlicensed export, substantially exceed the cost of obtaining a legal opinion before shipping. Second, where the transaction chain includes a counterparty in a jurisdiction under a thematic sanctions regime, or where any party in the chain has an ownership structure that involves persons from a sanctioned jurisdiction. Third, where an ECJU rating request has produced an unexpected or unfavourable result, or where a licensing application has been refused or returned with conditions.
A fourth situation that consistently produces under-advised decisions is the post-acquisition integration of a business with legacy export-control records. Classification records, previous ECJU ratings, and prior OFSI screening outcomes do not transfer automatically; they must be verified and, where necessary, updated against the current list and the current sanctions designations.
In our cross-border practice, the businesses that manage dual-use classification and financial-sanctions risk most effectively are those that treat the two analyses as a standing, embedded process rather than a transaction-by-transaction check performed under time pressure. A pre-shipment workflow that is tested and documented reduces both the likelihood of an error and the penalty exposure if one occurs.
Related practices
- Deemed Export and Technology Controls under the EAR – BIS classification, deemed-export analysis, and end-use compliance for US-controlled technology.
- EU dual-use classification: advanced issues – catch-all controls, intra-EU transfers, and interaction with EU financial sanctions.
- OFSI licensing for export-connected transactions – procedure, evidence requirements, and the interaction with ECJU licensing.
Common misconceptions: what compliance teams often get wrong
One persistent myth in this area is that OFSI is responsible for dual-use classification in the UK. It is not. OFSI is a financial-sanctions authority. Its powers relate to asset freezes, prohibitions on making funds or economic resources available, and financial-sanctions licensing. Export-control classification – determining whether an item appears on the Strategic Export Control Lists and what licence it requires – is ECJU's function. The confusion arises in part because both agencies engage the same underlying transaction, and in part because EU terminology sometimes groups export controls and financial sanctions under a broader trade-sanctions heading.
A second misconception is that EU dual-use compliance is now irrelevant to UK businesses. As this guide has set out, it remains operationally significant for any UK exporter with EU-based customers, subsidiaries, or intermediaries. The EU regime governs the EU leg of the transaction; the UK exporter may not face direct EU enforcement, but its EU counterparties do – and an EU counterparty that cannot lawfully re-export an item will not be a continuing customer.
A third misconception – and the one most frequently encountered in compliance-programme reviews – is that a general dual-use classification applies permanently. Classification is a point-in-time determination. Products evolve. Control lists are updated. A classification that was accurate eighteen months ago may no longer reflect the current list entry. Any programme that does not include a periodic reclassification review is operating on stale data.