A manufacturer based in Europe receives a purchase order from a trading company with offices in three jurisdictions. The goods are dual-use. The end-user is a research institute, but one of the intermediaries has a parent registered in a jurisdiction subject to multiple overlapping controls. The compliance team asks a simple question: do we need a licence? The answer depends on which regime – or regimes – govern the transaction, and the determination process differs meaningfully across each of them.
As of May 2026, export-licence determinations across regimes follow a shared logical sequence – classify the item, identify the destination and end-user, apply the governing control list, check exceptions and exemptions, and assess secondary-sanctions exposure – but the tests, thresholds, and licensing authorities differ enough between the United States, the United Kingdom, the European Union, and the major Asian and Gulf regimes that a single-regime analysis routinely produces the wrong answer for a cross-border transaction.
This guide walks through the determination process step by step, maps the points of divergence between the principal regimes, and identifies the risk flags that most frequently cause exporters to stumble when more than one set of rules applies simultaneously.
Step 1: Classify the item under the applicable control list
Every export-licence determination begins with item classification – the process of establishing whether the goods, software, or technology at issue fall within a control list, and if so at what level. Classification governs everything that follows: the applicable destinations, the available exceptions, and the licensing authority.
Under the US Export Administration Regulations (the EAR), each item is assigned an ECCN (Export Control Classification Number under the US Commerce Control List), which encodes the reason for control and the destinations and end-uses that require a licence. Items with no ECCN are classified EAR99 – the lowest tier – but EAR99 items still require a licence for destinations and end-users subject to comprehensive US controls. Under the EU dual-use rules, items are classified against the EU dual-use list appended to the relevant Council Regulation. The UK maintains its own Goods of Strategic Interest list following departure from the EU single market; the two lists are closely aligned but are not identical and diverge on specific entries. Japan, Singapore, and the UAE each maintain national control lists that track the Wassenaar Arrangement schedules but incorporate national additions and specific catch-all provisions.
In our experience, misclassification at this stage is the single most common source of downstream error. A manufacturer that classifies its item at a lower control tier than the actual specification warrants may apply exceptions that do not apply, omit licence applications that are required, and expose itself to enforcement liability across multiple regimes simultaneously. The classification exercise should include a technical review of the item's parameters – not just its commercial description – against each control list that is plausibly in play.
Step 2: Identify the transaction's jurisdictional footprint
Once an item is classified, the next step is to map which regimes' licensing rules apply to the transaction. The jurisdictional analysis is not confined to the exporter's location; it extends to the item's origin, the routing, the technology transfer, and the nationality and location of the parties involved.
The US exercises extraterritorial jurisdiction under the EAR in two significant directions. First, items that incorporate more than a de minimis threshold of US-controlled content – the de minimis rule – remain subject to US controls even when re-exported by a non-US person from outside the United States. Second, foreign-produced direct products of US technology or software can fall within the EAR when exported to specified destinations or end-users, under the foreign direct product rules. These two mechanisms mean that a European or Asian exporter may require US authorisation even for a transaction that is entirely offshore from an American perspective.
The EU dual-use rules apply to exports from EU territory and to the provision of technical assistance by EU persons, including via electronic means. UK controls apply analogously to exports from Great Britain and Northern Ireland, with the ECJU (Export Control Joint Unit) administering licensing. The relevant national regimes of Singapore, Japan, and the UAE each apply to exporters and re-exporters operating in or through those jurisdictions. Where a transaction crosses multiple jurisdictions, the analysis should identify every applicable regime before proceeding to the next step. A transaction that satisfies one regime's requirements is not automatically lawful under another.
The position above covers the standard case. Your facts – the counterparty, the goods, the routing, and the regimes in play – change the analysis. For an assessment of your cross-border jurisdictional exposure, contact Calder & Vance at info@caldervance.com.
Step 3: Screen the destination, end-user, and end-use
Classification and jurisdictional mapping establish whether a control list applies; end-user and end-use screening determines whether the transaction can proceed at all, and on what conditions. This step involves three distinct sub-analyses: the destination country check, the entity check, and the end-use check.
The destination country check compares the country of ultimate destination against the regime's country-specific controls. Under the EAR, countries are grouped into tiers with different licence requirements and different availability of licence exceptions. Under the EU dual-use rules, certain destinations trigger mandatory licence requirements regardless of the item's classification tier; others are subject to simplified procedures under general export authorisations. The UK mirrors this structure through its own open and standard individual export licences, administered by the ECJU. It is important to distinguish the country of intermediate transit or trans-shipment from the country of ultimate destination; most regimes require the exporter to know and document the latter.
The entity check screens the parties against the principal watchlists: the US Commerce Department's Entity List and Denied Persons List, OFAC's SDN List (OFAC's list of Specially Designated Nationals and blocked persons), the EU Consolidated List, the UK Consolidated List, and the UN Security Council Consolidated List. A match on any of these lists changes the analysis materially. Under the EAR, export to an Entity List member requires a licence that BIS will generally deny; export to a denied person is prohibited outright. Under sanctions regulations administered by OFAC, OFSI, and the EU, export to a designated person may require a licence from the sanctions authority – a separate authorisation from any export-control licence.
The end-use check applies in parallel. Most regimes impose catch-all controls that require a licence even for low-tier or unclassified items when the exporter has reason to believe the goods will be used in a prohibited programme – weapons of mass destruction, ballistic missiles, certain military end-uses. The US WMD catch-all and military end-use rule, the EU general catch-all, and equivalent provisions in UK and national Asian-regime regulations all operate on this basis. A positive classification and a clean entity screen do not eliminate the catch-all obligation.
What is the difference between a licence exception and a general authorisation?
A licence exception (under the EAR) and a general export authorisation (in EU and UK parlance) serve the same function – they permit a defined category of exports without a case-by-case licence application – but they operate under different conditions and are not interchangeable across regimes.
Under the EAR, licence exceptions are regulatory provisions that automatically authorise certain transactions when specified criteria are met. Common examples include exceptions for low-value shipments, for technology that is already publicly available, and for items going to countries that participate in multilateral export-control arrangements and maintain adequate controls. The exporter must self-assess eligibility; there is no prior approval, but the determination must be documented. If the criteria are not satisfied, the exception does not apply – even if the exporter believed in good faith that they were met.
EU general export authorisations (GEAs) operate differently. Some are set at EU level and apply uniformly across Member States; others are national GEAs issued by individual Member State authorities. A GEA specifies the items, destinations, and conditions to which it applies. Exporters must register their intention to use some GEAs before they may do so; for others, use is automatic on satisfaction of the conditions. The UK equivalent – open export licences – follows a similar structure administered by the ECJU. A UK open licence is regime-specific and item-specific; it does not automatically cover goods that are on the UK list but were not on the EU list at the point the licence was issued.
The practical risk for cross-border exporters is assuming that an available exception or GEA under one regime satisfies the requirements of another. A US licence exception does not authorise an EU-regulated export. An EU GEA does not relieve a non-EU person of EAR obligations where US controls independently apply. Each regime must be satisfied on its own terms.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential review.
Step 4: Apply for a specific licence where required
Where no exception or general authorisation covers the transaction, the exporter must apply for a specific licence (a case-by-case authorisation to conduct an otherwise controlled export). The application process, supporting documentation, and review timelines differ across regimes.
Under the EAR, specific licence applications are submitted to BIS through its electronic licensing system. The application must describe the item, the end-user, and the end-use in detail. BIS coordinates with other agencies – including OFAC and the Departments of State and Defence – where the transaction raises interagency concerns. Processing times vary with the complexity of the transaction and the level of policy review required; they are not guaranteed by statute and can extend to several months for sensitive cases. Applicants should not proceed with the export pending approval.
Under OFSI in the United Kingdom, a specific licence for a sanctions-controlled transaction must set out the licencing ground relied on, the parties, and the transaction in detail. OFSI's published guidance on licensing sets out the information required and the timelines that OFSI aims to meet, though those timelines are targets and not binding commitments. Separately, where an export-control licence is required from the ECJU, the application is made to that authority independently of any OFSI licence; the two processes run in parallel, not in sequence.
In the EU, specific export licences are issued at Member State level by the competent national authority. Each Member State authority applies the relevant Council Regulation and its national implementing rules. Licence decisions are not harmonised across Member States beyond the floor set by the EU regulation; the same transaction may receive different treatment by different national authorities. This creates a well-documented risk of forum inconsistency: a licence refused in one Member State is not automatically refused in another, but the exporter's reliance on a grant from a more permissive authority does not protect it in the jurisdiction of the refusing authority.
In our cross-border practice, we advise exporters to prepare a single consolidated package of technical documentation, end-user undertakings, and transaction descriptions before filing in any jurisdiction. A well-prepared base package reduces the risk of inconsistent answers and of delay caused by supplementary information requests from licensing authorities.
How do secondary-sanctions risks intersect with export-control licences?
Secondary-sanctions exposure is a distinct overlay that the export-control licensing process does not resolve and that is frequently underestimated in cross-border determinations. An exporter may hold a valid export-control licence and still face secondary-sanctions risk if the transaction involves a party that is subject to US secondary-sanctions measures.
US secondary sanctions operate under various IEEPA-based and statutory regimes. They target non-US persons who engage in specified transactions with designated persons, designated sectors, or designated jurisdictions. The key feature is extraterritoriality: the non-US exporter that receives a valid BIS licence for a controlled item does not thereby obtain clearance from OFAC for the sanctions dimension of the same transaction. The two analyses are conducted separately, under separate instruments, by separate agencies. An OFAC general licence or specific licence is required in addition to any BIS export-control authorisation where the transaction has a sanctionable dimension.
The EU and UK do not operate a secondary-sanctions regime in the same sense, though both impose asset-freeze and dealing prohibitions that can catch transactions with designated counterparties regardless of the counterparty's nationality. A transaction that is lawful under the EAR and does not require an export-control licence from BIS may still be prohibited under EU or UK sanctions rules if a party is designated on the relevant list. Where the EU Blocking Regulation is engaged – the EU instrument that prohibits compliance with certain US extraterritorial measures – the position can become actively contradictory: compliance with a US obligation may be prohibited under EU law, and non-compliance with the US obligation may be prohibited under US law. We regularly advise exporters operating in this space that the only durable solution is to structure transactions so that neither incompatible obligation is engaged, rather than to try to satisfy both simultaneously.
Risk flags and when to involve export-control counsel
Certain transaction features should prompt early involvement of export-control counsel before the determination process reaches the licence-application stage. Addressing these flags late – or only after a transaction closes – substantially limits the available remedies and increases enforcement exposure.
The following patterns are the most frequent sources of difficulty in cross-border determinations.
- Layered intermediaries. A transaction that passes through multiple trading entities before reaching the end-user creates cumulative screening risk. Each intermediate party must be screened, and the ultimate destination must be identified even if the intermediate seller does not know it. Reliance on a chain of representations without independent verification is not a defence.
- Technology transfer without physical export. The provision of controlled technology by email, upload, or oral communication constitutes a deemed export under the EAR and an equivalent provision under EU and UK rules. Many exporters focus on physical shipments and do not apply the same discipline to electronic transmission of technical data. See also our service on deemed exports of technology under BIS and the EAR, which examines this point in detail.
- End-user change post-licence. A specific licence authorises the named end-user and end-use. A change in ownership, nationality, or stated purpose of the end-user may void the licence and require a fresh application. The exporter that ships under a licence that no longer accurately describes the transaction is exposed.
- Re-export by the buyer. Where the buyer intends to incorporate the item into another product or to re-export it, the exporter's licence obligations may extend to the re-export. Under the EAR, re-export from a third country of US-controlled content may require BIS authorisation; a downstream re-export clause in the end-user undertaking does not substitute for that authorisation.
- Mismatched licence validity. Licences have finite validity periods. A transaction that is delayed beyond the licence's expiry requires a renewal or fresh application before the export proceeds. Exporting under an expired licence is a violation even if the original licence was valid when issued.
- Divergent classification across regimes. An item that is classified at a high-control tier under one regime's list may not appear on another regime's list at all, or may appear at a different tier. This divergence does not reduce the obligation under the stricter regime. Where the applicable country regime imposes the tightest control, that is the control that governs.
The point at which counsel adds the most value is before the transaction is structured and before any representations are made to the counterparty about licence availability. A determination made at the term-sheet stage can be built into the contractual conditions; a determination made after signing is remedial work under time pressure.
In a recent matter, a trading house in the technology-distribution sector was preparing to execute a series of back-to-back supply agreements involving dual-use items with a US-controlled classification. The downstream buyers were in jurisdictions covered by both EU and US controls, and one intermediate party had a parent whose beneficial-ownership chain included a connection to a listed person. We assessed the classification under the EAR and the EU dual-use rules simultaneously, screened the full ownership chain of each party, and identified that two of the planned transactions required BIS specific licences that the client had not applied for, and that one required an OFAC assessment before the EAR analysis could be completed. The client restructured its transaction timeline to allow the applications to proceed before shipment.
Related practices
- Deemed exports of technology under BIS and the EAR – the US rules on controlled-technology transfers without physical shipment
- Export-licence determination under the EU regime – a step-by-step guide to the EU dual-use licensing process
- Export-licence determination under the EU regime: advanced topics – catch-all controls, Member State divergence, and the EU Blocking Regulation