A manufacturer ships a precision component to a distributor in a third market. The item was classified years ago, the classification was never reviewed, and the distributor has since added a new end-use. Customs flags the shipment. Three regulators – in the United States, the United Kingdom, and the European Union – may each have jurisdiction. Which licence applies? Which regime governs? The answer is not obvious, and the cost of getting it wrong is not modest.
Export-licence determinations across regimes require a business to complete a sequential analysis under each applicable jurisdiction: classify the item, identify the end-use and end-user, apply the relevant control list, check available exceptions or open licences, and – where no exception covers the transaction – apply for a specific authorisation. As of May 2026, the United States, United Kingdom, and European Union each operate distinct control lists, different licensing architectures, and divergent enforcement postures. A classification that permits export under one regime may prohibit it under another.
This guide walks through the determination procedure step by step, compares where the major regimes diverge, and identifies the risk flags that most frequently produce enforcement exposure.
Step 1: Classify the item under each applicable control list
Classification is the foundation of every export-licence determination – and it must be done separately under each regime that has jurisdiction over the transaction.
Under the US Export Administration Regulations, administered by the Bureau of Industry and Security (BIS), a physical good, software, or technology is assigned an Export Control Classification Number (ECCN – the alphanumeric code on the Commerce Control List that defines the item's control parameters, reasons for control, and applicable licence exceptions). If no ECCN applies, the item is classified as EAR99 and generally unrestricted in its movement to most destinations – though even EAR99 items may not be exported to certain parties or destinations without a licence.
The United Kingdom operates the UK Strategic Export Control Lists, administered by the Export Control Joint Unit (ECJU). The UK lists draw heavily on the Wassenaar Arrangement, the Nuclear Suppliers Group, and the Australia Group schedules. Since the UK departed from the EU's common trade regime, the two sets of lists have tracked broadly in parallel but are not identical. A business exporting from the UK must classify against the UK lists independently, even where it has already done so under the EAR.
The European Union applies dual-use controls through its dual-use rules, administered at member-state level by competent national authorities (such as BAFA in Germany or the DIT predecessor body in France). The EU lists are Annex-based and similarly track international regime schedules, but the licensing decision is taken by the exporting member state, not by a central EU body. One consequence: an item that is licensable when exported from France may be treated differently by a different member state's authority applying the same legal instrument.
In our practice, the most common classification error is assuming that a previous determination – made under one regime or in a prior year – is transportable across regimes and across time. Technology evolves. Control lists update. An ECCN issued five years ago may not reflect changes to the Commerce Control List, and a UK rating given at launch may not capture a software update that added encryption functionality. Classification is not a one-time exercise. It is periodic.
Step 2: Identify the end-use, end-user, and destination
Correct item classification answers one half of the licensing question. The other half turns on who is receiving the goods, for what stated purpose, and where.
All three major regimes operate end-use and end-user controls that can trigger a licence requirement independently of the item classification. Under the EAR, a business must screen the transaction against the Entity List, the Denied Persons List, and the Unverified List maintained by BIS, as well as the Specially Designated Nationals and Blocked Persons List (SDN List – OFAC's list of persons with whom US persons and, in certain cases, non-US persons may not deal). A party appearing on any of those lists changes the analysis fundamentally: the item's ECCN and the otherwise applicable licence exception may cease to be available.
The UK regime imposes similar end-user obligations. OFSI administers financial-sanctions restrictions separately from ECJU's export licensing function, but the two interact. A proposed recipient who is a designated person under UK financial sanctions may also be ineligible as a licensed end-user, and the exporter needs to check both registers. ECJU guidance makes clear that a valid export licence does not override a financial-sanctions prohibition – a point that surprises some operators.
Under EU rules, the end-use catch-all control is a key mechanism: where an exporter knows or has reason to suspect that goods may be used in connection with weapons of mass destruction or certain military end-uses, the obligation to seek a licence arises even if the item would otherwise be unrestricted. The determination of "reason to suspect" is a facts-and-circumstances test. There is no bright line. We regularly advise on how to document the end-use inquiry so that it withstands regulatory scrutiny.
The destination matters because each regime maintains country-specific licensing policies. Some destinations face near-comprehensive prohibitions. Others attract a favourable licensing policy that allows greater use of open general licences. The applicable regime's published country policies are the reference point – and they change, sometimes with little notice.
How do open licences and exceptions differ across regimes?
Open licences and licence exceptions are, in practice, the most-used tool in export-control compliance – but the architecture of those tools differs markedly between the US, UK, and EU, and conflating them is a persistent source of error.
Under the EAR, BIS provides a set of named licence exceptions – for example, for shipments to close allies under Technology and Software Unrestricted provisions, or for limited-value shipments. Each exception has its own eligibility criteria, destination restrictions, and record-keeping obligations. An exception that applies to a shipment to one country will not necessarily apply to the same item shipped to a different destination, even if the item is identical.
The United Kingdom uses a system of Open General Export Licences (OGELs – standing authorisations issued by ECJU that permit defined categories of exports to listed destinations without a separate application). OGELs cover a range of scenarios: dual-use goods to government end-users in certain allied countries, components for repair and replacement, and so on. Crucially, registration under an OGEL is required before the first shipment; it is not self-executing. Exporters who assume they can rely on an OGEL without first checking eligibility and registering are exposed.
The EU system combines Union General Export Authorisations (UGEAs – standing EU-wide licences for specific item categories and destinations, directly effective in all member states) with national general licences that individual member states may issue under the dual-use rules. A business exporting from multiple EU member states must confirm that a UGEA or national general licence is available in each member state of export, not just one.
Where no open licence or exception covers the transaction, a specific (individual) licence application is required. The timelines for specific licences differ: ECJU targets a defined working-day period for standard applications, BIS does not publish a fixed processing time for all licence types, and EU member-state authorities vary in their processing speeds. In our experience, businesses that discover they need a specific licence after contracts have been signed face a difficult conversation with their commercial counterparty.
The position above covers the standard licensing architecture. Your facts – the item, the destination, the end-user, and the regime in play – change the analysis considerably. For an early assessment of your export-licence determination, contact Calder & Vance at info@caldervance.com.
Step 3: Apply for a specific licence where required
Where no exception or open licence is available, the exporter must apply for a specific authorisation from the relevant authority before the shipment occurs. The application procedure, the evidentiary burden, and the timeline are regime-specific.
Under the EAR, a specific licence application to BIS is submitted electronically. It requires item classification data, end-use and end-user information, and a statement of the transaction purpose. BIS may request an end-use check in the destination country before making a determination. The applicant carries the burden of demonstrating that the export is consistent with US national-security and foreign-policy objectives. Applications that are incomplete or that omit known adverse information are not merely refused – they can generate an enforcement referral.
Under the UK system, ECJU processes standard individual export licence applications and aims to resolve straightforward cases within a published target period (verify the current target with ECJU before relying on it). Complex applications – those involving sensitive end-users, dual-use items of high control concern, or contested end-use assessments – can take considerably longer. Supporting documentation, including end-user undertakings and technical specifications, is routinely required. ECJU may refer a sensitive application to other government departments, which introduces further delay.
EU member-state licence applications follow the procedural rules of the competent national authority. Timelines, documentary requirements, and the depth of end-use scrutiny vary. A business that has successfully licensed the same transaction from one member state should not assume that a second member state will reach the same outcome on the same facts.
Across all three regimes, the quality of the end-user undertaking – the document in which the recipient certifies the stated end-use and undertakes not to retransfer without authorisation – is a significant determinant of the application's success. A vague or unsigned undertaking almost guarantees delay or refusal.
Documentation discipline matters beyond the application itself. All three regimes impose record-keeping obligations. Under the EAR, records must generally be maintained for a defined period after the transaction. The UK and EU impose comparable retention obligations. These records are the first thing a regulator requests when a post-shipment query or investigation arises.
Where do the major regimes diverge most sharply?
Three points of divergence generate the most practical difficulty for businesses operating across the US, UK, and EU simultaneously.
First: extraterritorial reach. The EAR's reach extends beyond US exporters. The de minimis rule captures foreign-made items that contain US-origin controlled content above a defined threshold. The Foreign Direct Product Rule (FDPR – BIS's rule capturing certain non-US goods that are the direct product of US technology or software) extends US jurisdiction to items that may never physically touch US territory. Neither the UK nor the EU applies a directly comparable extraterritorial mechanism to the same degree, though EU restrictive measures can catch non-EU persons in defined circumstances. A business based outside the United States that uses US technology in its manufacturing process may be subject to the EAR without being aware of it.
Second: the "military end-use" and "military end-user" controls under the EAR impose a licence requirement for specified items destined for certain country destinations when the exporter has knowledge that the item will be used in a military end-use or by a military end-user. The EU's catch-all and the UK's end-user controls cover similar ground, but the country scope and the trigger thresholds are not identical. A transaction that is permissible under the EU regime may still require a BIS licence if any US-origin content or technology is present.
Third: re-export and retransfer controls. Once an item is licensed for export from the United States, the EAR continues to govern its onward movement. A distributor in a third country who receives US-origin goods subject to the EAR must obtain authorisation before retransferring them, even if the retransfer is within a region that the EU or UK would treat as freely tradeable. This is a structural point that many distribution agreements fail to address adequately. We have acted for distributors who received regulatory queries arising from their customers' onward sales, not from their own initial import.
What are the key risk flags in cross-border export-licence determinations?
Risk in export-licence determinations concentrates at predictable points. Identifying them early determines whether a business manages the issue or responds to an enforcement notice.
The first risk flag is stale classification. An ECCN, a UK rating, or an EU list classification that has not been reviewed since the item was designed may not reflect current control list language. Exporters often discover this when a shipment is held at customs and a regulator's review reveals that the item's control parameters changed in a list update that the business did not monitor.
The second is incomplete screening. Screening the buyer is necessary but not sufficient. The freight forwarder, the financing bank, the ultimate end-user disclosed in the transaction documents, and any intermediate consignee all require screening against the relevant denied-party lists. Automated screening tools calibrated to one regime's list may not capture designations under another regime's list. Have you confirmed that your screening tool covers BIS lists, the SDN List, OFSI designations, and EU consolidated lists simultaneously?
The third is over-reliance on an open licence or exception without verifying current eligibility. OGELs are updated and occasionally suspended. EAR licence exceptions carry sub-conditions that change. A business that registered under an OGEL three years ago and has not revisited the terms may be shipping without valid authorisation.
The fourth is failure to manage retransfer obligations contractually. A well-structured distribution agreement requires the recipient to comply with the applicable export-control regime before any onward transfer and to notify the exporter if the end-use changes. Businesses that omit these provisions find themselves with limited leverage when a downstream sale creates exposure.
The fifth is delay in response to a regulatory query or a denied shipment. Each regime operates a different clock once a query is raised. Acting promptly – obtaining specialist input, preserving records, and responding completely and accurately to any information request – is the difference between a managed incident and an escalated investigation. If a transaction has been flagged or a filing has been refused, early legal review can preserve options that close quickly.
For a confidential review of an export-licence determination, a flagged shipment, or a regulatory query, contact Calder & Vance at info@caldervance.com.
A common misconception: "our goods are not military, so we are not controlled"
One of the most persistent myths in cross-border export compliance is that civilian goods are outside the export-control regime. The reality is more demanding.
Dual-use goods – items designed for civilian purposes but capable of contributing to military, proliferation, or surveillance end-uses – form the core of the control lists under all three major regimes. A semiconductor used in consumer electronics. A precision bearing used in machine tools. A software tool that performs network monitoring. All may carry control ratings that require licence assessment before export to certain destinations or end-users, regardless of the exporter's intent.
The catch-all controls reinforce this. Where an exporter has reason to suspect that items – even items not on the control list – may contribute to a weapons-of-mass-destruction programme or certain military end-uses, the obligation to seek guidance before export arises. "We did not know the goods were controlled" is not a defence if the circumstances would have put a reasonable exporter on notice.
In our cross-border practice, we have advised manufacturers of industrial equipment, software developers, and chemical suppliers who were surprised to discover that their routine commercial products attracted control requirements. The question is not whether the item is "military." The question is whether it appears on a control list or triggers a catch-all, under any of the regimes that have jurisdiction over the transaction.
Related practices
- Deemed export and technology controls under the EAR – BIS classification, deemed-export licences, and technology-transfer controls for US-origin items
- Export-licence determinations: UK and EU compared – ECJU and EU authority comparison, OGEL eligibility, and specific-licence procedures
- End-use controls and catch-all obligations across regimes – how catch-all provisions interact across US, UK, and EU export-control rules