A European exporter ships industrial equipment to a buyer in a third country. The goods have a civil application. They also appear on the EU's Combined Nomenclature (the tariff and statistical classification system) and, it turns out, on the EU Control List (the list of dual-use items requiring a licence before export under the relevant Council Regulation). The export has already departed. The compliance team now faces a retroactive licensing question, a potential breach, and a conversation with the competent national authority. As of May 2026, this pattern is among the most common triggers for enforcement referrals across EU Member States.
Export-licence determinations under the EU dual-use regime require a business to classify the item against the EU Control List, identify any applicable catch-all controls, confirm the destination and end-user against sanctions and arms-embargo measures, and then select the correct authorisation – whether a general, global, national, or specific individual licence. The regime is administered through the national competent authority of the exporting Member State, acting within the rules set by the relevant EU Council Regulation. Failure to complete this sequence before export can constitute a strict-liability breach.
This guide walks through each determination step, identifies the points at which EU practice diverges from the US and UK regimes, flags the common failure modes, and explains when specialist export-control counsel should be involved.
Step 1 – Classify the item against the EU Control List
The first and most consequential step is item classification: every export begins with asking whether the goods, software, or technology appear on the EU Control List, which is set out in Annex I of the relevant Council Regulation on dual-use items. That list is structured by category – electronics, computers, telecommunications, sensors, aerospace, marine, and others – and within each category by control parameter.
Classification is technical, not administrative. An exporter must match the item's specifications against the control parameters in the relevant entry. Parameters typically cover performance thresholds, materials composition, or specific functions. Where the item sits close to a threshold, or where the specifications are multi-purpose, the classification becomes an engineering-legal question. In our experience, internal classification done without reference to technical specifications and to the current version of the Control List accounts for a substantial proportion of mis-shipments.
The EU Control List is aligned with the control lists of the multilateral export-control regimes – the Wassenaar Arrangement, the Nuclear Suppliers Group, the Australia Group, and the Missile Technology Control Regime – but the alignment is periodic, not automatic. Updated versions enter into force after a Council Regulation amendment, and the lag between a multilateral list change and its EU implementation matters. Verify the version in force on the date of export.
If the item does not appear on the Control List at all, it is, in EU terminology, "non-listed". Non-listed does not mean unrestricted. Step 2 – the catch-all assessment – still applies.
Step 2 – Apply the catch-all controls and sanctions screening
Even a non-listed item may require a licence if the catch-all control is engaged. The EU dual-use regime operates a catch-all that requires a licence when an exporter knows, or has been informed by the competent authority, that the item is or may be intended for use in connection with weapons of mass destruction programmes, military end-uses in certain destinations, or other specified concerns.
The knowledge standard matters. An exporter is not excused by claiming ignorance of end-use when the facts available – the buyer's profile, the destination, the atypical order pattern, the payment route – ought to have put a reasonable compliance function on notice. The EU General Court has addressed the reasonable-exporter standard in annulment proceedings, and the direction of travel is toward a higher standard of inquiry, not a lower one. We regularly advise exporters on how to document their knowledge-standard assessment in a way that withstands regulatory scrutiny.
Alongside the catch-all, the exporter must screen the destination country, the end-user, and any intermediate parties against the EU Consolidated Sanctions List, relevant arms-embargo measures, and any UN Security Council Consolidated List entries. An item may be classifiable without restriction under the dual-use regime but entirely prohibited under a financial sanctions measure or an arms embargo. These two branches of EU external-trade control sit side by side; an export-licence determination is only complete when both are addressed.
What happens when the screens return a partial match – a name that resembles a listed person but is not identical? The answer requires a human review against the criteria in the relevant regulation. Automated matching tools manage volume; they do not make the legal determination. That determination remains with the exporter.
Step 3 – Select the correct EU authorisation type
Once classification and screening are complete, the exporter must identify which authorisation is available. The EU dual-use regime offers four types of authorisation, and choosing the wrong one does not cure the underlying licence obligation.
EU General Export Authorisations (GEAs) are standing authorisations covering defined items to defined destinations. They are self-executing: the exporter registers with the competent authority, keeps records, and uses the GEA without filing a case-by-case application. GEAs are the lowest-friction option but carry conditions – annual reporting obligations to the competent authority, record-keeping requirements, and, in most Member States, a registration step that must precede first use.
National General Authorisations (NGAs) are issued by individual Member States and supplement the GEAs. Their scope, conditions, and destinations vary significantly between Member States. An exporter established in one Member State cannot use another Member State's NGA. This divergence is one of the most practically important features of the EU regime: a transaction lawful under the NGA of one Member State may require a specific individual licence if the exporter relocates operations across a border.
Global licences are issued to a specific exporter by the competent national authority and cover multiple transactions, recipients, or items. They suit exporters with regular, high-volume movements to a known set of recipients.
Specific individual licences cover a single transaction with a named recipient. They are the default where no general or global authorisation is available. Processing timelines vary by Member State and by the complexity of the end-use assurance required. No regime-wide statutory deadline exists in the same form as, say, the US ITAR processing standard. In our experience, timelines range from a few weeks for straightforward applications to several months where the competent authority requires supplementary information or end-user undertakings.
The position above covers the standard case. Your facts – the item's technical parameters, the destination, the end-user's sector, the route, the regime in play – change the analysis.
For a preliminary assessment of your classification position and licence route, contact Calder & Vance at info@caldervance.com.
How does the EU regime differ from the US and UK approaches?
The EU dual-use regime shares the architecture of the multilateral control lists with the US Export Administration Regulations (EAR) and the UK Strategic Export Licensing Rules, but diverges in administration, enforcement posture, and the scope of the authorisation types available.
Under the EAR, the Commerce Control List (the US analogue of the EU Control List) assigns each item an Export Control Classification Number (ECCN – the alphanumeric code that identifies the control parameter and the applicable licence exceptions under the EAR). The ECCN system is granular: a single item may attract different licence requirements for different destinations and different end-uses based on the reasons-for-control columns. The EU Control List uses a parallel structure but without the ECCN nomenclature, and the EU's GEA system is somewhat broader than the US licence-exception regime for many civilian items destined to allied countries. Businesses operating in both systems must maintain separate classification records aligned with each list.
The UK regime, administered by the Export Control Joint Unit (ECJU), maintains a UK Strategic Export Control List that closely mirrors the EU list – a legacy of pre-2021 alignment – but diverges on specific items as the UK updates its own list independently. Post-2021, a business that previously held a single EU authorisation covering goods transiting through the UK now needs separate UK authorisations for the UK leg. This is a structural compliance gap that we regularly identify in supply-chain reviews for European manufacturers with UK warehousing or distribution steps.
A further divergence is extraterritorial reach. US law – through the EAR and secondary-sanctions mechanisms administered by OFAC – can assert jurisdiction over re-exports of US-origin items and over items incorporating US-controlled technology above a de minimis threshold, regardless of where the exporter is established. The EU regime does not operate a comparable general extraterritorial rule, though it does impose controls on brokering, transit, and intangible transfers. For a manufacturer selling EU-origin goods that incorporate US-sourced components or technology, both regimes apply concurrently. The stricter prohibition governs: if US law requires a licence for a transaction that EU law would permit under a GEA, the exporter must obtain the US authorisation before proceeding.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Contact us at info@caldervance.com.
Step 4 – Prepare and submit the licence application
Where no general or global authorisation is available, the exporter files a specific individual licence application with the competent national authority of the Member State from which the goods will be exported. The application must address item classification, the end-user's identity and end-use, the declared value and quantity, and any applicable end-user undertaking or import certificate from the destination country.
The quality of the technical description is the single largest determinant of processing time. Competent authorities return incomplete applications. A well-structured application includes the item's technical specification, a clear mapping to the relevant Control List entry, the end-user statement on company letterhead, and – where the destination is sensitive – a government-issued import certificate. Where the authority issues a request for additional information, the clock effectively stops. Responding promptly and completely is the practical lever for managing timelines.
Record-keeping obligations attach immediately. The exporter must retain copies of the licence, the shipping documents, the end-user statement, and all correspondence with the competent authority for a period specified in the relevant regulation. In our practice, we advise clients to retain these records for at least five years from the date of export, consistent with the standard across the major regimes, and to maintain them in a format accessible for audit without notice.
An application that is refused is not the end of the road. Most Member States provide an administrative review or appeal route against a refusal, and in appropriate cases the decision can be challenged before national administrative courts. The EU General Court does not directly review Member State competent-authority decisions on individual licences (its jurisdiction runs to Council measures), but the principle of effective judicial protection under EU law constrains the scope for unreviewable administrative refusals. Understanding the appeal route before filing – rather than after a refusal – shapes the application strategy.
Step 5 – Ongoing compliance: record-keeping, reporting, and licence conditions
Receiving a licence does not end the compliance obligation; it begins a new set of ongoing duties. Every authorisation type – GEA, NGA, global, or specific individual – carries conditions that bind the exporter throughout the licence period and in some cases beyond it.
Annual or periodic reporting to the competent national authority is a standard GEA condition. Exporters must declare the items exported, the destinations, and the quantities used against each authorisation in the period. Late or incomplete reports attract administrative attention and, in some Member States, financial penalties. In our experience, this reporting obligation is the most commonly overlooked condition among businesses that have recently begun using a GEA for the first time.
Licence conditions may also restrict re-export by the end-user. Where an end-user undertaking contains a re-export restriction, the exporter is not merely recording a commercial term; it is agreeing to take on a compliance monitoring role for post-shipment use. If the end-user subsequently re-exports the item without the required authorisation, the original exporter may face questions about whether its diligence on the end-use commitment was adequate.
Technology transfers – including sharing software source code, technical drawings, or know-how via email or cloud access – are controlled in the same way as physical exports. A product may clear physical export screening and then be transferred via technical assistance or training in a way that constitutes a separate controlled export. In our cross-border practice, we regularly encounter supply-chain models where the intangible-transfer dimension has not been mapped at all. Have you reviewed your technology-transfer activities alongside your physical-shipment flows?
Risk flags and when to involve export-control counsel
Certain factual patterns recur in EU dual-use enforcement matters and warrant early involvement of specialist counsel rather than internal handling alone.
The first is a classification dispute with the competent authority. Where an exporter has shipped on the basis of an internal classification and the authority takes a different view, the matter moves from administrative to quasi-criminal territory in some Member States. The evidentiary record built at the time of the shipment – or its absence – determines the range of outcomes available.
The second is a supply-chain red-flag pattern: a buyer who declines to state the end-use, an order for quantities inconsistent with stated need, a payment route through a jurisdiction with no obvious commercial connection to the transaction, or a buyer operating in a sector adjacent to a controlled programme. These patterns engage the catch-all control and, in most cases, require a formal internal assessment and documented decision before export proceeds. Shipping without that record is the most reliable route to an enforcement referral.
The third is a post-shipment discovery: an exporter learns that the goods it shipped under a GEA have been re-exported to a destination the GEA did not cover. At this point, the question is whether a voluntary self-disclosure (VSD – a proactive report to the competent authority acknowledging a potential breach) is appropriate, and if so, how to frame it. VSDs, where well-prepared and timed correctly, are treated more favourably in several Member States than a discovered violation. The window for a credible VSD is often shorter than it appears. We have acted for exporters in both the preparation and the assessment phases of this decision.
A common myth in this space is that EU dual-use controls apply only to obvious military goods or weapons. They do not. Dual-use controls cover items that have entirely legitimate commercial applications – industrial lasers, high-performance computers, certain chemicals, telecommunications equipment – precisely because those items also have potential weapons-related applications. The civilian purpose of the goods does not determine whether they appear on the Control List. The specifications do. Dismissing the determination process on the basis that "these are commercial goods" is the framing that produces the enforcement pattern described above.
The position above covers the standard case. Your facts – the item, the buyer, the route, the technique of transfer – change the analysis materially.
Related practices
- Deemed exports and technology controls under the EAR – classification and licensing for intangible technology transfers under US BIS rules.
- OFAC export-licence determinations guide – parallel determination steps under the US OFAC licensing regime.
- OFAC export-licence determinations: advanced guide – deeper analysis of OFAC licensing routes and cross-regime interaction.