Calder & Vance International Sanctions & Compliance Counsel

Export Controls & Dual-Use · BIS / EAR

Re-export and extraterritorial reach under BIS / EAR: a compliance guide

A German trading house ships a batch of US-origin components to a distributor in Singapore. Six months later, that distributor re-ships the same components to a buyer in a third country. Nobody at the German firm was consulted. Nobody at the distributor thought to ask. The re-export takes place, and the US Bureau of Industry and Security now has jurisdiction over a transaction that never touched American soil.

This is the operational reality of re-export and extraterritorial reach under BIS / EAR: the Export Administration Regulations follow US-origin technology across every subsequent transfer, regardless of who moves it, where, or when. As of May 2026, this extraterritorial reach remains one of the most actively enforced dimensions of the US export-control regime, and non-US companies account for a significant share of recent enforcement actions.

This guide explains the governing legal basis, the tests that determine when a re-export triggers a licence requirement, where the major regimes diverge, and the practical steps a cross-border business should take before it ships, sells, or transfers anything that contains US-controlled content.

What is a re-export and why does BIS / EAR reach it?

A re-export, under the EAR, is the transfer of US-origin items from one foreign country to another foreign country – and the EAR applies to it in exactly the same way as it applies to an original export from the United States. The governing authority is BIS, operating under the Export Administration Regulations pursuant to the Export Control Reform Act and, where necessary, IEEPA. The reach is deliberate and structural: US-origin goods, technology, and software carry their classification with them wherever they travel.

Three facts determine whether a particular re-export requires a licence. First, the item's Export Control Classification Number (ECCN – the alphanumeric code on the US Commerce Control List that defines an item's controlled characteristics and the reasons it is controlled). Second, the destination country. Third, the end-use and end-user. All three must be assessed together; a controlled item destined for a permissive regime may still require a licence if the end-user appears on the Entity List or if the stated end-use raises a red flag.

What catches businesses off guard is the concept of "subject to the EAR." An item can be subject to the EAR without ever being classified as controlled – and even an EAR99 item (the lowest-sensitivity category) can require a licence for certain destinations, end-users, or end-uses. In our experience, companies focus on ECCNs and neglect the licence-requirement matrix that applies to items outside the Commerce Control List proper. That gap is where enforcement actions find their footing.

How does the de minimis rule determine extraterritorial reach?

The EAR's de minimis rule establishes a controlled US-content threshold below which a foreign-made product is not "subject to the EAR" by virtue of its incorporated US content alone. Where US-origin controlled content represents 25 percent or more of the fair market value of a foreign-produced item (for most destinations), the item is subject to the EAR and any transfer of it is a re-export that BIS can reach. For destinations subject to more restrictive controls, the threshold drops to 10 percent or more.

The foreign-direct product rule, or FDPR, extends the reach further still. Under the FDPR, certain foreign-made products that are the direct product of US-controlled technology or software – even where no US-origin component is physically incorporated – can be subject to the EAR. BIS has expanded the FDPR's application in recent years to capture advanced semiconductor manufacturing equipment and, in some configurations, foreign-produced items destined for specific entities. Whether the FDPR applies to a given product and destination is a technical question that requires classification analysis before any shipment decision is made.

These two mechanisms – de minimis and the FDPR – mean that a non-US manufacturer can produce an item entirely outside the United States and still find that a subsequent re-export of that item is governed by BIS. This is the hard edge of extraterritorial reach: the EAR follows technology, not geography.

What is the difference between a re-export licence requirement and a re-transfer?

A re-export is a movement of an item across national borders; a re-transfer is a change in end-use or end-user within the same country. Both can trigger a licence requirement, and exporters who focus only on cross-border movements miss re-transfer risk entirely. A distributor who receives controlled items in one country and then sells them to a different domestic customer may be re-transferring without the knowledge – or the authorisation – of the original exporter. The EAR places obligations on every party in the chain.

The practical implication is that end-use and end-user controls must run beyond the first sale. Many exporters assume that once the item clears US Customs and reaches the declared end-user, their EAR obligations are discharged. They are not. The obligation to ensure that the item does not reach a prohibited end-user or end-use travels with the item. An exporter who receives information suggesting a prohibited re-export or re-transfer and takes no action can be found to have proceeded with knowledge of the violation.

This is where the red-flag checklist – BIS's published list of indicators that a transaction may involve a diversion attempt – becomes operationally critical. Receiving a red flag and failing to act on it is not a defence; it is evidence of knowledge. Have you built the red-flag review into your post-shipment monitoring process, or does your compliance programme stop at the point of export?

Step 1 – Classify the item and map the controlled-content chain

The first step in any re-export compliance analysis is confirming the ECCN for every item in the shipment, including all US-origin sub-components and the technology incorporated during manufacture. Classification is not a one-time event: product specifications change, BIS updates the Commerce Control List, and a new end-use context can change the analysis even for a familiar product line.

Mapping the controlled-content chain requires working backward through the bill of materials to identify every US-origin controlled element. For a complex assembled product, this can involve dozens of components across multiple tiers of the supply chain. In our practice, we regularly advise manufacturers who have classified their finished goods correctly but have not assessed whether US-origin sub-tier components independently trigger EAR jurisdiction. The FDPR analysis must run in parallel.

  • Confirm the ECCN against the current Commerce Control List, not a cached internal document.
  • Identify all US-origin controlled content and its percentage share of fair market value.
  • Determine whether the FDPR applies to any foreign-produced elements.
  • Document the analysis and the version of the Commerce Control List used.

Step 2 – Screen the destination, end-user, and end-use against restricted-party lists and country controls

Once classification is confirmed, the licence-requirement analysis turns on the destination country, the end-user, and the end-use. BIS maintains several restricted-party lists – the Entity List, the Denied Persons List, and the Unverified List – each carrying different legal consequences. An end-user on the Entity List typically requires a licence for any item subject to the EAR, regardless of ECCN. A party on the Denied Persons List may not receive any item subject to the EAR under any circumstances.

Country controls are embedded in the Commerce Control List licence-requirement columns. The relevant column for a given ECCN identifies the countries for which a licence is required based on the reasons for control. National-security controls, foreign-policy controls, and crime-control classifications each generate different country requirements. The analysis cannot be reduced to a prohibited-country list; it must run through the applicable column for the item's specific ECCN and the specific destination.

End-use controls operate independently of classification. Even an EAR99 item requires a licence if the exporter has knowledge that it will be used in the development or production of weapons of mass destruction or in certain military programmes. The end-use-certificate requirement, where applicable, is a pre-shipment obligation that cannot be retrofitted after the transaction closes.

Step 3 – Determine whether a licence exception applies or a licence application is required

If the screening analysis identifies a licence requirement, the next step is to determine whether a licence exception covers the transaction. BIS publishes a set of named licence exceptions – such as TMP (temporary imports and exports) and RPL (replacement parts) – that authorise specific, defined categories of transaction without a separate licence application. Each exception carries conditions, and those conditions must be met in full; partial reliance is not permissible.

Where no exception applies, a licence application to BIS is required before the re-export takes place. The application requires a detailed description of the item, the parties, the destination, and the end-use. BIS may consult other agencies, including the Department of Defense and the Department of State, before issuing a decision. The review period varies; complex or sensitive applications take longer, and BIS may request additional information mid-review. Planning a re-export on the assumption that a licence will be granted quickly is a common source of commercial disruption.

A transaction that proceeds without a required licence is a violation. The licence exception analysis and the licence application process are not interchangeable: if the exception does not apply on the facts, there is no shortcut. We have acted for businesses that proceeded on a mistaken exception analysis and then needed to manage the disclosure and enforcement consequences.

The position above covers the standard case. Your facts – the item, the destination, the end-user structure, and the content composition of the product – change the analysis significantly.

For a confidential classification and re-export review, contact Calder & Vance at info@caldervance.com.

How does BIS / EAR differ from the UK and EU export-control regimes on re-export?

The BIS / EAR regime is structurally distinct from its UK and EU counterparts in one critical respect: the EAR follows US-origin items across all subsequent transfers, regardless of which country's exporter moves them. Neither the UK nor the EU dual-use regime applies extraterritorially in this way to non-UK or non-EU persons for goods that are not physically located in those jurisdictions at the time of transfer.

Under the UK's export-control regime, administered by ECJU, and under the EU dual-use framework (EU Regulation 2021/821), the export-control obligation is triggered by the movement of goods or technology from the respective territory. A UK exporter sending goods to Singapore is subject to UK controls; a Singaporean distributor sending those same goods onwards is not subject to UK controls on that second movement (though it may be subject to Singapore's own rules and, if the goods are US-origin, to the EAR).

This divergence has concrete implications for multi-jurisdiction supply chains. A business that is UK- or EU-incorporated but exports US-origin goods carries two sets of obligations simultaneously: the territorial controls of its home jurisdiction and the extraterritorial controls of BIS. Where those two regimes impose inconsistent requirements – for instance, where a UK general open licence permits an export that BIS requires a licence for – the stricter prohibition governs and the exporter must comply with both.

Japan, Singapore, and other allied-country regimes operate control lists that are substantially aligned with the Wassenaar Arrangement, but none of them replicates the EAR's extraterritorial reach. A Singapore-based distributor of US-origin goods is not required by Singapore law to apply BIS controls on onward shipments – but it is required to do so by BIS, and non-compliance is enforceable against the distributor directly through denial orders and other administrative measures.

Common risk flags and when to involve compliance counsel

Red flags in re-export transactions cluster around a predictable set of patterns. Recognising them early – before the transaction closes – is the difference between a managed compliance process and an enforcement matter.

  • Unusual intermediary structure: a routing pattern that adds a third-country intermediary without a clear commercial rationale is a classic diversion indicator.
  • Unfamiliar end-user: a declared end-user that cannot be independently verified, or whose business activities are inconsistent with the ordered goods.
  • Payment in cash or through an unrelated third party: a payment structure that does not match the commercial relationship.
  • Request to omit or alter documentation: any request to remove the country of origin, alter the ECCN marking, or omit the export-control disclaimer from shipping documents.
  • Destination mismatch: a stated destination that is inconsistent with the buyer's known market or with regional distribution patterns.

The right time to involve export-control counsel is before the transaction is agreed, not after the shipment has left. If classification is uncertain, if the end-user is unfamiliar, or if any of the above patterns is present, the analysis should be completed before commitment. If a transaction has already taken place and a potential violation has been identified, early legal advice on voluntary self-disclosure (VSD – a formal submission to BIS of a potential violation that can significantly affect the outcome of any enforcement proceeding) preserves options that are unavailable once BIS has opened an investigation.

If a transaction has already been flagged, or if a compliance review has identified a potential gap, an early assessment can preserve options that narrow quickly once enforcement proceedings begin.

To discuss a re-export classification or a potential disclosure, contact Calder & Vance at info@caldervance.com.

A common misconception: "We are not a US company, so the EAR does not apply to us"

The most persistent myth in our cross-border practice is the belief that the EAR is a US-person obligation and that a non-US company is simply outside its reach. This is wrong. The EAR applies to all persons – US and non-US – with respect to items subject to the EAR. A German exporter, a Singaporean distributor, a Japanese manufacturer: each is subject to BIS jurisdiction to the extent that it deals with items that are subject to the EAR, regardless of its nationality or the location of its operations.

This matters because non-US businesses often operate without the export-control compliance infrastructure that US exporters are required to maintain. They may have no ECCN-classification process, no restricted-party screening, and no end-use-certificate procedure. When a BIS investigation follows a re-export that triggered the FDPR or exceeded the de minimis threshold, the absence of a compliance programme is not a mitigating fact – it is an aggravating one.

We regularly advise non-US companies that are encountering the EAR for the first time, typically following a distributor audit, a bank query, or a BIS letter. The initial steps – classification, controlled-content mapping, and restricted-party screening – are well-defined, but they require accurate data from the supply chain and a working knowledge of the Commerce Control List that most non-US companies have not had reason to build.

Related practices

Frequently asked questions

What are the steps to manage re-export risk under BIS / EAR?
Managing re-export risk under the BIS / EAR requires four sequential steps: first, classify every item by ECCN and map all US-origin controlled content in the product; second, screen the destination, end-user, and declared end-use against the Commerce Control List and all BIS restricted-party lists; third, determine whether a licence exception covers the transaction or whether a licence application to BIS is required; and fourth, build post-shipment monitoring into the compliance programme so that red flags on onward movements are caught before they become violations. Each step must be documented, and the classification analysis must be reviewed whenever product specifications or the Commerce Control List changes.
What is the most common mistake in re-export and extraterritorial reach?
The most common mistake is the assumption that EAR obligations end at the point of first export. They do not. The EAR follows US-origin items through every subsequent transfer, and the obligation to ensure that the item does not reach a prohibited end-user or end-use continues throughout the supply chain. Non-US distributors and manufacturers who incorporate US-origin controlled content into foreign-made products often discover – during a bank query or a BIS investigation – that they have been operating subject to the EAR without knowing it. Early classification work and controlled-content mapping prevent this situation from arising.
How does BIS / EAR differ from other regimes here?
The fundamental difference is extraterritoriality. The EAR applies to all persons dealing with items subject to the EAR, regardless of nationality or location. The UK export-control regime (ECJU) and the EU dual-use rules apply territorially: they regulate exports from UK or EU territory, not onward movements by third-country parties. Japan, Singapore, and other allied regimes are similarly territorial. This means a non-US company dealing with US-origin goods faces EAR obligations that its home-country export-control rules do not generate – and where the two regimes impose different requirements, the stricter obligation governs.

Talk to Caldervance

For a scoped view of your exposure, contact info@caldervance.com.

Discuss your matter

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.