A Canadian-headquartered exporter ships dual-use components to a distributor in a third country. That distributor re-ships to an end-user the exporter has never screened. Months later, the goods appear in a sanctioned jurisdiction. Global Affairs Canada opens a review. The exporter assumed its obligations ended at the border. They did not.
Under Canada's export-control and sanctions regime, the obligation to assess re-export risk does not terminate when goods leave Canadian territory. The Special Economic Measures Act ("SEMA") and the Export and Import Permits Act ("EIPA") together create a regime administered by Global Affairs Canada ("GAC") that can reach Canadian persons and goods beyond the Canadian border. Re-export controls and extraterritorial obligations are live compliance questions for any Canadian-nexus transaction involving controlled goods, technology, or sanctioned jurisdictions. As of May 2026, the regime sits alongside comparable extraterritorial regimes operated by OFAC and BIS in the United States, OFSI in the United Kingdom, and the EU Council – and the interactions between them compound the risk.
This guide walks through the governing legal basis, the re-export test, the cross-border comparison with US and UK controls, the common risk flags, the documentation standard, and when to involve counsel.
What is the governing authority and legal basis for Canada's re-export controls?
Canada's re-export regime is administered by GAC under a legal structure that combines trade controls and financial-sanctions tools. The EIPA governs export and re-export permits for controlled goods and technology; SEMA provides the autonomous-sanctions authority through which Canada may freeze assets and prohibit dealings with designated persons and entities.
The Export Control List ("ECL") under the EIPA sets out the categories of goods and technology that require an export permit before they leave Canada – and, crucially, before they are re-exported from a third country by a Canadian person or entity. GAC issues permits and provides guidance on whether a proposed re-export requires prior authorisation. The ECL broadly mirrors the structure of international control lists, covering strategic and dual-use goods with reference to end-use and end-user considerations.
SEMA's reach is explicitly extraterritorial in respect of designated persons. A Canadian person – or a person in Canada – who deals with property of a designated person commits an offence regardless of where that property is located. For re-export transactions, this means that routing goods through an intermediary in a third country does not insulate a Canadian exporter from SEMA liability if a designated person's property interest exists anywhere in the chain.
GAC also maintains the Area Control List ("ACL"), which specifies destinations to which all exports require a permit, whatever the goods. This list is separate from the ECL and operates as a destination-based control. Exporters who classify goods correctly against the ECL but fail to check the ACL regularly face permit requirements they did not anticipate.
In our experience, businesses new to the Canadian regime underestimate the interaction between these instruments. Correct classification under the ECL is only the first step; the ACL check, the end-use declaration requirement, and the SEMA designated-person screen must all run in parallel before a permit application is finalised.
How does the Canadian re-export test work in practice?
The Canadian re-export test asks whether a Canadian person is involved in a re-export of controlled goods, whether the goods originated in Canada or are subject to Canadian controls, and whether the destination or end-user triggers a permit requirement or a SEMA prohibition.
Three elements must be assessed for each re-export transaction.
First, Canadian nexus: is there a Canadian person, a Canadian-incorporated entity, or goods of Canadian origin in the chain? If yes, Canadian controls apply to the re-export, even if the physical shipment never re-enters Canada. A Canadian parent directing a foreign subsidiary to re-export goods may itself be within the regime's reach, depending on the instruction given and the nature of the parent's involvement.
Second, classification and list-check: are the goods on the ECL? The ECL is structured by control categories that map broadly onto multilateral control lists. If the goods are ECL-listed, a re-export permit may be required for the destination in question. GAC's online tools and published guidance assist with this classification step, but complex or borderline items warrant a formal classification request where GAC will provide a written position.
Third, destination and end-user screen: is the re-export destination on the ACL? Is the end-user a SEMA-designated person? Does the end-use give rise to concern under Canada's catch-all provisions, which allow GAC to refuse or revoke a permit where there is a risk of diversion to a prohibited end-use or end-user, even for goods not otherwise listed?
The catch-all is a point practitioners often underweigh. Canada operates a risk-based catch-all that permits permit refusal on the basis of credible diversion risk. This is not a mechanical threshold; it is a judgment-based control. An exporter who ships ECL-classified goods to a distributor without end-user assurances, in a geography known for diversion risk, may find GAC applying the catch-all even where the formal classification exercise produced a clean result.
Where the three-element test raises a flag, the exporter must either obtain a permit or restructure the transaction to remove the Canadian nexus – and the latter route carries its own legal risk if it amounts to a deliberate avoidance of the control.
How does Canada's regime compare to US, UK, and EU extraterritorial controls?
Canada's extraterritorial approach is narrower than that of the United States but is tightening in its reach over Canadian persons and property wherever situated. A practical cross-regime comparison matters because most dual-use export transactions with a Canadian dimension also carry US or EU-origin technology, creating a stacked-control problem.
Under the US EAR administered by BIS, US-origin items are subject to re-export controls regardless of who holds them or where they are located at the time of re-export. The de minimis rules determine whether the US content in a foreign product is sufficient to bring that product within EAR jurisdiction for re-export purposes. Canada does not operate an equivalent de minimis calculation for Canadian-origin content in foreign products, but a Canadian company re-exporting US-origin items is still subject to BIS re-export controls independently of EIPA.
For a transaction involving both Canadian and US-origin technology, the compliance team must run both classification exercises simultaneously. A permit obtained from GAC under the EIPA does not satisfy BIS's re-export licence requirement, and vice versa. The two regimes are independent; the stricter prohibition governs for any particular element of the transaction.
Under OFAC's financial-sanctions regime, the extraterritorial reach of US sanctions extends to US persons wherever located, to transactions that clear through the US financial system, and to secondary-sanctions risk for non-US persons dealing with certain SDN-listed parties. Canada's SEMA designated-persons list does not replicate the OFAC SDN List (OFAC's list of Specially Designated Nationals and blocked persons) in full; the two lists overlap but diverge. A counterparty not on Canada's SEMA list may still be on the SDN List, exposing a Canadian-incorporated company with US-dollar payment flows to OFAC risk.
The UK's OFSI-administered financial-sanctions regime operates similarly to SEMA in its extraterritorial design: UK persons and persons in the UK are caught wherever the property is located. ECJU export controls add a parallel layer for UK-origin items. In practice, a Canadian exporter with a UK subsidiary or UK-origin components in its supply chain must assess all three regimes – Canadian, US, and UK – before a re-export transaction can be cleared.
The EU dual-use regulation also applies to EU-origin goods moving through third countries where an EU person has involvement. Where a Canadian company acts as an intermediary for EU-origin technology destined for a third market, the EU regime may attach independently of the Canadian controls.
What does this mean in practice? A re-export transaction that is clean under the EIPA may still require a BIS licence, may trigger OFAC or OFSI exposure through the payment route, and may attract EU controls if the technology has EU origins. Each layer must be assessed on its own terms. We regularly advise on exactly this multi-regime stacking problem, and the failure to map all applicable layers at the outset is the single most consistent cause of compliance failures we see on Canadian-nexus re-export transactions.
For detailed analysis of BIS re-export controls and the deemed-export regime that can apply to technology released to foreign nationals even within Canada, see our dedicated service page: Deemed export and technology controls under BIS and the EAR. For a broader cross-border re-export guide covering multiple regimes, see Re-export and extraterritoriality: a cross-border guide.
What are the key risk flags for Canadian re-export compliance?
Re-export risk under the Canadian regime concentrates around five recurring patterns. Each represents a situation where a business that has passed its own initial screen encounters a control it did not anticipate.
Distributor arrangements without end-user controls. An exporter that sells ECL-classified goods to a foreign distributor for onward sale into multiple markets has, in effect, extended its export footprint across every market that distributor serves. Without contractual end-user controls, a re-export certification requirement, and a right to audit, the exporter cannot demonstrate to GAC that it took adequate steps to prevent diversion. GAC's guidance identifies distributor transactions as a higher-risk category for exactly this reason. Have your distribution contracts been reviewed against Canadian re-export requirements?
Technology transfer through licensing and cloud access. The EIPA's controls are not limited to physical goods. Controlled technology transferred by email, cloud upload, training session, or remote access to production equipment may require a permit in the same way as a physical export. A Canadian technology licensor that provides foreign customers with technical data, software updates, or remote configuration support for ECL-classified systems may be effecting a series of controlled exports with each data transfer. In our experience, this category of exposure is consistently underestimated by technology businesses that focus their compliance effort on physical shipments only.
Intermediary geography risk. Routing goods through a transit jurisdiction with a weak export-control record does not reduce Canadian control requirements; it may increase scrutiny. GAC's catch-all can be applied where a transit route is inconsistent with the stated end-use or end-user, and a pattern of routing through high-risk transit points is itself a red flag in any subsequent GAC review.
Acquiring companies with undisclosed Canadian-origin technology. In M&A contexts, a target company may hold licences to Canadian-origin controlled technology, or may have received Canadian-origin components under a permit that contained re-export conditions. The acquirer inherits both the assets and the compliance obligations. A post-acquisition re-export by the combined entity that breaches the original permit conditions creates retrospective liability for goods the acquirer never directly imported.
SEMA list divergence from other regimes. As noted above, Canada's SEMA designated-persons list does not map exactly onto OFAC's SDN List, OFSI's consolidated list, or the EU's financial-sanctions lists. A counterparty on the SEMA list may not appear on any other regime's list; a counterparty absent from the SEMA list may be heavily sanctioned elsewhere. Cross-regime screening – not a single-list check – is the minimum standard for any transaction with a Canadian dimension and cross-border payment flows.
What documentation should a Canadian exporter maintain for re-export transactions?
Documentation is both a compliance requirement and a defence. In the event of a GAC review or enforcement inquiry, the exporter's ability to demonstrate that it applied a structured control process at the time of the transaction is central to its position.
The documentary record for a re-export transaction should include the following elements.
An export classification record documenting the ECL analysis, the person who conducted it, the date, and the conclusion. For borderline items, this should include the analysis supporting the conclusion, not only the conclusion itself. Where a formal classification request was submitted to GAC, the response should be retained in the file.
An ACL and SEMA screen record documenting the date of the check, the lists checked, the version or date of the list used, and the result. Lists are updated; a screen conducted at contract signature may not reflect additions made at the time of shipment. The screen should be repeated close to the date of dispatch for any transaction with a longer lead time.
An end-user statement or certificate from the foreign buyer or re-exporter, confirming the intended end-use and end-user, and committing not to re-export to a prohibited destination or person without Canadian authorisation. GAC's published forms provide a template, but the statement must be tailored to the specific goods and destination in question.
The permit itself, where one was obtained, together with the application, the supporting documents, and any conditions GAC attached to the permit. Permit conditions are binding and must be incorporated into the exporter's internal process for that transaction.
A record of any red flags identified and how they were resolved. A compliance file that shows flags were raised and then dismissed without analysis is more damaging in an enforcement context than a file that shows a genuine risk was identified, assessed, and mitigated. The process is as important as the conclusion.
Record retention periods under the EIPA are set in the applicable regime; verify the current requirement before relying on any figure, but a minimum of several years is standard across comparable export-control regimes and should be the working assumption until verified.
When should a business involve sanctions and export-control counsel on a Canadian re-export matter?
The decision to involve counsel often comes too late. By the time a GAC inquiry has been opened, or a partner bank has flagged a transaction and frozen a payment, the options available are narrower than they would have been at the pre-shipment stage. When is the right moment to seek advice?
Counsel should be involved at the outset when a transaction involves ECL-classified goods destined for a jurisdiction that raises diversion concerns, where the end-user is unknown or is an intermediary with no clear beneficial purpose, or where the transaction involves technology whose classification is uncertain. These are not edge cases; they describe a substantial share of dual-use export transactions with a Canadian dimension.
Counsel should also be involved where a business is redesigning its re-export compliance programme – for example, following an acquisition, an expansion into new markets, or after an internal review has identified gaps in the screening or documentation process. A programme that has not been reviewed against current GAC guidance and the current state of the ECL and SEMA lists may have become non-compliant without any deliberate failure.
Where a potential violation has already occurred – a shipment that went forward without the required permit, a SEMA-listed counterparty that was not caught at screening, or a breach of a permit condition – the question of voluntary self-disclosure ("VSD") arises. A VSD to GAC or to the relevant authority, made promptly and with a complete account of the facts, is generally treated as a mitigating factor in enforcement. The timing and content of a VSD are matters for legal advice; a poorly structured VSD can create admissions that damage the exporter's position rather than improve it.
A SEMA designation challenge – where a Canadian person or entity has been designated and seeks to have that designation reversed – is a distinct process requiring formal petition or judicial-review proceedings. This is specialist work and should not be attempted without counsel experienced in the applicable review mechanisms.
If a transaction has already been flagged by a correspondent bank, a freight forwarder, or a customs authority, an early review by counsel can preserve options. The window to structure a response, consider a VSD, and manage the interaction with GAC is short. Delay compounds the risk.
The position above covers the standard case. Your specific facts – the nature of the goods, the route, the counterparty structure, the payment currency, and the other regimes potentially in play – will change the analysis materially. For an assessment of your position under the Canadian regime and any parallel obligations, contact Calder & Vance at info@caldervance.com.
A common myth: "if the goods are not physically in Canada, Canadian rules do not apply"
This is the most persistent misconception we encounter in Canadian re-export work. The assumption is that once goods have cleared Canadian customs and arrived in the hands of a foreign buyer, Canada's controls are spent. SEMA's extraterritorial design contradicts this directly.
A Canadian person who provides a service, authorises a transaction, or transfers funds in connection with a SEMA-designated person's property commits an offence regardless of where that property is. A Canadian exporter whose goods are subsequently re-exported by a foreign distributor to a SEMA-designated end-user may face exposure if it can be shown that the exporter had reason to know of the intended re-export and failed to take available steps to prevent it. The catch-all provisions of the EIPA compound this: GAC can and does look at the full transaction chain when assessing whether a re-export should have been identified and controlled.
The practical implication is that a compliance programme that terminates at the Canadian border is not adequate for a Canadian-nexus re-export business. Post-shipment monitoring, distributor due diligence, and contractual end-user controls are operational necessities, not optional additions.
A second myth worth addressing: "our US lawyer handled the BIS licence, so we are covered." A BIS licence satisfies BIS. It does not satisfy GAC, OFSI, or the EU regulation. Each regime is independent; each must be assessed on its own terms. The fact that a transaction has been cleared by one authority is not a defence under another.
Related practices
- Deemed export and technology controls under BIS and the EAR – US deemed-export rules for technology released to foreign nationals
- Re-export and extraterritoriality: a cross-border guide – cross-regime comparison of re-export controls across major jurisdictions
- Re-export and extraterritoriality: extended cross-border analysis – extended analysis of multi-regime re-export obligations