A trading house in the Netherlands exports dual-use goods to a distributor in Singapore. That distributor re-exports a portion of the shipment to a buyer in a third country. No one pauses to ask whether EU export-control obligations followed the goods beyond the EU border. Weeks later, the trading house receives a query from the competent authority. The goods, it turns out, fell under a category requiring authorisation for the final destination – and the EU rules extended far enough to catch the transaction.
Re-export and extraterritorial reach under EU export-control and sanctions rules means that obligations imposed at the point of export from the EU can persist beyond EU territory, binding the original EU exporter and, in certain circumstances, the non-EU recipient. The governing instruments are the EU dual-use regulation and the relevant Council regulations on restrictive measures. As of May 2026, the reach of these instruments is an active area of regulatory clarification, and businesses that treat EU obligations as ending at the EU border face material enforcement risk.
This guide sets out the legal basis for extraterritorial reach, the procedure for assessing re-export risk, the principal pitfalls practitioners encounter, and the points at which involving counsel is the right call. It draws comparisons with the US and UK regimes where the analysis diverges.
Step 1: Understand the legal basis – what makes EU rules follow the goods?
EU export-control and sanctions obligations attach to the goods, the technology, and the transaction, not only to the exporting entity's location. The EU dual-use regulation applies when controlled items leave EU customs territory. What is less well understood is that end-use and re-export conditions placed on an authorisation continue to bind the consignee even after the goods have cleared EU borders.
The mechanism works in two ways. First, export authorisations – whether individual licences, global authorisations, or Union general export authorisations – routinely contain conditions requiring the exporter to obtain written assurance from the consignee that the goods will not be re-exported to a prohibited destination without further authorisation. These conditions are contractual in the first instance, but they create a paper trail that competent authorities examine. Second, where goods are subject to a Council regulation imposing an asset-freeze or sectoral prohibition, the prohibition applies to any person subject to EU jurisdiction. For EU-incorporated entities and EU nationals, jurisdiction extends globally. A French national employed by a non-EU subsidiary who approves a re-export to a sanctioned destination remains within the reach of the relevant Council regulation.
The practical upshot: an EU exporter cannot treat delivery to a non-EU intermediary as the end of its obligations. The question is not "have we exported lawfully?" but "where will the goods ultimately go, and does our authorisation cover that route?"
Step 2: Classify the goods and identify the authorisation against the destination chain
Classification is the foundation of every re-export analysis. Before a re-export obligation can be assessed, the exporter must confirm the item's classification under the EU Common Military List or the dual-use annexe, and confirm whether the final destination changes the authorisation picture.
Union general export authorisations cover specific items to specific destinations. They do not, as a default, extend to re-exports from those destinations to third countries. An exporter shipping to a permitted country under a general authorisation needs to consider whether that authorisation is silent on onward transfer – and if it is silent, the absence of a prohibition is not the same as a permission. We regularly advise clients who have conflated the two.
Classification must also account for catch-all controls (the mechanism that can subject an unclassified item to export restrictions if the exporter has reason to believe it will be used in connection with a weapons programme or other listed concern). Where the re-export route passes through a jurisdiction associated with diversion risk, the catch-all analysis becomes acute. Competent authorities across EU member states have issued guidance on indicators of diversion; exporters handling re-exports should build a documented diversion-risk assessment into their procedure.
Cross-regime note: The US Export Administration Regulations (EAR) impose their own re-export controls, and BIS applies them to items with US-origin content regardless of where the re-export originates. An EU exporter handling goods that incorporate US-origin technology or components may face concurrent US re-export obligations. In our cross-border practice, we consistently see businesses that have addressed the EU classification but missed the US de minimis threshold or the foreign direct product rule – both of which can bring a non-US shipment within BIS jurisdiction. Mapping both regimes at the classification stage avoids that gap.
Step 3: Obtain and document end-use assurances before shipment
The single most effective risk-reduction step in a re-export chain is a documented end-use undertaking from the consignee, obtained before the goods leave the EU. This is not optional housekeeping; it is a legal condition on many individual and global authorisations, and its absence is an aggravating factor in enforcement proceedings.
A well-constructed end-use undertaking does four things. It identifies the goods and their classification. It states the intended end use and end user. It prohibits re-export to named destinations or categories of destination without the exporter's prior written consent and, where required, a further authorisation. And it commits the consignee to cooperate with any post-shipment verification. Exporters who issue a generic non-diversion statement and treat it as sufficient regularly find that it does not satisfy the competent authority's expectations.
For higher-risk destinations or higher-sensitivity classifications, post-shipment verification visits or third-party checks are advisable. The EU dual-use regulation contemplates post-shipment verification as part of an effective compliance programme. Some national competent authorities make post-shipment verification a condition of granting an individual licence for sensitive dual-use items. If a consignee refuses to accept verification conditions, that refusal is itself a risk signal that should pause the transaction pending further review.
Record-keeping is integral to this step. Authorisation files, end-use undertakings, shipping documents, and consignee correspondence should be retained for the period required under the applicable rules. Competent authorities can request these records during and after the export, and gaps in the record are treated as compliance failures even if the underlying transaction was substantively lawful.
How does EU extraterritorial reach compare with the UK and US positions?
The EU's extraterritorial reach is real but more limited than the US position, and understanding the difference is essential for businesses operating under multiple regimes simultaneously.
Under the EAR, the US claims jurisdiction over re-exports of items anywhere in the world if those items have US-origin content exceeding a defined percentage, or if they are the direct product of US technology or software. This is a genuinely extraterritorial assertion: a non-US company in a non-US country re-exporting a non-US-manufactured product can still require a BIS licence if US-controlled technology went into the product's design or manufacturing. The foreign direct product rule, extended in recent years to cover semiconductor supply chains, illustrates how far this reach extends. See our related guide at Re-export and extraterritorial reach under OFAC and Re-export and extraterritorial reach: OFAC – further analysis for the US sanctions dimension.
The UK position under ECJU mirrors the EU regime in significant respects: a UK export licence may include conditions on re-export, and an Open General Export Licence may not cover onward transfer to certain destinations. UK nationals and UK-incorporated entities are subject to UK sanctions obligations wherever they act. Post-Brexit, UK and EU authorisations are separate instruments; a UK OGEL does not substitute for an EU individual licence, and an EU global authorisation does not satisfy UK requirements. Businesses that held EU authorisations before Brexit and assumed continuity were in many cases mistaken.
The EU sanctions dimension adds a further layer. Council regulations on restrictive measures prohibit EU persons – including EU subsidiaries of non-EU groups, EU nationals employed anywhere, and any person within EU territory – from making funds, economic resources, or controlled goods available, directly or indirectly, to designated persons or for prohibited purposes. "Directly or indirectly" is where the re-export question intersects with the sanctions question. A re-export from Singapore to a destination where the end user is a designated person or falls under a sectoral prohibition can constitute a sanctions violation by the original EU exporter if that exporter had knowledge or reason to believe.
The practical implication: a business exporting from the EU into a re-export chain needs to run a parallel analysis – export controls and sanctions – across the full chain, not only at the point of first export. If the chain includes US-origin content, a third track is added. Treating these as sequential rather than concurrent analyses is one of the most common sources of compliance failure we encounter.
What are the principal risk flags in a re-export chain?
Risk flags in re-export chains tend to cluster around information gaps, counterparty behaviour, and routing anomalies. Identifying them early is materially easier than managing an enforcement inquiry after the fact.
The following patterns warrant heightened scrutiny and documented review:
- A consignee operating in a country with a strong record of diversion to restricted destinations.
- A request to change the destination or end user after the order is placed but before shipment – particularly if the change comes without explanation.
- Payment routing that passes through unrelated jurisdictions or involves parties not named in the contract.
- Consignee resistance to end-use undertakings or post-shipment verification conditions.
- Goods ordered in quantities inconsistent with the stated end use or the consignee's known business scale.
- Items that have limited civilian application but are classified under dual-use controls because of military potential.
- A distributor relationship where the ultimate end user is not disclosed or cannot be identified.
In a recent matter, a manufacturing business faced an enforcement inquiry after a component it had exported to a distributor in a third country was re-exported to a destination subject to restrictive measures. The business had obtained a standard end-use undertaking but had not conducted due diligence on the distributor's own customer base. We assisted the business in scoping the apparent violation, preparing a voluntary disclosure, and restructuring its distributor approval process to require disclosure of anticipated re-export destinations at the point of contract. The inquiry concluded without a referral for formal sanction, though no outcome of that kind is guaranteed.
Catch-all obligations mean that a business cannot rely solely on the absence of a licence requirement. If you have information that goods may be diverted to a programme of concern, you must act on that information even if the classification does not independently require a licence. Failure to do so converts what might have been an administrative oversight into a knowing violation – and enforcement authorities treat the two very differently.
Step 4: Build a documented internal procedure for re-export screening
A documented internal procedure is the clearest evidence of good faith and is the baseline expectation of every EU national competent authority we have observed in enforcement practice. Its absence does not merely increase penalty risk; it removes the firm's ability to argue that a violation was isolated rather than systemic.
An effective re-export screening procedure covers five elements. First, a classification and technology-control review at the point of order acceptance, including US-origin content assessment where relevant. Second, a counterparty screening and due-diligence check against the EU Consolidated List, the UN Consolidated List, and other applicable designations lists, covering both the immediate consignee and, where identifiable, the end user. Third, a destination-risk assessment that maps the known re-export route and flags diversion-risk indicators. Fourth, documentation and approval – an authorised signatory confirms that the re-export analysis has been completed, conditions have been imposed, and any outstanding questions have been resolved before shipment. Fifth, post-shipment monitoring and a mechanism for acting on red flags that emerge after delivery.
Programme design should also address what happens when a red flag appears mid-chain: who has authority to halt shipment, what escalation path exists, and when to contact the competent authority or legal counsel. In our experience, programmes that assign clear decision authority to a named individual rather than leaving it to collective judgment are more likely to act promptly when a problem arises.
The position above covers the standard case. Your specific goods, destination chain, counterparty profile, and the applicable authorisations will change the analysis. If you are designing or reviewing a re-export compliance programme, contact Calder & Vance at info@caldervance.com for an initial discussion.
Step 5: Know when to involve counsel – and what to do if something has already gone wrong
Early involvement of counsel in a re-export programme saves time and cost. Late involvement – after a competent authority inquiry has arrived – constrains the options that remain available.
Counsel should be involved at the programme-design stage when the business is entering a new export market, adding a new product category to an existing export business, or restructuring a distribution chain that will involve onward transfer of controlled goods. The earlier the analysis, the broader the range of authorisation routes and programme designs that can be considered. For a business handling dual-use items destined for markets with diversion risk, or for a business with US-origin content in its supply chain, early counsel engagement is not a luxury – it is the difference between a workable programme and one that creates systematic exposure.
If something has already gone wrong – a shipment has reached a destination not covered by the authorisation, a consignee has re-exported to a restricted country, or a competent authority has made a formal enquiry – the first priority is to scope the apparent violation accurately before deciding how to respond. A voluntary disclosure to the competent authority can, in appropriate circumstances, reduce the severity of the response. However, the decision to disclose, the timing, and the framing require careful legal analysis. Approaching the authority with an incomplete or inaccurate account is worse than the original violation in most enforcement frameworks.
If a transaction has already been flagged or a filing has been refused, an early review by specialist counsel can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential assessment.
A common objection handled: "Our goods are not classified, so EU re-export rules do not apply to us"
This is the most persistent misconception we encounter from exporters who are not embedded in regulated defence or high-technology sectors. It is wrong in two directions.
First, the catch-all controls apply to unclassified goods. If you know or have reason to suspect that your goods will be used in connection with a programme of concern, the control applies regardless of classification. Competent authorities across the EU have acted against exporters of apparently mundane goods – industrial equipment, electronic components, chemicals with commercial applications – on catch-all grounds where diversion indicators were present. "My goods do not appear on the list" is not a complete compliance analysis.
Second, where goods are part of a supply chain that incorporates controlled technology or components from other suppliers, the overall item may be subject to controls even if the individual component supplied by your firm is not. Re-export chains frequently involve goods assembled from multiple sources. The classification of the assembled item, and its re-export destination, may engage controls that the supplier of a single component did not anticipate.
Third, the sanctions dimension is entirely independent of classification. A re-export that involves making goods available to a designated person is a sanctions violation whether or not those goods are export-controlled. Businesses that rely on the absence of a classification to conclude that no legal obligation applies have missed the parallel sanctions analysis entirely.
Related practices
- Deemed export and technology controls under BIS and the EAR – US deemed-export analysis for technology transfers, including to foreign nationals
- Re-export and extraterritorial reach: OFAC guide – US sanctions dimension of re-export chains, secondary-sanctions risk, and OFAC licensing