A European distributor ships goods to a partner in a third country. Months later, that partner re-exports the goods to a destination subject to EU restrictive measures. The distributor receives an inquiry from its national competent authority. Was the original export lawful? Does the EU regime reach the subsequent onward shipment? And what obligations had the distributor to anticipate exactly this outcome?
As of May 2026, the EU dual-use and sanctions regimes together impose extraterritorial obligations that extend well beyond the moment goods leave EU territory. An EU-origin exporter may carry residual responsibility for re-exports by its foreign partners, particularly where it had reason to know of the end-use or end-user risk. The governing framework is the EU dual-use regulation, the relevant Council regulations imposing sectoral sanctions, and the export-control rules of individual Member States acting under EU authority.
This guide walks through the extraterritoriality analysis in seven steps: the scope of EU re-export obligations, the legal instruments that create them, the practical classification test, the contractual and due-diligence toolkit, the cross-regime comparison with OFAC and OFSI, the most common operational failures, and when to involve counsel.
Step 1: Understanding what "re-export" means under EU rules – and why it matters
Re-export, under the EU dual-use regime, refers to the onward transfer of goods, software, or technology that originated in or transited through the EU, carried out by a recipient located outside the EU. The question of whether EU export-control rules follow those goods beyond the first export is not theoretical. It carries direct compliance consequences for the original EU exporter.
The EU dual-use regulation distinguishes between exports from EU territory, transfers within the EU, and brokering of goods that may never physically touch EU soil. Re-export sits at the boundary of these categories. The governing instrument – the EU's dual-use rules, as currently in force – requires exporters to assess end-use at the point of the original authorisation. That assessment necessarily includes the realistic possibility that the recipient will move the goods onward. Ignoring that possibility does not insulate the original exporter from responsibility.
In our experience, the misunderstanding at the root of most re-export enforcement actions is the assumption that the obligation ends at the EU border. It does not. The exporter's duty of care travels with knowledge. If a compliance team identified a re-export risk and did not act on it, the original export itself may be called into question after the fact.
Step 2: Which EU instruments create extraterritorial obligations?
Three distinct layers of EU legal authority create obligations with extraterritorial effect for re-exports.
The first is the EU dual-use regulation. It applies to the export of dual-use items from EU territory and imposes a "catch-all" mechanism: an exporter who has been informed by the relevant authority – or has reasonable grounds to believe – that items not listed on the EU control list may be intended for certain sensitive end-uses must obtain authorisation before proceeding. This catch-all survives the first export. An EU exporter who subsequently learns that a foreign partner is channelling goods toward a prohibited destination faces an obligation to act on that knowledge.
The second layer is the relevant Council regulation imposing sectoral or individual sanctions. These regulations typically prohibit the sale, supply, transfer, or export of certain goods to specified destinations or designated persons. The prohibition is not limited to physical exports from EU territory. Supplying, directly or indirectly, captures arrangements where an EU-connected party facilitates an onward transfer.
The third layer consists of national export-control laws enacted by individual Member States within the EU framework. Enforcement powers rest with national competent authorities – customs administrations, trade ministries, and sector regulators – who may interpret these instruments with differing degrees of strictness. An exporter operating across multiple Member States must therefore account for the enforcement posture of each relevant authority, not only the home-state authority.
How do these layers interact? Where a Council regulation imposes a broader prohibition than the dual-use regulation, the stricter prohibition governs. An exporter cannot resolve a re-export risk by relying on a trade-control rule that is less stringent than a directly applicable Council regulation.
Step 3: Classifying the item and assessing the re-export risk
The classification of the item is the foundation of any re-export analysis. Under the EU dual-use regime, goods, software, and technology are assessed against the EU Common Control List, which mirrors the Wassenaar Arrangement control lists and the other international non-proliferation regimes. An item's classification determines which licence conditions apply and which general or specific authorisations may be available.
The classification question for re-exports has two parts. First: is the item controlled at the point of original export? Second: does the re-export destination, end-user, or end-use trigger a different or additional control? The second question is often the harder one. A re-export to a country with a functioning export-control regime may require that country's own authorisation, independent of any EU obligation – but the EU exporter's responsibility is not discharged simply because a foreign licence might be available.
The practical classification sequence is:
- Determine whether the item appears on the EU Common Control List, using the relevant technical parameters.
- Confirm whether any EU-wide general trade authorisation covers the intended export-and-re-export route.
- Apply the catch-all test: even if the item is not listed, does the exporter have reason to believe it may reach a sensitive end-use or end-user?
- Assess the re-export destination against current Council regulations to check whether the goods fall within a sectoral prohibition or a dual-use restriction to that destination.
- Identify the end-user and apply the EU's end-user screening requirements, including screening against the EU Consolidated List and the relevant asset-freeze lists.
One practical complication: technology transfers – the intangible dimension of dual-use – can constitute a re-export even without any physical shipment. Software shared by a foreign distributor with a downstream buyer, or technical data accessed by a third-country national, may trigger the same controls as a physical re-export. In our experience, this is the category most commonly overlooked in re-export risk reviews.
Step 4: The contractual and due-diligence toolkit
Contractual protections and pre-shipment due diligence are the operational core of any re-export compliance programme. Neither eliminates risk, but together they establish the "reasonable steps" defence that is relevant to enforcement outcomes across EU Member State jurisdictions.
The standard contractual toolkit for re-export control includes:
- End-use and re-export undertakings: the foreign buyer contractually commits not to re-export to specified destinations or end-users without the EU exporter's prior written consent and, where required, a new licence.
- Audit rights: the EU exporter reserves the right to inspect the buyer's compliance records relating to onward transfers of the goods.
- Notification clauses: the buyer is required to notify the exporter promptly if it becomes aware of a potential re-export to a restricted destination or to a designated person.
- Termination triggers: a re-export in breach of contract triggers an immediate right of termination, reducing the exporter's ongoing exposure.
Due-diligence steps that complement those contractual protections include screening the buyer and the buyer's known downstream partners against the EU Consolidated List and relevant Member State watchlists; reviewing the buyer's export-control compliance history; and conducting a red-flag assessment before each shipment, not only at the onboarding stage.
The position above covers the standard case. Your facts – the counterparty, the goods, the transit route, the destination – change the analysis. If your current buyer agreements do not reflect current re-export obligations, a review is overdue.
For an assessment of your EU re-export exposure, contact Calder & Vance at info@caldervance.com.
Step 5: How does EU extraterritorial reach compare with OFAC and OFSI?
The EU's approach to re-export and extraterritoriality is materially different from that of the United States and the United Kingdom – and understanding those differences is essential for any cross-border exporter.
Under the US regime administered by the Bureau of Industry and Security (BIS), the Export Administration Regulations (EAR) impose an explicit de minimis rule: US-origin content below a defined threshold in a foreign-made item removes the EAR's jurisdiction over re-exports of that item. The EU regime has no equivalent de minimis carve-out. EU-origin goods either fall within the EU control regime or they do not; there is no percentage test for EU content embedded in a third-country product that automatically removes EU obligations. The contrast is significant for multi-origin manufacturing chains.
OFAC's extraterritorial reach operates on a different axis. OFAC's jurisdiction follows US persons, US financial infrastructure, and the US dollar, regardless of the location of the underlying goods. An EU exporter with no US nexus may face no OFAC exposure whatsoever on a particular re-export route – yet still face significant EU exposure because the re-export destination falls under a Council regulation prohibition. Conversely, an EU exporter that uses US-dollar payment clearing for a transaction not otherwise covered by any EU instrument may trigger OFAC jurisdiction. These are parallel tracks, not a single combined test.
OFSI, administering UK financial sanctions under the Sanctions and Anti-Money Laundering Act, shares the EU's general approach of prohibiting indirect supply. After the UK departed from the EU, OFSI has developed its own sanctions lists and designations, which diverge from the EU Consolidated List in a growing number of entries. An exporter supplying into a market where both EU and UK sanctions apply must screen against both lists independently. A counterparty cleared on one list may appear on the other.
For Singapore, Japan, and the UAE – common transit hubs for goods with EU origin – the local export-control regimes apply their own licensing requirements. Meeting EU obligations does not discharge compliance with the applicable country regime in those jurisdictions. Where goods are routed through a free-trade zone in one of these markets, specific rules on re-export from those zones apply. We regularly advise exporters on exactly this multi-layered structure.
Step 6: The most common operational failures – and how to avoid them
Re-export risk does not typically arise because an exporter intends to breach the rules. It arises because compliance programmes are designed for the original export and never updated to account for what happens next.
The most frequent failures we observe in cross-border export-control practice are:
- Static screening: the counterparty is screened at onboarding and then not re-screened. New designations occur frequently, and a clean record at month one does not guarantee a clean record at month twelve. Screening must be periodic and event-triggered.
- Single-layer ownership analysis: the buyer entity is screened, but its owner and ultimate beneficial owner are not. A buyer not listed in its own name may still be owned or controlled by a designated person, triggering the ownership-and-control test under the relevant Council regulation.
- Failure to follow up on red flags: vague end-use descriptions, buyers with no commercial logic for the quantity ordered, payment through unrelated third parties, and requests to amend shipping documents late in the transaction are each a trigger for deeper inquiry. Proceeding without inquiry is not a neutral act.
- Treating EU general authorisations as unlimited: EU-wide general trade authorisations carry conditions – reporting obligations, record-keeping requirements, and destination limitations. Using a general authorisation without reading and complying with its conditions is a breach even if the underlying export is commercially routine.
- No record-keeping discipline: enforcement actions are decided on evidence. Exporters who cannot produce the pre-shipment screening record, the end-use undertaking, or the classification file are at a structural disadvantage in any regulatory inquiry.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential assessment.
Step 7: When to involve counsel – and what that looks like
The question of when to involve sanctions and export-control counsel on a re-export matter does not have a single answer. But there are clear triggers that, in our experience, consistently mark the point at which independent legal advice changes the outcome.
The first trigger is a regulator contact. A letter, an email, or an informal conversation with a national competent authority about a particular shipment or a counterparty is not a routine administrative step. It is the beginning of a regulatory interaction that may lead to an enforcement action. Early advice at this stage matters substantially.
The second trigger is a hit on screening – a match, or a potential match, between a counterparty and an entry on the EU Consolidated List or a Member State watchlist. Not every hit is a confirmed match. Working through a hit correctly, including assessing whether the ownership-and-control test catches the counterparty, requires structured analysis, not a binary yes-or-no from a screening tool.
The third trigger is a new customer or a new destination market. Where a business is entering a market for the first time, or adding a new product line to an existing export programme, the re-export risk profile of that expansion should be assessed before the first shipment, not after the first problem.
A fourth trigger is a change in the applicable Council regulation. New sanctions measures add new destinations, new goods categories, and new licensing conditions with little advance notice. Exporters with active supply chains into affected markets may find that existing contractual arrangements are no longer adequate on the day a new measure is published.
What does that advice look like in practice? In a recent matter, a manufacturing business with EU-origin product lines sold into a third-country distribution network sought advice after discovering that one of its distributors had begun supplying goods into a region subject to new Council regulation restrictions. We scoped the apparent exposure across the original export documentation and the distributor's onward-sale records, assessed the applicability of the catch-all mechanism, and structured a corrective programme including updated contractual terms and a targeted re-screening of the distributor's sub-buyers. The matter was resolved through a voluntary disclosure approach to the relevant national competent authority, with a full compliance-programme enhancement agreed as part of that process.
There is a persistent myth that re-export compliance is primarily the responsibility of the foreign buyer, and that an EU exporter who obtained a valid licence for the original export has discharged its obligations. This is incorrect. Where the EU exporter had reason to know of an onward transfer to a restricted destination, the original export may itself be investigated, regardless of whether a licence was in place. The licence authorises the act of export; it does not override the ongoing duty of care.
Related practices
- Deemed export and technology controls under the EAR – US BIS classification, deemed-export analysis, and EAR compliance for cross-border technology transfers.
- Re-export and extraterritoriality: advanced issues – deeper analysis of transit, brokering, and catch-all controls under EU and parallel regimes.
- EU dual-use classification: a practical guide – step-by-step classification methodology for EU-origin goods, software, and technology.