Calder & Vance International Sanctions & Compliance Counsel

Export Controls & Dual-Use · EU

An EU matter: EAR99 determinations lessons learned

A European trading company had been exporting a range of low-technology goods for several years without incident. Its compliance team had determined that the items in question were EAR99 (goods subject to the US Export Administration Regulations but not listed on the Commerce Control List, and therefore not requiring a licence for most destinations) and had documented that determination accordingly. Then a routine audit surfaced something unexpected: several of the items had undergone minor technical modifications since the original classification, and a small number had been re-exported by the end-customer to a third country. The question of whether the EAR99 determination remained valid – and whether the re-export had created a US nexus requiring prior authorisation – suddenly had real commercial consequences.

An EAR99 determination in an EU-based supply chain is not a permanent label. It is an assessment of a specific item at a specific point in time, made under the US Export Administration Regulations. When the item changes technically, when the end-user changes, or when re-export to a further destination occurs, the determination must be revisited. In this matter, the failure to maintain the determination as a living document – and the absence of a re-export control clause in the downstream contract – created dual exposure: potential liability under the EAR and a parallel review under the EU's own dual-use controls.

This case comment sets out the situation the client faced, the legal questions that arose, the analysis applied across both the US and EU regimes, the route the matter took, and the practical lessons for businesses operating in cross-border supply chains where EAR99 items are present.

The Situation: How a Routine Classification Created Unexpected Exposure

An EAR99 determination is often treated as the end of the export-control analysis for a low-technology item, but in cross-border supply chains it is more accurately the beginning of an ongoing obligation. The client in this matter was a mid-sized EU-based distribution business that had correctly classified a portfolio of electronic components as EAR99 at the time of initial procurement. That initial work was properly documented. The problem arose over time.

Over a period of roughly three years, the technical specification of several components had been updated by the original manufacturer. The updates were minor – incremental improvements to performance thresholds – but they were precisely the kind of incremental changes that can shift an item from EAR99 into a controlled classification under the Commerce Control List. The client's internal process had no trigger for re-classification review when a manufacturer issued a specification change. The determination made at the time of first procurement simply persisted in the records.

At the same time, the client had sold a quantity of the components to a European distributor, who had in turn re-exported them to a customer outside the EU. That end-destination was not itself subject to a US embargo, but the re-export had occurred without any analysis of whether the US-origin content of the goods triggered an EAR re-export authorisation requirement. No re-export control clause had been included in the client's downstream contract. When the audit surfaced both issues simultaneously, the compliance team faced a two-front question: had the goods ever left EAR99 status, and if so, what was the consequence for the re-export that had already occurred?

The Legal Question: What Does EAR99 Status Actually Mean in an EU Supply Chain?

EAR99 status means that an item is subject to the EAR but does not appear on the US Commerce Control List, and is therefore not subject to a licence requirement for most destinations under US law – but the EAR's reach extends extraterritorially into EU supply chains in ways that EU-based businesses frequently underestimate.

Three mechanisms bring US export-control obligations into an EU company's operations. First, items that are of US origin, or that contain a sufficient proportion of US-controlled content, remain subject to the EAR wherever they travel. Second, items produced outside the US but incorporating US-origin technology above a defined de minimis threshold are treated as subject to the EAR under the foreign direct product rules. Third, items that are the direct product of certain US-origin technology may be captured even if the item itself contains no US components. For EAR99 items, the practical significance is this: if an item has crossed from EAR99 into a controlled classification because its specification has changed, none of those extraterritorial mechanisms disappears. The EAR99 label is a classification conclusion, not a perpetual exemption.

In parallel, the EU has its own dual-use controls, administered at the national level by competent authorities in each member state but grounded in EU-level regulation. The EU dual-use list does not map precisely onto the US Commerce Control List. An item that sits in EAR99 under the US rules may nonetheless appear on the EU control list, and vice versa. For this client, the audit raised the question of whether any of the modified components now appeared on the EU list. That question was independent of the US analysis – but the answers were connected in practice, because a finding that an item was now EU-controlled would also prompt the question of whether the US determination needed revisiting.

The position above covers the standard case. Your specific facts – the origin of the goods, the proportion of US-controlled content, the destination of the re-export, and the extent of the technical modification – change the analysis materially. For a confidential review of your exposure under both regimes, contact Calder & Vance at info@caldervance.com.

The Analysis: Applying the EAR and EU Dual-Use Rules to the Modified Components

The first analytical task was to establish whether the modified components remained EAR99. This required obtaining the updated technical specifications from the manufacturer and comparing them systematically against the relevant categories and parameters on the Commerce Control List. In our cross-border practice, this step is more demanding than it appears: the parameters on the Control List are expressed in technical units – frequency thresholds, operating temperatures, processing speeds – and comparing a manufacturer's commercial data sheet against those parameters requires both a technical reading and a legal assessment of where the item sits.

For the majority of the components, the modifications did not cross any CCL threshold. Those items remained EAR99. For a smaller subset, the position was less clear: the updated performance figures were in the range where a reasonable classification analysis could conclude either that the item remained EAR99 or that it had entered a controlled classification. That ambiguity is itself significant. Under the EAR, the exporter bears the classification burden. An ambiguous determination, if it later proves to be wrong, does not attract the same treatment as a deliberate mis-classification, but it does not automatically produce a favourable enforcement outcome either. The record of analysis matters.

In our experience, the instinct in this situation is to seek a Commodity Classification from BIS – the formal determination procedure under the EAR by which BIS confirms whether an item is EAR99 or has a specific ECCN (Export Control Classification Number, the identifier assigned to items on the Commerce Control List). A BIS Commodity Classification carries regulatory weight: it is BIS's own assessment, and an exporter who relies on it in good faith is in a stronger position if a question later arises. For the ambiguous items, that route was the appropriate one.

On the EU side, the same items were assessed against the EU dual-use annex. Several of the components had parameters that brought them close to – but ultimately outside – the relevant EU list entries. The EU analysis was conducted separately because the control parameters differ, and conflating the two analyses is a common error: a US-controlled item is not automatically EU-controlled, and an EU-controlled item is not automatically above EAR99. The separation of those analyses is not a formality; it is where mis-classifications typically originate.

The Re-Export Question: When Does an EAR99 Item Require Prior Authorisation?

Even a genuine EAR99 item is not always free to move without restriction, and the re-export that had already occurred in this matter needed a separate analysis. For EAR99 items, re-export to most destinations does not require a specific licence. However, a number of destinations are subject to embargo regimes or end-user controls under the EAR that apply regardless of classification level. The country to which the goods had been re-exported was not subject to a US embargo. On that specific question, the re-export did not require a prior authorisation under the EAR for the items that remained EAR99.

The position for the subset of potentially re-classified items was different. If BIS were to confirm that any of those items had crossed into a controlled classification, then the re-export would have occurred without the required authorisation. That is the fact pattern that can lead to a voluntary self-disclosure (a VSD – a proactive report to BIS of a potential violation, filed before BIS discovers the issue through its own enforcement activity). The outcome of a VSD is not guaranteed, but BIS's enforcement guidance treats timely, complete, and co-operative disclosure as a significant mitigating factor. The decision on whether to file a VSD was therefore contingent on the result of the BIS Commodity Classification for the ambiguous items.

If a transaction has already been flagged, or if a re-export has occurred without a complete classification analysis, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com.

What the EU Dual-Use Dimension Added to the Analysis

The EU dimension in this matter was not a replication of the US analysis. It introduced distinct obligations that operated independently and required separate professional attention. EU dual-use controls sit at the intersection of EU-level regulation and national implementation: the control list is harmonised at the EU level, but licensing decisions, enforcement, and reporting obligations are administered by the competent authority in the exporter's member state.

For this client, the relevant competent authority had its own guidance on the technical parameters that triggered a licence requirement for items in the relevant category. Those parameters were not identical to the CCL parameters. The EU competent authority's approach to borderline items also differs from BIS in one important procedural respect: some member states offer a formal classification opinion procedure, while others expect the exporter to form its own determination and be prepared to defend it on inspection. In our practice advising on EU dual-use matters, the availability and weight of a formal classification opinion varies by member state, and the absence of a formal procedure does not reduce the obligation to maintain a reasoned, documented analysis.

The EU analysis also engaged the question of catch-all controls. Under the EU rules, even an item that does not appear on the dual-use list may require a licence if the exporter knows or has grounds to suspect that it is or may be intended for use in connection with weapons of mass destruction programmes or certain other end-uses. In this matter, the end-destination did not raise any such concern, but the catch-all analysis was conducted as a matter of completeness. Skipping it because the item appeared to be EAR99 – and therefore low-risk in the US sense – would have been a gap in the EU compliance analysis.

The Route Taken and the Lessons for Similar Businesses

The matter resolved through a structured sequence: BIS Commodity Classification requests for the ambiguous items, a documented EU dual-use analysis for the full portfolio, and a revision of the client's internal classification-review process to include a trigger whenever a manufacturer's technical specification changed.

BIS confirmed that the majority of the ambiguous items remained EAR99. For a small number, BIS assigned an ECCN. Those items had been re-exported to a destination that, for the relevant ECCN, did not require a licence for the specific end-use involved. The re-export did not, therefore, give rise to an unlicensed export requiring a VSD. That outcome was not predictable at the start of the analysis, which is itself the lesson: the classification analysis determines whether there is a problem, and skipping it does not make the problem disappear.

On the EU side, no items were found to be on the EU dual-use list. The EU competent authority analysis was documented and retained as part of the classification record. That record is now updated whenever a specification changes.

The procedural lesson is straightforward. EAR99 determinations need to be maintained, not merely made. Three conditions can invalidate a prior EAR99 determination without any action by the exporter: a change in the item's technical specification, a change in the end-user or end-use, and a change in the applicable control list – which can occur when BIS amends the CCL or when a new foreign direct product rule extends coverage. A compliance programme that treats classification as a one-time event at the point of first procurement will, in a supply chain of any complexity, eventually produce a gap between the documented determination and the actual legal position.

The contractual lesson is equally direct. Downstream contracts in supply chains involving US-origin goods or technology should contain re-export control clauses that require the buyer to comply with the EAR and, where relevant, the EU dual-use rules before onward transfer. Such clauses do not eliminate the exporter's own compliance obligations, but they establish the commercial baseline against which downstream compliance can be measured, and they give the exporter contractual recourse if a buyer re-exports without analysis.

A common concern we hear from clients in this situation is that seeking a formal BIS Commodity Classification will draw attention to the company. In our experience, the opposite tends to be true: a proactive, documented approach to classification – including the use of the formal BIS procedure for genuinely ambiguous items – is consistently viewed more favourably by enforcement authorities than a pattern of undocumented EAR99 defaults that cannot be substantiated on review. The myth that formal engagement with BIS is a risk in itself misunderstands how the classification process works and how enforcement discretion operates in practice.

Related practices

Frequently asked questions

What went wrong in this EAR99 determinations matter?
The root failure was treating an EAR99 determination as a permanent classification rather than a living assessment. When the manufacturer updated the technical specification of several components, the client's internal process had no mechanism to trigger a re-classification review. The original EAR99 determination remained on file, unchanged, while the item's actual technical parameters had moved. In parallel, a downstream re-export occurred without any analysis of whether a US-origin content or re-export authorisation requirement applied. Neither failure was deliberate. Both were process failures.
How was the EU issue resolved?
The EU dimension was resolved through a systematic review of the full component portfolio against the EU dual-use annex, conducted separately from the US analysis. For each item, a documented determination was prepared and retained. No items were found to be on the EU dual-use list for the relevant end-use and destination. The EU competent authority was not engaged in an adversarial context: the review was internal, and its output was a defensible, documented record of the analysis. The client's compliance process was revised to require a fresh EU analysis whenever a specification change occurred.
What is the lesson for similar businesses?
The primary lesson is procedural: classification review must be event-driven, not periodic. Trigger events include manufacturer specification changes, changes in end-user or end-use, changes to the Commerce Control List or EU dual-use annex, and any re-export to a new destination. Secondary lessons concern contracts and records. Downstream contracts should carry re-export control obligations. Classification records should document not only the conclusion but the reasoning, including why an item was found to be EAR99, so that the analysis can be reviewed and updated as circumstances change.

Talk to Caldervance

For a scoped view of your exposure, contact info@caldervance.com.

Discuss your matter

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.