A mid-sized technology exporter with operations across three continents signed a distribution agreement with a regional intermediary. The arrangement had run without incident for several years. Then the intermediary's ownership structure changed. A new ultimate beneficial owner appeared. Routine rescreening flagged a potential connection to a party on the Entity List (BIS's list of foreign entities subject to specific export-licensing requirements under the Export Administration Regulations, or EAR). The question was immediate and consequential: could existing shipments continue? Could pending orders be fulfilled? And if not, how does a business wind down that exposure without triggering the very violations it is trying to avoid?
Winding down sanctioned exposure under BIS / EAR case discipline requires a structured sequence: classify the goods, confirm the applicable controls, assess whether a licence exception covers the remaining obligations, and execute a documented wind-down before the prohibited activity crystallises. The EAR administered by BIS governs US-origin goods, software, and technology regardless of where in the world the transaction occurs. As of early 2026, the extraterritorial reach of US export controls means that non-US companies handling US-content items face the same classification and licensing obligations as US exporters.
This case comment walks through how that situation unfolded, the decisions taken at each stage, and the lessons for any cross-border business holding active commercial relationships that touch the EAR's reach.
The situation: how the exposure arose
The exporter's goods were commercial electronics with embedded US-origin software. Under the EAR, the Export Control Classification Number (ECCN) for each item determines whether a licence is required to ship to a given destination, end-user, or end-use. The distribution agreement had been reviewed at inception. The original intermediary had cleared screening. No one had set a periodic rescreening trigger tied to ownership changes downstream.
The new ultimate beneficial owner did not appear on the Specially Designated Nationals list (SDN List) – OFAC's list of blocked persons and entities – but had a relationship with a party listed on the BIS Entity List. That distinction matters enormously. An SDN match would have invoked a full blocking obligation under OFAC's IEEPA-based authority. An Entity List match under the EAR does not automatically block a transaction; it requires a licence for items subject to the controls identified in the listing, and that licence may be – or may be presumed to be – denied. The determination turns on the ECCN, the applicable commerce country chart, and the licence review policy stated in the listing itself.
What the exporter had not done was re-run that full classification and licensing analysis in light of the new ownership. It had continued to ship. Three further consignments had left the warehouse before the rescreening flag was internally escalated. That gap – between the ownership event and the compliance response – became the central risk-management challenge.
The legal question: what does the EAR require here?
The core EAR obligation is that an exporter must not proceed with a transaction when it knows, or has reason to know, that the item will be used in violation of the EAR or diverted to a prohibited end-user or end-use. The Entity List is one of the three principal restricted-party instruments under BIS authority – the others being the Denied Persons List and the Unverified List – and each carries different legal consequences for a licence application and a pre-existing contract.
Under the EAR, a listing on the Entity List does not create the same blanket prohibition as an OFAC designation. It imposes a specific licence requirement for controlled items destined to that listed entity. However, the licence review policy for many Entity List entries is described as "presumption of denial". That is a practical, near-absolute bar. A business holding a live contract with a listed party, or with a party connected to a listed party through the applicable ownership and control analysis, must assess whether any licence exception survives. Most do not.
The exporter's ECCN classification revealed that several product lines were controlled for export-control reasons that mapped directly to the Entity List party's activities. The path to a licence was effectively closed. The question shifted: how do you exit cleanly?
How we structured the wind-down
The first step was a full item-by-item ECCN review across all active orders and the inventory held by the intermediary. Some items fell outside the relevant controls – they were classified EAR99, meaning they are subject to the EAR but do not require a licence to most destinations absent a prohibited end-use. Those could be addressed differently from controlled items. Separating the two categories early is essential. It prevents an over-broad response that halts lawful trade unnecessarily.
For the controlled items, we advised that new shipments should cease immediately pending a formal licence determination. The three consignments already in transit presented a different challenge. Under the EAR, the point at which jurisdiction attaches is generally when the goods leave the United States – or, for re-exports, when a foreign person acts to move US-controlled items from one foreign country to another. Goods already shipped were outside the scope of a prospective wind-down; but the exporter's own conduct after the ownership-change event was squarely in scope.
The wind-down sequence we recommended had five stages.
- Suspend all pending controlled-item orders and notify the compliance committee formally. The notification date creates a documented record of when the exposure was identified and acted upon.
- Classify every SKU in the active order book against the applicable ECCN. Items confirmed as EAR99 with no prohibited end-use indicators were segregated.
- Review the distribution agreement for termination provisions. A contract that contains a sanctions clause – a right to terminate on a compliance-justified basis without penalty – simplifies the exit. This one did not have one. That forced a negotiated exit.
- Assess whether a voluntary self-disclosure (VSD) to BIS was warranted for the three post-event shipments. A VSD is a proactive disclosure to BIS of a potential violation. It is a significant mitigant in penalty proceedings, but it requires careful scoping before submission to avoid inadvertent admissions beyond the disclosure.
- Document every step with contemporaneous records, including the date of the rescreening flag, the escalation path, the legal assessment, and the commercial decisions taken. BIS places weight on the quality and completeness of a company's internal records when assessing the seriousness of an apparent violation.
In our cross-border practice, we regularly advise that the VSD decision is the most consequential single choice in a wind-down. It is not automatically the right answer; it depends on the strength of the evidence, the number of transactions at issue, and the prior compliance history of the exporter.
Cross-border dimension: where other regimes intersect
A BIS / EAR matter rarely sits in isolation. This one did not. The exporter operated under UK and EU regulatory reach as well. Several of the technology products had UK-origin components, bringing them within the scope of the UK Export Control Order administered by ECJU. The UK dual-use rules share the EU's classification structure – aligned to the EU dual-use regulation and the EU's own control lists – but the licensing authority is entirely separate. A party that triggers an EAR licence requirement may or may not trigger a parallel UK or EU licence requirement, depending on the item's classification and the applicable control list in each regime.
The EU dimension added a further layer. Under EU dual-use rules, the exporter's EU-based subsidiary was itself an exporter of record for certain shipments and had independent obligations under the relevant Council Regulation. The Entity List party's presence did not automatically create a prohibited counterparty under EU law; the EU does not maintain a direct equivalent of the Entity List. But the EU's catch-all controls – which require a licence when an exporter has grounds to suspect a prohibited end-use or diversion – were plainly engaged once the compliance flag had been raised. Willful blindness after that point would not be a defence.
For the UK position, ECJU administers export licensing, and OFSI administers financial sanctions separately. Neither the UK nor the EU runs an equivalent to the OFAC 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) in the same mechanical way. The UK and EU apply an ownership and control test – a wider analysis that asks whether a non-listed person is owned or controlled by a listed party through any means, including indirect or informal control. That test can capture situations that the OFAC 50 percent threshold might miss, and vice versa. Businesses winding down exposure across regimes must run both analyses, not just one.
Switzerland was relevant because the exporter used a Swiss subsidiary for certain trade-finance arrangements. SECO, Switzerland's State Secretariat for Economic Affairs, administers export controls under separate Swiss ordinances. In our experience, Switzerland's export-control rules align closely with the international control lists but follow their own licensing and notification procedures. A wind-down structured around BIS requirements may not automatically satisfy SECO's parallel obligations.
What the common mistakes are – and how to avoid them
Several patterns recur in matters of this type. The first is the gap between a commercial trigger – an ownership change, a new investor, a restructuring of the counterparty group – and the compliance response. Sanctions and export-control screening programmes that operate only at onboarding, without lifecycle triggers, will miss exactly this scenario. A practical fix is to build change-of-control notifications into distribution and reseller agreements as a contractual obligation, paired with an internal rescreening workflow.
The second mistake is treating all restricted-party list matches as equivalent. An SDN match under OFAC, an Entity List match under BIS, and a Denied Person match each carry different legal consequences. Conflating them leads to either over-reaction – halting lawful trade – or under-reaction – treating a near-absolute bar as a manageable risk. The analysis must be instrument-specific.
A third pattern is the absence of a termination or sanctions clause in commercial contracts. A well-drafted sanctions clause gives the exporter the right to terminate or suspend performance where continued performance would cause or risk a sanctions or export-control violation, without that suspension itself giving rise to a breach-of-contract claim. The absence of such a clause here forced a commercial negotiation that added time and cost to the wind-down. Is your standard distribution agreement drafted to give you that exit?
Finally, record-keeping quality is consistently underweighted. In enforcement proceedings, BIS considers both the substance of the violation and the quality of the company's internal compliance system. A well-documented wind-down – with clear records of when the issue was identified, what analysis was done, and what steps were taken – tells a materially different compliance story from one that lacks contemporaneous documentation.
The outcome and the lesson
The matter was resolved through a combination of a negotiated contract exit, a suspension of controlled-item shipments confirmed in writing, an EAR99 carve-out for non-controlled items that could proceed, and a VSD to BIS covering the three post-event consignments. The VSD was scoped carefully. It addressed the specific shipments in question and included a description of the remediation steps taken. The company's prior record and the quality of its wind-down documentation were factors in the outcome. No penalty figure can be quoted here, as the applicable confidentiality position applies; outcomes in individual matters depend entirely on the specific facts.
The broader lesson is not complicated, but it is consistently missed in practice. Export-control exposure does not arise only at the point of shipment. It arises when commercial arrangements change in ways that alter the regulatory risk profile – and those changes may happen on the counterparty's side, without any notice to you. Lifecycle monitoring, triggered by ownership-change events, M&A activity, and changes in the counterparty's business lines, is not optional for businesses that handle US-origin controlled technology.
We advise businesses facing this situation to take legal advice before deciding whether to disclose, how to structure the disclosure, and how to document the wind-down. Early involvement of counsel preserves options. A wind-down that proceeds without legal review can inadvertently narrow those options, including the ability to make a credible VSD.
A common misconception: "we are not a US company, so the EAR does not apply to us"
This is the most persistent myth in cross-border export-control practice. The EAR applies extraterritorially. It governs re-exports of US-origin items – even when those items are held, sold, or transferred entirely outside the United States. It also reaches items produced outside the United States that incorporate more than a de minimis level of US-controlled content, and foreign-produced items that are the direct product of certain US technology or software. A European distributor, a Japanese trading house, or a UAE-based intermediary handling US-origin electronics is subject to EAR obligations on re-export, regardless of the fact that it is not a US person and holds no US establishment.
In our cross-border practice, we regularly encounter businesses – including sophisticated multinationals – that have not mapped their product inventories against this foreign direct product rule (the rule that brings certain foreign-produced goods within the EAR because they are the direct product of US-origin technology). The implication for a wind-down is significant. A business that believes it holds only foreign-origin goods may still be handling EAR-controlled items. The classification analysis must include a de minimis and foreign direct product assessment before any decision is taken about which items can continue to move and which cannot.
The position above covers the standard case. Your facts – the ECCN of the goods, the structure of the counterparty's ownership chain, the regimes in play across the export route, and the commercial arrangements in place – change the analysis materially. If you are managing a similar situation, the right time to involve counsel is before the wind-down decisions are made, not after.
Related practices
- Correspondent banking and de-risking under OFAC – managing financial sanctions exposure in cross-border payment and banking relationships.
- An OFAC matter: winding down sanctioned exposure – a parallel case comment examining the OFAC wind-down discipline.
- Correspondent banking and de-risking: Australia guide – export-finance and banking relationships under Australia's autonomous sanctions regime.