An exporter reviews its shipment logs and finds a consignment that may have left without the required export licence. The goods are dual-use. The destination is a country subject to heightened controls. The end-user certificate is incomplete. At that moment, the exporter faces a question that will shape everything that follows: does this constitute an apparent violation under the Export Administration Regulations (EAR), and what must the business do next?
An apparent violation under the EAR is a transaction or conduct that, on its face, appears to have contravened the regulations administered by the Bureau of Industry and Security (BIS) – the principal US export-control authority operating under the Export Control Reform Act and the EAR. As of April 2026, BIS retains broad authority to investigate, impose civil penalties, and refer matters for criminal prosecution, making early and accurate assessment of apparent violations one of the most consequential steps an exporter can take.
This briefing explains how the apparent-violation assessment process works under BIS and the EAR, how it compares with the parallel processes at OFAC, OFSI, and the EU, and what exporters and compliance teams should do when a potential violation surfaces.
Who administers apparent-violation assessment under BIS and the EAR?
BIS administers the EAR as the primary civilian export-control authority in the United States, with enforcement conducted by its Office of Export Enforcement (OEE). BIS operates under the Export Control Reform Act, which consolidated and modernised the statutory basis for US dual-use export controls. Where conduct also implicates items on the US Munitions List, the Directorate of Defense Trade Controls (DDTC) within the State Department has parallel jurisdiction; criminal referrals flow through the Department of Justice.
The enforcement posture of BIS differs in important respects from that of OFAC, the US sanctions authority. OFAC applies strict liability across its civil penalty regime: intent is relevant only at the penalty stage, not to the question of whether a violation occurred. BIS applies a graduated approach in which culpability – from no licence required to wilful violation – shapes both the category of violation and the penalty range. That distinction matters enormously to how a business frames its apparent-violation assessment and any subsequent voluntary self-disclosure.
In our cross-border practice, we regularly advise businesses that assume a BIS matter is less serious than an OFAC matter because the goods in question are commercial rather than financial. That assumption is mistaken. BIS maintains the Entity List (a list of foreign entities subject to additional licence requirements), the Denied Persons List (individuals and companies denied export privileges), and the Unverified List (entities whose legitimacy BIS has been unable to verify). Transacting with any of these without the appropriate authorisation can constitute an apparent violation of the EAR independently of any OFAC sanctions exposure.
What does BIS / EAR prohibit, and what triggers an apparent-violation assessment?
The EAR prohibits the export, re-export, or in-country transfer of items subject to its jurisdiction without the required licence or without a valid licence exception, where such a licence or exception is required. Items subject to the EAR range from commercial electronics and telecommunications equipment to advanced semiconductors and encryption technology. Each item carries an Export Control Classification Number (ECCN) – a code from the Commerce Control List (CCL) that determines which destinations, end-users, and end-uses require a licence.
An apparent-violation assessment is triggered when a business identifies, or is informed of, conduct that may have violated one or more of these prohibitions. Common triggers include:
- A shipment that left without a required licence or without a valid licence exception having been identified.
- A re-export by a foreign customer to a destination or end-user not covered by the original licence conditions.
- A transaction with an entity on the Entity List, Denied Persons List, or Unverified List without the required authorisation.
- An end-use that differs from the end-use declared on the export licence application or the end-user certificate.
- A misclassification of an item that resulted in a lower ECCN being applied, leading to a missing licence requirement.
- A transaction involving goods or technology that were subject to a US-origin rule or a de minimis threshold, without that threshold having been correctly calculated.
The apparent-violation label is significant. It does not mean a violation has been confirmed. It means the available information, taken at face value, indicates that a violation may have occurred. That framing matters because the business retains the ability to shape the outcome through its response – and through the quality and speed of its apparent-violation assessment.
How does the BIS apparent-violation assessment process work?
A well-structured apparent-violation assessment under the EAR proceeds through five stages, each with its own legal and practical consequences.
Stage one: scoping. The business identifies the conduct in question, the item or items involved, the relevant classification, the destination, the end-user, and the authorisation – or the absence of one – that was relied upon. Scoping must be disciplined. A common error is to treat the apparent violation as a single transaction when a pattern of misclassification or a systematic failure in the end-use verification process means that many transactions are implicated.
Stage two: legal analysis. Counsel maps the identified conduct against the applicable prohibitions under the EAR. This involves confirming the correct ECCN classification, determining whether any licence exception was available and, if so, whether its conditions were satisfied, and identifying which BIS enforcement policies apply to the conduct. At this stage, the analysis also addresses whether the same facts give rise to exposure under OFAC (if the destination or end-user is also subject to an OFAC sanctions programme) or under the Export Control Order in the United Kingdom.
Stage three: culpability assessment. BIS assesses violations along a spectrum from clerical or inadvertent error at one end to egregious wilful conduct at the other. The culpability assessment shapes the decision on whether to make a voluntary self-disclosure (VSD) – a formal, proactive report to BIS identifying the apparent violation and the steps taken to address it. A timely and accurate VSD is one of the most significant mitigating factors under BIS enforcement policy. In our experience, the manner in which a VSD is prepared and submitted can make a material difference to how BIS treats the matter.
Stage four: the VSD decision. Not every apparent violation warrants a VSD. Where the conduct is genuinely de minimis, where a licence exception was actually available even if not formally invoked, or where the classification analysis ultimately confirms no violation occurred, a VSD may not be appropriate. The decision requires careful judgment. Filing an unnecessary or poorly framed VSD can itself create risk. Failing to file when a VSD is warranted can convert a mitigated matter into an aggravated one.
Stage five: remediation. Regardless of whether a VSD is filed, the apparent-violation assessment should conclude with a remediation plan. This addresses the root cause – whether that is a classification error, a screening gap, a deficiency in the end-use verification process, or a failure in the authorisation workflow. BIS enforcement policy places considerable weight on remediation evidence when assessing the appropriate penalty.
How does the BIS apparent-violation process compare with OFAC and the EU?
The BIS apparent-violation process shares structural features with the OFAC process – both use a VSD mechanism, both apply a penalty matrix that rewards self-disclosure and remediation, and both distinguish between egregious and non-egregious violations. The divergences, however, are operationally significant.
OFAC applies strict liability: a civil violation occurs if a prohibited transaction took place, irrespective of whether the exporter knew it was prohibited. BIS, by contrast, incorporates a knowledge element into the classification of the violation itself. Acting contrary to the EAR with knowledge that a licence was required but not obtained is treated differently from an inadvertent classification error. That distinction shapes the entire framing of a BIS apparent-violation assessment in a way that has no direct equivalent in OFAC practice.
The EU position differs again. Under the EU dual-use regulation – which sits alongside the Council regulations implementing sanctions – an apparent violation of export licensing requirements is primarily a matter for national competent authorities in the member state of export. There is no single EU-level enforcement body equivalent to BIS. The UK Export Control Joint Unit (ECJU) administers a broadly similar classification and licensing regime under the Export Control Order, but enforcement policy, penalty structures, and the VSD-equivalent mechanism differ from the BIS model in several procedural respects. We regularly advise exporters who face parallel BIS and ECJU exposure on the same transaction, and the approaches to apparent-violation management in each jurisdiction require separate handling.
Cross-border exporters should also be alert to the extraterritorial reach of the EAR. The de minimis rule and the foreign-produced direct product rule can extend EAR jurisdiction to items produced outside the United States that incorporate US-origin technology or software, or that are the direct product of certain US-origin technology or equipment. A European manufacturer that re-exports a product incorporating US-origin components may be subject to EAR jurisdiction even if the US content is a small proportion of the finished good. Apparent-violation assessments in those situations must consider both the EAR position and the equivalent rules under the applicable EU or UK regime.
The position above covers the standard case. Your facts – the classification of the item, the destination, the end-user, the route, and the regimes in play – change the analysis in ways that are material to the outcome.
To discuss an apparent-violation assessment under the EAR or a parallel multi-regime exposure, contact Calder & Vance at info@caldervance.com.
What are the risk flags that escalate an apparent violation under the EAR?
Not all apparent violations carry the same enforcement risk. BIS considers a range of aggravating and mitigating factors when determining how to treat a matter, and certain features reliably escalate exposure.
Destination and end-user. Shipments to destinations or end-users that appear on the Entity List, or that are subject to comprehensive controls under the applicable country regime, attract heightened scrutiny. The presence of a listed end-user is treated as a significant aggravating factor.
Knowledge or reason to know. Where there are documented indications that an end-use statement was inaccurate, or where a transaction carried the hallmarks of diversion – unusual routing, a third-country consolidator, a request to omit technical documentation – and the exporter proceeded without further inquiry, BIS will consider whether the exporter had reason to know of the true end-use.
Repeat conduct. A single apparently isolated error is treated differently from a pattern of non-compliance affecting multiple shipments over an extended period. Where the apparent-violation assessment reveals a systemic failure in classification or screening, the remediation plan must address the root cause at the programme level, not merely the individual transaction.
Failure to disclose. Where a business identifies an apparent violation and does not make a VSD within a reasonable time, BIS will note the absence of self-disclosure as an aggravating factor. The absence of a VSD does not prevent BIS from discovering the violation through other means – audit, a tip-off, a counterparty disclosure, or a parallel investigation.
Concurrent OFAC exposure. Where the same transaction gives rise to apparent violations under both the EAR and the OFAC sanctions regulations, the aggregate enforcement risk is higher than either regime in isolation. In our practice, we see businesses manage BIS and OFAC disclosures separately and without coordination. That approach creates risk. The disclosures and the remediation narrative must be aligned.
If a transaction has already been flagged by a freight forwarder, a bank, or a foreign regulator, or if a filing has been refused, an early and structured review can preserve options that narrow with time.
For a confidential review of a potential breach, contact Calder & Vance at info@caldervance.com.
A common misconception: "we relied on the exporter's classification, so we have no exposure"
One of the most persistent misconceptions in export-control practice is that a downstream party – a freight forwarder, a foreign distributor, or a re-exporter – has no EAR exposure because it relied on the classification or the licence determination provided by the original US exporter.
That view is incorrect. The EAR imposes obligations at multiple points in the supply chain. A freight forwarder that has reason to know that a shipment is destined for a prohibited end-user may itself be in apparent violation of the EAR, irrespective of what the exporter represented. A foreign re-exporter that receives US-origin items under a licence condition requiring end-use verification but does not perform that verification has an independent apparent-violation exposure, even if the original export was licensed.
Does your business verify the downstream conduct of its foreign distributors? Does your standard distribution agreement contain the end-use and re-export provisions that the EAR requires? These are the questions that BIS will ask when it examines the supply chain. In our experience, the weakest link in most EAR compliance programmes is not the original export determination but the absence of downstream controls – precisely the area that apparent-violation assessments most often reveal.
Related practices
- Apparent-violation assessment – EU sanctions and export controls – assessing and managing apparent violations under EU dual-use and sanctions regimes
- Apparent-violation assessment under EU rules: explained – how the EU approach to apparent violations compares with the BIS and OFAC models
- Apparent-violation assessment under OFAC: explained – the OFAC apparent-violation and VSD process in full
When should a business involve counsel in a BIS apparent-violation assessment?
Counsel should be involved before the business takes any formal step in response to an apparent violation. The apparent-violation assessment itself, the classification analysis, the VSD decision, the drafting of the disclosure, and the remediation plan each carry legal consequences that are difficult to reverse.
Practically, the threshold for involving counsel is low. If a business has identified a transaction that may not have been authorised, if a freight forwarder or financial institution has raised a query about a shipment, or if BIS has made any form of contact – a request for records, an OEE inquiry, or a visit – counsel should be instructed without delay.
The timing of legal advice matters for a separate reason. In the United States, communications between a business and its counsel in connection with an apparent-violation assessment can attract legal-professional privilege. That protection attaches to the advice, not to the underlying facts. Understanding where the boundary lies – and ensuring that the investigation is structured to preserve the privilege where it is available – is one of the first practical steps an experienced sanctions lawyer will take.
Calder & Vance works with exporters, manufacturers, distributors, freight forwarders, and financial institutions to scope apparent violations under the EAR, to assess culpability and voluntary self-disclosure options, and to prepare and submit disclosures where warranted. We also advise on the OFAC, ECJU, and EU parallel exposures that frequently arise in the same matter. Our approach is to provide a clear assessment of exposure and options from the first instruction, and to manage the disclosure and remediation process through to closure.