A corporate group restructuring its technology investments discovers that one portfolio company holds export-controlled hardware. The ultimate beneficial owner of a co-investor has appeared on a restricted-party list administered under the Export Administration Regulations. The deal team wants to exit. Can the divestment proceed, and what controls govern the transfer of the controlled goods or technology as the interest changes hands? These are not hypothetical concerns. They are the questions that stall transactions.
Divesting a sanctioned interest under the BIS / EAR regime requires careful sequencing: the export-control classification of any technology or items involved must be confirmed before the transaction closes, any transfer of controlled technology or items to a new owner triggers separate licence or licence-exception analysis, and the divestment itself may need to be structured to avoid creating a new prohibited transaction under the applicable country regime. As of February 2026, the BIS Entity List and the related restricted-party lists administered under the Export Administration Regulations remain active enforcement tools, and a poorly structured exit can generate the very liability the seller is trying to shed.
This page explains the governing authority, the classification and licence analysis that must precede closing, the cross-border considerations that arise when EU, UK, or OFAC controls also apply, and how Calder & Vance structures the divestment process for cross-border businesses.
What authority governs, and why BIS / EAR matters in a divestment?
The Bureau of Industry and Security administers the Export Administration Regulations, which control the export, re-export, and in-country transfer of dual-use items and technology originating in or substantially derived from the United States. When a corporate group divests an interest in an entity that holds, manufactures, or uses controlled items, BIS jurisdiction does not evaporate at the moment of sale. The EAR continues to govern any item on the Commerce Control List that is transferred, licensed, or re-exported as part of the restructuring.
The critical point is that a change of ownership is itself a form of transfer for EAR purposes. If the target entity holds controlled technology – technical data, software, or hardware classified under an ECCN (Export Control Classification Number under the US Commerce Control List) – then moving that technology to a new owner, even as an incidental effect of a share transfer, can constitute an export or re-export requiring a licence or a qualifying licence exception. In our experience, this dimension is underweighted in M&A diligence when the deal team focuses on OFAC screening and misses the separate EAR analysis.
BIS also administers the Entity List, which identifies foreign parties subject to a licence requirement for virtually all EAR-controlled items. A divestment to, or involving a transfer that benefits, an Entity List party can be a serious compliance breach. Have you confirmed that the incoming owner and its affiliates are not on the Entity List or the Denied Persons List?
Classifying the controlled interest: the ECCN analysis before you sign
The first substantive step in any BIS / EAR divestment is to classify every item, technology, and software held by the target entity against the Commerce Control List. This classification exercise determines whether a licence is required for the post-divestment transfer, what licence exceptions may be available, and whether end-use conditions or re-export restrictions attach to the items being transferred.
Classification is not a one-time check. A target entity may hold items at several classification levels, some subject to strict licence requirements and some eligible for a broad licence exception. Items with military or proliferation-sensitive classifications carry the most significant controls; a divestment that transfers those items to a new owner requires the most careful analysis and, in many cases, a specific licence from BIS before closing is possible. Items classified as EAR99 (items subject to the EAR but not listed on the Commerce Control List) carry no ECCN and generally require only basic anti-diversion diligence.
In a recent matter, a technology group exiting a joint venture discovered mid-diligence that the venture's core software module carried a classification that triggered a licence requirement for transfer to the proposed buyer's jurisdiction of ultimate control. We classified the item, confirmed the applicable licence exception did not cover the destination and end-use, and submitted a classification request and licence application to BIS before the deal timeline was reset. The matter was managed within a defined phase plan, avoiding a closing delay that would otherwise have been open-ended.
The classification question also determines whether de minimis rules apply. US-origin controlled content incorporated into a foreign-made item can bring that foreign item within EAR reach if the controlled US content exceeds the applicable de minimis threshold. A divestment involving a non-US target with US-origin content embedded in its products or technology stack must address this before the transaction structure is finalised.
The licence analysis: when does the divestment itself require BIS authorisation?
Not every divestment requires a BIS licence, but every divestment involving EAR-controlled technology requires a licence determination. The analysis turns on three variables: the ECCN of the items being transferred, the destination country or countries involved, and the end-use and end-user of the items after the transfer.
Where the incoming owner is in a country that does not require a licence for the items in question, and no end-use restriction or Entity List concern applies, a licence exception may be available. The most commonly used exceptions in corporate restructuring contexts permit transfers within corporate groups or to affiliates, subject to strict conditions on the nationality of the receiving entity and the classification of the items. These exceptions are narrow, and relying on one without a documented eligibility analysis is itself a compliance risk.
Where a licence is required, the application process involves submitting a detailed package to BIS describing the items, the transaction structure, the proposed owner, and the intended end-use. BIS reviews applications against a set of licence review policies that are instrument-specific but generally consider proliferation risk, military end-use, and country-level policy considerations. The timeline for a decision is not fixed by statute for all applications; in our experience, straightforward dual-use licence applications are resolved within a few months, but applications involving sensitive classifications or complex end-use questions can take considerably longer. Factor this into any transaction timeline before signing a purchase agreement with a fixed closing date.
The position above covers the standard case. Your facts – the classification of the items involved, the identity and nationality of the buyer, and the structure of the transaction – change the analysis considerably. If the items involved carry a sensitive classification or the buyer has affiliates in jurisdictions subject to heightened BIS controls, early advice is essential.
For an assessment of your exposure under the BIS / EAR regime, contact Calder & Vance at info@caldervance.com.
Cross-border dimension: how OFAC, EU, and UK controls interact with a BIS-led divestment
A divestment structured primarily around BIS / EAR compliance rarely operates in isolation. Most cross-border technology transactions sit at the intersection of the EAR and at least one other regime, and the stricter prohibition governs: satisfying BIS does not discharge an obligation under OFAC, OFSI, or the relevant EU Council regulation.
Under OFAC, a divestment involving a blocked person or an entity caught by the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) requires either a specific licence or a general licence authorising the unwinding transaction. OFAC and BIS operate independently. A business that obtains a BIS licence for the technology transfer element of a divestment still needs to address OFAC if blocked property is involved. In our cross-border practice, we map all applicable regimes at the outset and identify the most restrictive constraint before advising on structure.
The EU presents a parallel analytical challenge. EU dual-use rules – the EU equivalent of the EAR for items of EU origin or transiting EU jurisdiction – impose their own classification, licence, and end-use conditions on technology transfers. An EU-based seller divesting a US-technology asset must satisfy both the EAR and the applicable EU controls. The EU Blocking Regulation adds a further layer: for transactions involving certain US extraterritorial measures, EU operators may face a conflict between compliance with US law and compliance with EU law. Counsel experienced in both regimes is needed to map the conflict before the transaction is structured.
UK sanctions and export-control rules, administered by OFSI and the ECJU respectively, add a third layer where UK parties or UK-origin goods and technology are involved. The UK has maintained export-control rules substantially similar to the EU dual-use regime since it left the EU, but the licence procedures and policy positions have diverged in some areas. A divestment involving UK-origin controlled technology must clear ECJU requirements regardless of BIS or EU licence status.
For businesses operating at the intersection of multiple regimes, see also our work on divesting a sanctioned interest under OFAC and on the broader question of structuring a BIS / EAR-compliant exit from a complex interest.
Risk flags: what goes wrong in BIS / EAR divestments
The most common failure mode in a BIS / EAR divestment is a mismatch between the transaction timeline and the licence process. A deal team that signs a purchase agreement before confirming whether a BIS licence is needed – let alone before applying for one – may find itself in a position where closing is legally impossible on the agreed date, or where the only available path is a voluntary self-disclosure of a completed transfer that should have been licensed.
Second in frequency is an incomplete classification exercise. Parties often classify the headline product but miss controlled technology embedded in software, technical documentation shared in the data room, or know-how that the target's engineers possess and that constitutes controlled technology under the EAR. Data-room access in a divestment process is itself a potential export of controlled technology if the recipient is a foreign person. The data room must be configured consistently with applicable EAR controls before it is opened.
Third, the end-user and end-use analysis is often treated as a box-tick rather than a substantive review. A buyer that appears clean on an initial restricted-party screen may have subsidiaries, affiliates, or customers who are Entity List parties. The EAR's end-use and end-user controls extend beyond the immediate counterparty. A transfer to a clean buyer who intends to re-export the controlled technology to a restricted destination is a BIS compliance failure, not a safe harbour.
A further risk flag specific to divestments is the treatment of deemed exports. Under the EAR, the release of controlled technology to a foreign national within the United States is deemed an export to that person's country of nationality. Where the target entity employs foreign nationals who work with controlled technology, the change of ownership may affect the entity's existing authorisation for those deemed exports and requires review.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. A VSD (voluntary self-disclosure to BIS) made promptly and with a complete disclosure package is consistently treated more favourably in BIS enforcement practice than a disclosure made after an inquiry has been opened. Contact Calder & Vance at info@caldervance.com to discuss the options.
A common misconception: share sales do not bypass EAR controls
A persistent myth in cross-border M&A is that a share deal rather than an asset deal avoids the need for BIS analysis. The reasoning goes: if the entity itself is not transferred – only its equity – no items move and no export occurs. This is incorrect, and acting on it can produce serious liability.
The EAR controls the transfer of technology and items, not merely the physical movement of hardware. A change of ownership that places a foreign person – or a person whose nationality triggers a deemed-export requirement – in effective control of a US-origin controlled technology asset is captured by the EAR regardless of deal structure. BIS has been clear in its enforcement guidance that attempts to re-characterise transactions to avoid licence requirements will not succeed. The test is substance, not form. In our experience, parties that have received advice focusing only on the OFAC dimension of a share sale are sometimes surprised by the separate BIS analysis that a thorough review reveals.
The myth also extends to intra-group transactions. Some businesses assume that a transfer between wholly-owned affiliates of the same parent is automatically exempt. Intra-group transfers may qualify for a licence exception in some circumstances, but the exception requirements must be satisfied and documented. An undocumented intra-group transfer of controlled technology is a compliance gap, not a safe passage.
How Calder & Vance structures the divestment process
Our approach to a BIS / EAR divestment is built around four sequential phases, each of which generates a documented output that the business can use in the transaction process and in any subsequent regulatory review.
In the first phase, we classify the controlled interests: we identify every item, technology, and software in scope, assign the applicable ECCN where one applies, and confirm EAR99 status where appropriate. This classification exercise is carried out against the current Commerce Control List and addresses the de minimis question for any foreign items with US-origin content.
In the second phase, we conduct the licence determination: for each classified item or technology in scope, we assess the destination and end-user, identify applicable licence exceptions and test eligibility, and advise on whether a BIS licence application is required. Where an application is required, we prepare and submit the package and manage BIS queries through to decision.
In the third phase, we map the cross-regime overlay: we identify every other regime that applies to the transaction – OFAC, the relevant EU controls, UK ECJU requirements, and any third-country controls – and prepare a consolidated matrix of requirements and timelines. Where a conflict exists between regimes, we advise on structuring options and, where local counsel is required in another jurisdiction, co-ordinate the instruction.
In the fourth phase, we support closing and post-closing compliance: we review the data-room configuration, advise on deemed-export conditions, assist in drafting the representations and warranties in the purchase agreement that address EAR compliance, and design the post-closing record-keeping and reporting obligations. Where a VSD is advisable, we scope the apparent violation, prepare the disclosure package, and manage the BIS process.
We also advise on correspondent banking and de-risking under OFAC, which frequently arises in parallel with export-control divestment work where a financial institution is involved in the transaction structure.
Related practices
- Divesting a sanctioned interest under OFAC – structuring an OFAC-compliant exit from a blocked or restricted interest
- BIS / EAR divestment: complex and multi-regime interests – counsel for layered ownership structures and multi-regime technology exits