Mechanism
BIS published this final rule on March 29, 2021 (86 FR 16496, FR Doc 2021-05481), effective immediately upon publication. The rule implements decisions reached at the December 2019 Wassenaar Arrangement Plenary meeting — the second US implementing action for the 2019 Plenary following the October 2020 interim final rule on new emerging-technology controls (20-18334). This final rule addresses the broader CCL harmonisation component of the 2019 decisions.
Revised ECCNs (22 total):
- Category 0 (Nuclear/Conventional Arms): 0A502, 0A503, 0A606 — body armour, smooth-bore weapons, military vehicles
- Category 1 (Materials/Chemicals/Microorganisms): 1A002, 1A005, 1A006, 1A613, 1B002, 1C001, 1C002, 1C006, 1C010 — composites, protective equipment, explosive-detection, military explosives, fibrous materials
- Category 2 (Materials Processing): 2A001 — machine tools for bearing manufacture
- Category 3 (Electronics): 3B001, 3E002 — semiconductor manufacturing equipment, technology
- Category 5 (Telecom/Information Security): 5A002 — information security systems
- Category 6 (Sensors/Lasers): 6A004, 6A005, 6A008 — optical equipment, laser equipment, radar
- Category 9 (Aerospace/Propulsion): 9A011, 9D515, 9E003 — jet engine components, spacecraft software, aerospace technology
No ECCNs were deleted; all changes were parameter revisions or scope clarifications within existing classifications.
Encryption reporting liberalisation: The rule eliminated two reporting obligations that had applied under §742.15(b)–(c): 1. Email notification to BIS and NSA upon posting publicly available encryption source code (except non-standard cryptography — requirement retained); 2. Annual self-classification report requirement for certain mass-market encryption commodities and software.
BIS estimated these changes would reduce annual encryption-related submissions to the agency by 60–80%, relieving exporters of software, cloud services, and consumer electronics from routine compliance overhead without reducing substantive controls on sensitive or non-standard cryptographic items.
Downstream implications
- No new licensing burdens created; the rule is net-liberalising overall (encryption deregulation + Wassenaar harmonisation for allied exporters).
- ECCNs 1A002 (carbon fibre composites), 3B001 (semiconductor fab equipment), and 5A002 (infosec systems) are commercially significant; parameter revisions affect what's caught vs. not caught by the control.
- The 3B001 and 3E002 revisions feed into semiconductor manufacturing equipment controls — a precursor layer to the more targeted October 2022 advanced-chip controls (
2022-10-07-us-bis-advanced-ai-chip-controls-china). - Encryption deregulation benefits SaaS vendors, cloud providers, and consumer electronics exporters dealing with Wassenaar-partner destinations.
Open questions
- Whether the delayed implementation of 2019 Plenary decisions (rule published March 2021, ≈15 months after the December 2019 Plenary) reflects normal BIS rulemaking cadence or was influenced by the COVID-19 period regulatory slowdown.
- How the 3B001 revisions interact with the subsequent FDPR (Foreign Direct Product Rule) expansions (October 2022, October 2023) targeting advanced semiconductor equipment exports to China.