BIS expands Russia/Belarus MEU FDP rule to cover Entity List diversion networks and adds CNC machine-tool software controls (FR Doc 2024-19132)

Mechanism

The rule has three operative components:

1. MEU-FDP rule expansion and rename. The Russia/Belarus-Military End User Foreign-Direct Product rule (15 CFR §734.9, with the Russia/Belarus-MEU footnote in the Entity List) is broadened so that the FDP nexus is triggered not only by exports to designated military end users, but also by exports to any Entity List entry that BIS has flagged as posing a significant risk of involvement in the supply or diversion of EAR-subject items to procurement networks for Russia's or Belarus's defense industry or intelligence services. The rule is renamed to reflect this widened scope. Effect: foreign-produced items that incorporate or are made by US-origin technology/software now require a licence whenever they touch the much larger universe of diversion-risk Entity List parties, not just the narrower MEU subset.

2. CNC machine-tool software controls. New export, reexport, and in-country transfer licence requirements on "software" for the operation of computer numerical control (CNC) machine tools destined for, or within, Russia or Belarus. Targets the digital layer of the machine-tool stack that the EAR99 enterprise-software paragraph at §746.8(a)(8) (added 12 June 2024) did not reach.

3. Corrections. Eliminates obsolete cross-references and fixes inadvertent errors introduced by the 25 January 2024 final rule (FR Doc 2024-01177) and the 12 June 2024 final rule (FR Doc 2024-13148, already filed as 2024-06-12-us-bis-russia-belarus-ear-additional-sanctions-final-rule). This action responds_to the June rule because amendatory instruction 11 (effective 16 September 2024) cleans up provisions set up by the June filing.

Downstream implications

• The FDP rename closes a gap where foreign-made items could be

shipped to diversion-risk Entity List parties (e.g., third-country freight forwarders, electronics distributors) without triggering US re-export jurisdiction — now they do.

• CNC machine-tool software is a quiet but high-leverage choke point

for Russia's domestic precision-manufacturing and missile/UAV production. Pairs with prior controls on the machine tools themselves.

• Severity 3 (not 4): this is a refinement/expansion of an existing

perimeter rather than a brand-new control regime; the parent June 2024 rule (severity 4) created the architecture.

Open questions

• How many Entity List entries does BIS retroactively reclassify as

diversion-risk under the renamed FDP rule? Watch subsequent Entity List final rules in late 2024.

• Does the CNC software control list named CNC vendors / product

classes, or is it written at the functional level?