Industrial Policy & Trade Monitor· 2663 actions· ✨ 89 recent

The National Defense Authorization Act for Fiscal Year 2026 (P.L. 119-60), signed into law on 18 December 2025, expands the Department of Defense's existing "covered materials" domestic- sourcing restriction (which already barred DoD contracting for SmCo/NdFeB magnets, tantalum and tungsten sourced from China, Russia, Iran or North Korea) to add gallium, germanium and molybdenum under Section 844. Restrictions on materials "melted or produced" in a covered nation take effect 31 December 2026, widening on 1 January 2027 to also cover materials "mined, refined, or separated" in a covered nation; the gallium/germanium additions specifically phase in on 18 December 2027. The same NDAA bundles two related supply-chain provisions: Section 867 gives DoD broader authority (contracts, grants, other-transaction agreements, equity-style investments, and anti-market-manipulation subsidies) to invest in the domestic industrial base for critical minerals, microelectronics, machine tools and other defense-relevant capacity, and Section 842 bars DoD from procuring advanced batteries whose cells or key components are owned, sourced, refined or produced by a foreign entity of concern, phased in 2028-2031.

Japan's Ministry of Economy, Trade and Industry (METI) revised its Foreign End-User List (外国ユーザーリスト) — the reference list of foreign organisations for which WMD/missile or, for the first time, conventional-weapons development concerns cannot be excluded, used to trigger catch-all export-licence requirements. The revision adds 92 entities (from China, Hong Kong, North Korea, Russia, Pakistan, Iran and the UAE) and removes 5 entities (from China, Iran and India), taking the list to 835 entities across 15 countries and regions — a net increase of 87. The revised list applies from 9 October 2025, the same date Japan's broader catch-all conventional-weapons supplementary export-control review took effect.

On 16 January 2025 the US Bureau of Industry and Security published an interim final rule (90 FR 4598; FR Doc 2025-00723) creating new ECCN 3A069 for high-parameter flow cytometers and liquid chromatography mass spectrometers specially designed for top-down proteomics, plus new ECCN 3E069 for related development and production technology. Items previously controlled under the catch-all ECCN 3A999 are migrated into the dedicated 3A069 classification, which carries National Security (NS), Regional Stability (RS), and Anti-Terrorism (AT) controls. Licensing policy is presumption of denial for destinations in Country Group D:1 and D:5, Macau, and Country Group E (i.e. China, Russia, Iran, North Korea, Cuba, Syria, Venezuela). The rule also adds new EEI/AES filing requirements (§ 758.1(b)(11)) for all 3A069 exports to Country Group D destinations. Public comments were accepted until 17 March 2025.

The Bureau of Industry and Security signed an Interim Final Rule on 13 January 2025 (90 FR 4544, published 15 January 2025) introducing the first horizontal export-control regime for advanced AI compute and closed-weight model weights. It revised ECCN 3A090 advanced-IC thresholds, created a new ECCN 4E091 covering closed-weight model weights trained on more than 10^26 operations, and bucketed every destination worldwide into a three-tier country group: Tier 1 (~18 close allies, license-free flows), Tier 2 (the rest of the world, per-country compute caps with National VEU and Universal VEU pathways), Tier 3 (US arms-embargoed destinations including China and Russia under comprehensive denial). It added license exceptions AIA, ACM, and LPP and set staggered compliance dates of 15 May 2025 (general) and 15 January 2026 (data-center / model-weight provisions). The Trump administration's BIS rescinded the rule on 13 May 2025 — two days before the primary compliance date — but it was on the books for four months and shaped allied compliance build-out and the architecture of subsequent US AI export controls.

On 23 December 2024 the US Bureau of Industry and Security published a final rule (89 FR 104408; FR Doc 2024-30425; RIN 0694-AJ83) amending the Export Administration Regulations to implement decisions adopted at the Australia Group's 2023 and 2024 plenary meetings. The rule adds new ECCN 2B352.k controlling instruments for the automated chemical synthesis of peptides that are partly or entirely automated and capable of generating peptides at a system-synthesis scale of 1 mmol or greater, finalising the April 2023 BIS proposed rule. It also adds dipropylamine to ECCN 1C350.d.11, neosaxitoxin to ECCN 1C351.d.12, revises the 1C351.d.3 entry from "botulinum toxins" to "botulinum neurotoxins" to capture all serotypes, adds a "minimum detection limit" definition for toxic-gas monitors in 2B351.a, and explicitly captures single-use centrifugal separators in 2B352.c. License requirements (CB, AT, CW where applicable) apply for export to non-Australia-Group destinations; the rule is effective on publication.

On 31 October 2024, South Korea's Ministry of Foreign Affairs announced strengthened export controls in response to North Korea's long-range ballistic missile launch earlier that day. The measure designates 15 "North Korea-customized" watch-list items across the solid-fuel missile production chain — including ammonium perchlorate, sodium chloride, liquid thiokol, carbon fiber, glass fiber fabric, thermal batteries and inertial-guidance components — that North Korea finds difficult to produce domestically. It operates under Korea's existing Special Notice on Trade for Fulfilling International Peace and Security Obligations, building on the June 2016 Nuclear and Missile Surveillance Items framework and Korea's NSG/MTCR commitments.

BIS finalized changes to the Export Administration Regulations (EAR) governing controls on cybersecurity items — primarily intrusion software, command-and-control platforms, and surveillance tools capable of disrupting or monitoring information systems without authorization. The final rule, effective May 26 2022, revises License Exception ACE (Authorized Cybersecurity Exports) originally established by an October 2021 interim rule and narrows end-user carve-outs for government end users in Country Group D:5 and A:6 destinations. Exports of affected ECCNs (4A005, 4D001, 4D004, 4E001, 5A001.j, 5B001, 5D001, 5E001) to Country Groups E:1 and E:2 remain prohibited; D:1 through D:5 government-end-user transactions require a license.

BIS published an interim final rule on October 21, 2021 establishing new Export Control Classification Numbers (ECCNs 4A005, 4D004, 4E001.c, and 5A001.j) for intrusion software systems, command-and-control platforms, and IP network surveillance tools, implementing the Wassenaar Arrangement 2017 cybersecurity decisions into the Export Administration Regulations (EAR). The rule simultaneously created License Exception ACE (Authorized Cybersecurity Exports), codified at § 740.22, to authorize exports to most destinations while imposing licence requirements — or outright prohibitions — for sales to Country Groups E:1/E:2 governments and certain D-group government end-users. Carve-outs for vulnerability disclosure and cyber-incident-response activities were included to protect legitimate security research. The effective date was subsequently delayed from January 19, 2022 to March 7, 2022 by a separate interim rule (FR 2022-00448), and the rule was finalized with revisions on May 26, 2022 (FR 2022-11282).

The Bureau of Industry and Security (BIS) issued an interim final rule on January 15, 2021 substantially expanding the Export Administration Regulations (EAR) Part 744 end-use and end-user control framework to cover military-intelligence entities in China, Cuba, Iran, North Korea, Russia, Syria, and Venezuela. The rule created a new license requirement for exports of ANY EAR-subject item to named military-intelligence end-users — including EAR99-classified items — and separately imposed restrictions on U.S. persons worldwide providing "support" to military-intelligence end-uses or end-users without a BIS licence. It also broadened chemical and biological weapons controls from "will directly assist" to "will support," expanding the reach of §744.4 and §744.3 on WMD-delivery systems. A technical correction published March 17, 2021 (FR Doc 2021-05623) fixed a drafting error in Instruction 9 that would have inadvertently deleted §744.3(a)(3)(i)-(ii), the rocket systems and UAV provisions.