Industrial Policy & Trade Monitor· 2666 actions· ✨ 90 recent

On June 17, 2026, BIS announced a $36,184,680 civil penalty settlement with Robert Bosch GmbH (Stuttgart, Germany) — the largest-ever BIS enforcement penalty against a non-US company for Foreign Direct Product Rule (FDPR) violations. Between September 16, 2020 and September 26, 2024, Bosch exported approximately $72.4 million in MEMS sensor products and automotive software from abroad to Huawei Technologies and its Entity List affiliates without the required BIS license. Bosch filed a Voluntary Self-Disclosure and cooperated throughout; the DOJ issued the first-ever NSD declination under its newly established Corporate Enforcement Policy, declining criminal prosecution entirely.

The US Bureau of Industry and Security issued a final rule (RIN 0694-AK43, 91 FR 1684, signed 13 January 2026, effective 15 January 2026) revising the EAR license-review policy for exports of certain advanced-computing integrated circuits to end-users in China and Macau from a presumption of denial to case-by-case review. Eligibility is limited to commodities controlled under ECCN 3A090.a and 3A090.b with a Total Processing Performance (TPP) below 21,000 and total DRAM bandwidth below 6,500 GB/s — the band that covers NVIDIA H200 and AMD MI325X-equivalents and below. To qualify, exporters must certify (i) sufficiency of US supply such that the export will not delay domestic orders or divert foundry capacity, (ii) that aggregate TPP of advanced-node ICs exported to China or Macau will not exceed 50% of domestic shipments, (iii) compliance with end-use and end-user prohibitions, and (iv) prior performance review by a qualified independent third-party testing lab headquartered in the United States. The rule is the first material rollback of the October 2022 / October 2023 / December 2024 advanced-computing export-control architecture and operationalises the Trump-administration policy of trading H200-class chip access against Chinese cooperation on critical minerals, fentanyl precursors and Taiwan-strait restraint.

The National Defense Authorization Act for Fiscal Year 2026 (P.L. 119-60), signed into law on 18 December 2025, expands the Department of Defense's existing "covered materials" domestic- sourcing restriction (which already barred DoD contracting for SmCo/NdFeB magnets, tantalum and tungsten sourced from China, Russia, Iran or North Korea) to add gallium, germanium and molybdenum under Section 844. Restrictions on materials "melted or produced" in a covered nation take effect 31 December 2026, widening on 1 January 2027 to also cover materials "mined, refined, or separated" in a covered nation; the gallium/germanium additions specifically phase in on 18 December 2027. The same NDAA bundles two related supply-chain provisions: Section 867 gives DoD broader authority (contracts, grants, other-transaction agreements, equity-style investments, and anti-market-manipulation subsidies) to invest in the domestic industrial base for critical minerals, microelectronics, machine tools and other defense-relevant capacity, and Section 842 bars DoD from procuring advanced batteries whose cells or key components are owned, sourced, refined or produced by a foreign entity of concern, phased in 2028-2031.

The Bureau of Industry and Security (BIS) issued a final rule suspending, for one year, the interim final rule "Expansion of End-User Controls to Cover Affiliates of Certain Listed Entities" (90 FR 47201, Sept. 30, 2025). Effective November 10, 2025 and ending November 9, 2026, the amendments to 15 CFR parts 732, 734, 736, 744, and 748 made by the Affiliates Rule are stayed; the original Entity List restrictions on named parties remain in force, but the automatic 50%-ownership-based extension to unlisted affiliates is paused. Phase two — re-instating the Affiliates Rule changes — is scheduled for November 10, 2026 absent a future extension.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) to add 29 entries — 26 entities and 3 addresses — to the Entity List under the destinations of China (19), Turkey (9), and the United Arab Emirates (1). BIS determined these parties were diverting US-origin items to Iran, including to parties already on the BIS Entity List and on OFAC's Specially Designated Nationals (SDN) List, in support of Iranian drone-parts and electronics-procurement networks. The rule is a final rule effective October 8, 2025; new license requirements apply to all items subject to the EAR for these listed parties under a presumption-of-denial review policy.

The Bureau of Industry and Security (BIS), within the U.S. Department of Commerce, published a final rule in the Federal Register on September 30, 2025 (FR Doc 2025-18992) rescinding the April 30, 2024 Firearms Export License Requirements interim final rule in its entirety, with the sole exception of preserving the new Export Control Classification Numbers (ECCNs) it had introduced for firearms and ammunition. The rule also amends the EAR to remove the Congressional notification requirement for certain semi-automatic firearms license applications. It is effective on publication.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) to add 32 entities to the Entity List, with the largest bloc — 23 entries — under the destination of China, plus India (1), Iran (1), Singapore (1), Taiwan (1), Turkey (3), and the United Arab Emirates (2). The rule also removed two addresses from one Russian entry (Intertech Rus LLC) and made 27 typographical corrections to existing entries. Several Chinese additions — including Shanghai Fudan Microelectronics, Sino IC Technology, GMC Semiconductor (Wuxi), and Chinese Academy of Sciences units (National Time Service Center; Aerospace Information Research Institute) — were given footnote 4 designations, extending the EAR's foreign-direct-product (FDP) reach to non-US-origin items destined for Russian military end use. Three Turkish entries (Atempo, EB Teknoloji, Dentun Elektronik) and one Indian entry (AR Sales Pvt Ltd) were footnote-3 Russian Procurement Entity designations. The rule is a final rule effective September 12, 2025; all listed parties are subject to a license requirement for all items subject to the EAR with a presumption-of-denial review policy.

The US Bureau of Industry and Security (BIS) amended the Export Administration Regulations to remove three foreign-owned semiconductor fabs operating in China — Intel Semiconductor (Dalian) Ltd, Samsung China Semiconductor Co. Ltd, and SK hynix Semiconductor (China) Ltd — from the Validated End-User (VEU) Authorizations list (15 CFR Part 748). BIS framed the VEU program as a "loophole" that previously allowed these fabs to receive most US-origin chipmaking equipment, software and technology license-free, a privilege no US-owned fab in China ever had. After the effective date, every restricted shipment to these fabs will require an individual export license, reviewed case-by-case under the existing 2022/2023 advanced- computing controls. The rule is published as Federal Register document 2025-16735 (90 FR 42321), Docket BIS-2025-0555, RIN 0694-AK32.

On 13 May 2025, two days before the AI Diffusion Rule's primary 15 May 2025 compliance date, the Trump administration's BIS announced it would rescind the Biden-era Framework for AI Diffusion (90 FR 4544) and simultaneously issued three guidance documents that re-routed US AI export policy through existing EAR authorities. The package comprises (1) GP10 guidance asserting that all ECCN 3A090 ICs designed by PRC-headquartered firms are presumptively EAR-violative, with Huawei Ascend 910B/910C/910D processors named explicitly — making US- and non-US-person use, transfer, financing, or servicing of those chips anywhere in the world a presumptive General Prohibition 10 violation; (2) a policy statement warning industry that supplying US advanced computing ICs for training or inference of Chinese AI models risks EAR enforcement; and (3) industry guidance on diversion-prevention diligence. BIS stated a formal Federal Register rescission and replacement rule would follow.

The US Bureau of Industry and Security amended the Export Administration Regulations to add 12 entities to the Entity List under the destinations of China (11) and Taiwan (1) via Final Rule 2025-05427 (90 FR 14046), companion to the larger 70-entity rule (2025-05426) published the same day. Targets fall in three clusters: (i) Beijing Academy of Artificial Intelligence and Beijing Innovation Wisdom Technology — added for acquiring US-origin items in support of China's military modernization, specifically developing large AI models and advanced computing chips for defense; (ii) the Inspur group — Inspur (Beijing) Electronic Information Industry, Inspur Electronic Information Industry, Inspur Electronic Information (Hong Kong), Inspur (HK) Electronics, Inspur Software, and Inspur Taiwan — added as subsidiaries contributing to supercomputers for military end use; and (iii) Henan Dingxin, Nettrix Information Industry, Suma Technology, and Suma-USI Electronics — added for involvement in the development of Chinese exascale supercomputers. License requirements are for all items subject to the EAR; review policy is presumption of denial for the AI cluster and policy of denial for the supercomputer clusters.

In its first major export-regulatory action of the second Trump administration, BIS amended the EAR to add 70 entities to the Entity List under the destinations of China (42), Iran (2), Pakistan (19), South Africa (3), and the United Arab Emirates (4), and modified four existing entries (France, Iran, Senegal, UK). New listings carry a license requirement for all items subject to the EAR with a presumption-of-denial review policy and no license exceptions available. Stated objectives include restricting China's acquisition of high-performance computing and quantum technologies for military use, impeding hypersonic-weapons development, disrupting Iran's UAV and defense procurement, and impairing Pakistan's unsafeguarded nuclear and ballistic-missile programs. The rule also targets the Test Flying Academy of South Africa for using U.S.-origin items to train Chinese military pilots.

BIS published an interim final rule (FR Doc 2025-00711, 90 FR 4544-publication slot; companion to the AI Diffusion Framework signed three days earlier) revising the EAR to add explicit due-diligence procedures for advanced computing integrated circuits captured by ECCN 3A090. The rule (i) creates an Authorized IC Designer / Approved IC Packager regime so that foundries and OSATs can identify trustworthy customers via lists maintained by BIS, (ii) imposes new front-end-fabricator reporting requirements for any 3A090.a IC produced for an authorized IC designer to give the US government supply-chain visibility, and (iii) adjusts the scope of covered advanced-computing items. Effective 16 January 2025; compliance required from 31 January 2025; comment period extended to 14 March 2025. The rule was immediately followed by the 16 January Entity List additions (Sophgo et al.) targeting circumvention paths and was technically amended on 14 February 2025 to narrow the RS license requirement to ECCN 3A090.a only.

On 16 January 2025 the US Bureau of Industry and Security published an interim final rule (90 FR 4598; FR Doc 2025-00723) creating new ECCN 3A069 for high-parameter flow cytometers and liquid chromatography mass spectrometers specially designed for top-down proteomics, plus new ECCN 3E069 for related development and production technology. Items previously controlled under the catch-all ECCN 3A999 are migrated into the dedicated 3A069 classification, which carries National Security (NS), Regional Stability (RS), and Anti-Terrorism (AT) controls. Licensing policy is presumption of denial for destinations in Country Group D:1 and D:5, Macau, and Country Group E (i.e. China, Russia, Iran, North Korea, Cuba, Syria, Venezuela). The rule also adds new EEI/AES filing requirements (§ 758.1(b)(11)) for all 3A069 exports to Country Group D destinations. Public comments were accepted until 17 March 2025.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) by adding 11 entities under 11 entries to the Entity List, all listed under the destination of China, People's Republic of (China). The rule also revises one existing entry on the Entity List under the destination of India. BIS determined the added entities have been involved in, are involved in, or pose a significant risk of becoming involved in activities contrary to the national security or foreign policy interests of the United States. License requirements apply to all items subject to the EAR with a presumption-of-denial review policy. The rule was effective on publication, January 16, 2025. This action is the companion piece to the same-day 16-entity Sophgo-cluster addition (FR 2025-00480) — together totalling the "27 Chinese companies" referenced in trade-press coverage.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) by adding 16 entities to the Entity List under the destinations of China (14) and Singapore (2). The additions concentrate on the Sophgo Technologies cluster and a set of affiliated PRC fabless / system houses (Suanze, Suanxin, Suanhu, Suanli, Suanneng, Sophon, Quliang, Shunhua) plus two Singapore entities (Sophgo Technologies Pte. Ltd., PowerAir Pte. Ltd.) acting as offshore extensions of the same group. BIS cites involvement in "supporting or directly contributing to the development of advanced computing integrated circuits" that further PRC advanced-weapons, WMD, and high-tech surveillance programs. License requirement covers all items subject to the EAR with a presumption-of-denial review policy. The rule was effective on publication, January 16, 2025.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) by adding 13 entities under 13 entries to the Entity List, listed under the destinations of Burma (1), China (11), and Pakistan (1). The PRC additions concentrate on the optics/photonics, RF/microwave, and military-civil-fusion research-institute layer of China's military-modernization stack — including CAS Changchun Institute of Optics, Fine Mechanics and Physics (CIOMP), Shanghai Institute of Optics and Fine Mechanics (SIOM), Peng Cheng Laboratory, Ji Hua Laboratory, and the Yaguang/Chengdu RML defense-electronics cluster — with explicit references to support for hypersonic-weapons development. The Burma entity is Telecom International Myanmar (Mytel), added for providing surveillance services and financial support to the post-coup military regime; the Pakistan entity (Emerging Future Solutions Pvt Ltd) was added for contributions to Pakistan's ballistic-missile programme. All 13 entries carry a license requirement for all items subject to the EAR with a presumption-of-denial review policy and no license exceptions. The rule was effective on publication, January 6, 2025, with a savings clause through February 5, 2025 for goods already en route.

On 23 December 2024 the US Bureau of Industry and Security published a final rule (89 FR 104408; FR Doc 2024-30425; RIN 0694-AJ83) amending the Export Administration Regulations to implement decisions adopted at the Australia Group's 2023 and 2024 plenary meetings. The rule adds new ECCN 2B352.k controlling instruments for the automated chemical synthesis of peptides that are partly or entirely automated and capable of generating peptides at a system-synthesis scale of 1 mmol or greater, finalising the April 2023 BIS proposed rule. It also adds dipropylamine to ECCN 1C350.d.11, neosaxitoxin to ECCN 1C351.d.12, revises the 1C351.d.3 entry from "botulinum toxins" to "botulinum neurotoxins" to capture all serotypes, adds a "minimum detection limit" definition for toxic-gas monitors in 2B351.a, and explicitly captures single-use centrifugal separators in 2B352.c. License requirements (CB, AT, CW where applicable) apply for export to non-Australia-Group destinations; the rule is effective on publication.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations by adding 8 entities to the Entity List under the destinations of Burma (2), China (2), and Russia (4), citing actions contrary to US foreign-policy interests, primarily enabling human-rights violations through aerial attacks on civilians (Burma), Uyghur surveillance (China), and facial-recognition targeting of protesters (Russia). All designated entities require licenses for all items subject to the EAR with a presumption of denial. The rule was effective immediately on publication, December 11, 2024.

The US Bureau of Industry and Security issued its largest single export-control package targeting China's semiconductor industry on 2 December 2024, with three layered measures (final rules published in the Federal Register 5 December 2024). First, controls on high-bandwidth memory (HBM) above set performance thresholds — blocking the memory architecture that is foundational to AI training. Second, additions of 24 semiconductor manufacturing equipment item types to the Commerce Control List, covering deposition, etch, ion- implant, advanced packaging, and metrology categories. Third, Entity List designations for 140+ entities, the bulk Chinese semiconductor companies + equipment makers + investment vehicles, including major Chinese fab tooling firms. The package triggered MOFCOM's same-day-following retaliation (filed: 2024-12-03-china-mofcom-ge-ga-sb-export-ban-us).

The US Bureau of Industry and Security amended the Export Administration Regulations to impose a new "Regional Stability – Pakistan" (RS-PAK) licence requirement on exports, reexports, and in-country transfers to Pakistan of items classified under six previously-uncontrolled-for-Pakistan ECCNs: 1B999, 2A992, 2B999 (excluding 2B999.h.2), 3A992, 3A999, and 6A996. The covered items — process-control equipment, high-pressure piping and valves, oscilloscopes, electronic test equipment, magnetometers, and related dual-use industrial gear — are associated with unsafeguarded nuclear and ballistic-missile end-uses. Licence applications are reviewed case-by-case to assess diversion risk to Pakistan's nuclear weapons or ballistic missile programmes, and to entities already on the Entity List or front companies acting on their behalf. Issued as a final rule under ECRA §1762(a) (no notice-and-comment); originally effective 25 November 2024 with the corresponding amendatory instructions, with the substantive licence requirement effective 26 December 2024 (post C1-2024-27648 correction published 29 November 2024).

The US Bureau of Industry and Security (BIS) final rule (89 FR 87261; FR Doc 2024-25411) added 40 entities under 42 entries plus four addresses to the Entity List under the destinations China (11), India (5), Malaysia (2), Russia (13), Singapore (1), and Turkey (14), and modified 52 existing entries across China, Estonia, Finland, India, Turkey, the UAE and the UK. The dominant rationale is Russia-diversion enforcement: Chinese, Turkish, Indian, Malaysian and Singaporean entities listed for transshipping controlled US-origin items to Russian defense end users; the 13 Russia entries cover chemical and biological warfare R&D and defense procurement networks. License requirement is "all items subject to the EAR" with a policy/presumption of denial; four China addresses get the narrower "CCL + EAR99 supp. 7" scope. Effective on publication 2024-11-01.

Bureau of Industry and Security final rule (89 FR 84460, Doc 2024-24562) adding 26 entities to the Entity List across four destinations: six in China (aviation simulation for PLA modernisation; procurement for Iran WMD/UAV programs; evasive conduct), one in Egypt and three in the UAE (acquiring US civil aircraft parts for Russian buyers post-Ukraine invasion), and sixteen in Pakistan (nine front companies of Advanced Engineering Research Organization for Pakistan's cruise-missile and strategic-UAV programs, plus seven contributing to Pakistan's ballistic- missile program). The rule also removes two existing entries. All additions are licensed under a presumption-of-denial policy for all EAR-subject items.

In a final rule published at 89 FR 84766 (FR Doc 2024-23932), the US Bureau of Industry and Security (BIS) amends the Export Administration Regulations (EAR) to remove BIS licence requirements on certain spacecraft and related items — including remote-sensing spacecraft and on-orbit servicing, assembly, and manufacturing (OSAM) items — for exports and reexports to Australia, Canada, and the United Kingdom. The rule is effective immediately on publication (23 October 2024) and is part of a three-rule package modernising the US space-related export-control regime (companion IFR 2024-23958 broadens controls relief for ~40 additional destinations; companion proposed rule 2024-23975 floats a new License Exception Commercial Space Activities). The AU/CA/UK carve-out builds on the trilateral National Technology and Industrial Base (NTIB) framework.

In an interim final rule (IFR) published at 89 FR 84770 (FR Doc 2024-23958), the US Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) to revise controls on spacecraft and related items. The rule shifts the reasons for control on "specially designed" parts, components, accessories, and attachments under ECCNs 9A004.x and 9A515.x from National Security Column 1 / Regional Stability Column 1 (NS1/RS1) to NS2/RS2 — eliminating BIS licensing requirements for roughly 40 destinations that only face NS2/RS2 controls on the Commerce Country Chart. The IFR also broadens License Exception STA-related provisions and expands support for NASA cooperative programmes. It is one of three companion rules (with FR Doc 2024-23932 and a parallel proposed rule on a new License Exception Commercial Space Activities) issued the same day to modernise the US space-related export-control regime.

The US Bureau of Industry and Security (BIS) published an interim final rule (89 FR 80064; FR doc 2024-22587) amending the Export Administration Regulations (15 CFR 748.15) to expand the Validated End User (VEU) program with a new "Data Center VEU Authorization" pathway. The rule lets BIS pre-authorize specified data-center operators in third countries to receive advanced computing integrated circuits (ECCNs 3A090, 4A090 and related) and related technology without individual export licenses, conditional on vetted security plans, end-use monitoring, and reporting. Country Group D:5 destinations — China, Russia, Iran, Belarus, Venezuela, Cuba and 17 other arms-embargoed states — are categorically excluded. Eligible destinations include Egypt, Laos, Moldova, Oman, Pakistan, Qatar, Saudi Arabia, Turkmenistan, and the UAE — extending the US chip-equipment perimeter into a managed trusted-data-center channel for Gulf, MENA, and Central Asian AI build-out.

The US Bureau of Industry and Security issued a final rule on 5 September 2024 (effective 6 September 2024, published in the Federal Register on the same day as 89 FR 73285) establishing multilateral export controls on four categories of emerging technologies: (1) quantum computing items including quantum computers, related cryogenic / control / measurement systems, and certain quantum software; (2) gate-all-around field-effect transistor (GAAFET) production technology — the next-node semiconductor architecture beyond FinFET; (3) advanced additive-manufacturing equipment for metals + alloys; (4) certain biotech-related items added in a parallel rule on 12 September 2024. The rule operates without country exceptions for some categories, with multilateral coordination via Wassenaar + Australia Group + Nuclear Suppliers Group frameworks.

The US Bureau of Industry and Security (BIS) final rule (89 FR 68544; FR Doc 2024-19130) added 123 entities under 131 entries to the Entity List with destinations Russia (63), China (42), Iran (11), Turkey (8), and one each in Canada, Cyprus, Kazakhstan, Kyrgyzstan, Crimea Region of Ukraine, Ukraine, and the United Arab Emirates. The dominant rationale is Russia-diversion enforcement: Chinese, Turkish and other third-country firms (e.g., MAK Logistics, Megatek Ltd., Wellgo International, AllChips Limited, Chipgoo Electronics) named for supplying U.S.-origin electronics and dual-use items to Russian industry and military, plus designation of large numbers of Russian military manufacturers (e.g., JSC 75 Arsenal, FSE Aleksinsky Chemical Plant) as military end users. License requirement is "all items subject to the EAR" with policy/presumption of denial; case-by-case for EAR99 food and medicine to certain Russian military end users. Effective on publication 2024-08-27.

BIS final rule (FR Doc 2024-19132, 89 FR 68539, published 27 August 2024) expanding the Russia/Belarus-Military End User (MEU) Foreign-Direct Product (FDP) rule under the Export Administration Regulations so that it also applies to transactions involving Entity List entries posing a significant diversion risk to Russia's and Belarus's defense industry or intelligence services — the rule is renamed accordingly. The rule also imposes new export, reexport, and in-country transfer controls on software for the operation of computer numerical control (CNC) machine tools destined for Russia or Belarus, and makes corrections eliminating obsolete cross- references introduced by the BIS 25 January 2024 and 18 June 2024 Russia/Belarus final rules. Effective 27 August 2024, except amendatory instruction 11 effective 16 September 2024.

The U.S. Bureau of Industry and Security (BIS) published a final rule expanding the scope of the Iran Foreign Direct Product (FDP) rule in the Export Administration Regulations (EAR) to implement the "No Technology for Terror Act" (Public Law 118-50, Division N), signed by President Biden on April 24, 2024. The expanded rule extends EAR jurisdiction to additional foreign-produced items destined for Iran — including a broader set of items derived from U.S.-origin technology or software, or produced by plants/components that are themselves direct products of U.S.-origin technology — and requires a BIS license for their export, reexport, or in-country transfer to Iran. The rule also provides specified exclusions from the otherwise-applicable license requirements. The rule became effective on July 23, 2024 (publication July 26, 2024).

The US Bureau of Industry and Security (BIS) final rule (89 FR 55033; FR Doc 2024-14635) added six entries to the Entity List under the destinations of the People's Republic of China (2), South Africa (1), the United Arab Emirates (2), and the United Kingdom (1). The two PRC-based entries (Global Training Solutions Limited; Smartech Future Limited) were added for ties to an existing Entity List party and for training elements of the PRC military. The two UAE-based entries (Mega Fast Cargo LLC; Mega Technique General Trading) were added for repeated dilatory or evasive conduct during BIS end-use checks, including the provision of false, misleading, or incomplete information. The South Africa and United Kingdom entries were added for shipping or attempting to ship US export-controlled items to Russia in violation of EAR controls. License requirement is "all items subject to the EAR" with policy of presumption of denial. The rule is effective on publication, 2024-07-03.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) by adding three Kaspersky entities to the Entity List under End-User Review Committee (ERC) determinations — AO Kaspersky Lab (Moscow), OOO Kaspersky Group (Moscow), and Kaspersky Labs Limited (London). All three are designated for cooperation with Russian military and intelligence authorities in support of Russian government cyber-intelligence objectives. Exports, reexports, and in-country transfers of all items subject to the EAR to the three entities now require a BIS licence reviewed under a policy of presumption of denial, with no licence exceptions available. The action is paired with a same-week Commerce ICTS final determination prohibiting Kaspersky cybersecurity and anti-virus software transactions in the United States.

BIS final rule (FR Doc 2024-13148, 89 FR 51644, RIN 0694-AJ87) expanding the Export Administration Regulations' Russia and Belarus sanctions architecture. Effective 12 June 2024 (most provisions) and 16 September 2024 (the EAR99 enterprise-software paragraph at §746.8(a)(8)), the rule introduces a new licence requirement for thirteen named categories of EAR99 enterprise software (ERP, CRM, BI, SCM, EDW, CMMS, project management, PLM, BIM, CAD, CAM, ETO) destined for Russia or Belarus; permits address-only Entity List designations to capture high-diversion addresses; adds eight Hong Kong addresses to the Entity List; and refines the Russia/Belarus Industry Sector Sanctions and Foreign Direct Product (FDP) rule. Released the day before the G7 Italy summit alongside coordinated OFAC, State, and Treasury actions that together designated 300+ persons and entities.

The US Bureau of Industry and Security (BIS) final rule (89 FR 41706; FR Doc 2024-10485) added 37 entities under 37 entries to the Entity List, all listed under the destination of the People's Republic of China. BIS designated these parties for one or more of three rationales: (i) shipping US-controlled items to Russia in violation of EAR controls, (ii) attempting to acquire US-origin items to support China's military modernisation or quantum-technology capabilities, and (iii) ties to the PRC high-altitude balloon that overflew the United States in late January–early February 2023. The designations span PRC technology companies (predominantly quantum-computing firms), manufacturing companies, and research institutes. License requirement is "all items subject to the EAR" with a policy of presumption of denial and no license exceptions available. The rule is effective 2024-05-09, with publication in the Federal Register on 2024-05-14.

The Bureau of Industry and Security (BIS), within the U.S. Department of Commerce, published an interim final rule (FR Doc 2024-08813) on April 30, 2024 amending the Export Administration Regulations (EAR) to restructure export controls on firearms, ammunition, parts, accessories, and related technology and software (EAR Categories 0 and 1). The rule created new Export Control Classification Numbers (ECCNs) for semi-automatic firearms, added Crime Control / Detection (CC) license requirements, narrowed license-exception eligibility, introduced a presumption of denial for many non-government end-users, and imposed a default 1-year license validity for semi-automatic firearms. Effective May 30, 2024; later rescinded (except for the new ECCNs) by FR Doc 2025-18992 on September 30, 2025.

The US Bureau of Industry and Security (BIS) issued an interim final rule (IFR) amending the Export Administration Regulations (EAR) to remove list-based license requirements — including National Security Column 1 (NS1), Regional Stability Column 1 (RS1) and Missile Technology Column 1 (MT1) reasons-for-control — for exports, reexports and in-country transfers to or within Australia and the United Kingdom. The IFR also expands the availability of license exceptions and reduces the scope of end-use and end-user-based license requirements for the two AUKUS partners, while leaving firearms-related items (Crime Control / CC) and a narrow set of other ECCNs untouched. The rule is the EAR-side companion to a parallel DDTC proposed rule creating an ITAR §126.7 exemption for defense articles and services traded among authorised AU/UK/US users, and is the foundational regulatory implementation of the AUKUS Pillar 2 advanced-capability cooperation track.

The Bureau of Industry and Security (BIS) issued a final rule (FR Doc 2024-08622; Docket 240417-0112; 89 FR 30119) amending the Export Administration Regulations (EAR) to expand the product scope of two Foreign Direct Product (FDP) rules — the Iran FDP rule and the Russia/Belarus/Temporarily occupied Crimea region of Ukraine FDP rule in 15 CFR 734.9(f) — to cover the entirety of the Common High Priority List (CHPL), an HTS-6 list developed jointly with the EU, Japan and the UK that identifies items used in Russian weapons production. The CHPL scope adds basic commercial-grade microelectronics (integrated circuits, RF transceiver modules), test/manufacturing equipment for electronic components, and CNC machine tools to the perimeter, requiring a BIS licence when these foreign-produced items are exported, reexported or transferred to Iran, Russia, Belarus or occupied Crimea. The rule was issued in response to Iran's 13 April 2024 attack on Israel and Iran's ongoing military support for the Russian war in Ukraine; it became effective 18 April 2024 (Federal Register publication 22 April 2024) with a transit grace period for in-flight shipments until 20 May 2024.

The US Bureau of Industry and Security (BIS) final rule (89 FR 25503; FR Doc 2024-07760) added 11 entries to the Entity List under China (6), Russia (3), and the United Arab Emirates (2), effective 2024-04-11. The primary rationale for the Russia and UAE tranches — and at least one China entity (Shenzhen Jiasibo Technology) — is procurement of US-controlled dual-use aerospace and UAV components for Iran's Shahed- series UAV programme via the Iran Aircraft Manufacturing Industrial Company (HESA); those drones have been used against oil tankers in the Middle East and deployed by Russia in Ukraine. The remaining five China entities were designated for acquiring US-origin items to support China's military modernisation. The rule also adds one alias to the existing entry for Shanghai Biren Intelligent Technology Co., Ltd. This action was the first Entity List final rule published after BIS implemented the 50 Percent Rule for controlling foreign subsidiaries of listed entities.

The Bureau of Industry and Security (BIS) published a final rule (89 FR 20107) consolidating and expanding EAR end-user controls on persons listed on OFAC's Specially Designated Nationals (SDN) list. The rule rewrites EAR § 744.8 to impose a licence requirement covering ALL items subject to the EAR — replacing earlier controls limited to "luxury goods" — whenever an SDN designated under any of 14 specified OFAC sanctions programmes is a party to a transaction. A presumption of denial applies to all licence applications under the revised section, and no licence exception may overcome the restriction.

BIS amended the Export Administration Regulations (EAR) on 15 March 2024 to apply more restrictive dual-use export, reexport, and in-country transfer controls on Nicaragua. The rule adds Nicaragua to Country Group D:5 (U.S. Arms-Embargoed Countries) and moves it from Country Group B to Country Group D:1 (national security concerns), effective the same day. The action aligns EAR country-group treatment with a concurrent State Department decision under ITAR §126.1, driven by the Nicaraguan government's human rights abuses and its deepening military and security cooperation with Russia.

The US Bureau of Industry and Security (BIS) final rule (89 FR 14385; FR Doc 2024-03969; Docket 240215-0050; RIN 0694-AJ54) added 93 entities under 95 entries to the Entity List, effective 23 February 2024, with destinations Russia (63), Turkey (16), China (8), UAE (4), Kyrgyzstan (2), India (1), and South Korea (1). The dominant rationale is enforcement of Russia-diversion controls: 46 Russian defense manufacturers are designated as military end users acquiring US-origin items for Russia's armed forces, five Chinese entities (including Dennex Enterprises Limited and Shenzhen Speed Industrial Materials Co.) are cited for facilitating diversion of controlled microelectronics to Russia, and 16 Turkish firms are cited as procurement hubs obtaining US-origin items of importance to Russia's war effort. Four UAE entities are designated for transshipment networks serving both Russia and Iran. All entities are subject to a presumption of denial for EAR-controlled items; Russian military end users are additionally subject to the Russia/Belarus FDP rule (15 CFR 734.9(g)).

Bureau of Industry and Security final rule (89 FR 14403, Doc 2024-03674) adding two entities under seven entries to the Entity List, effective February 27, 2024. Sandvine Incorporated, a Canadian deep packet inspection vendor, is listed across six destinations (Canada, India, Japan, Malaysia, Sweden, UAE) because it supplies DPI technology to the Government of Egypt where it is used for mass web-monitoring and censorship. Chengdu Beizhan Electronics Co., Ltd. is listed under China for acquiring and attempting to acquire U.S.-origin items on behalf of the University of Electronic Science and Technology of China (UESTC), a PLA-affiliated institution already on the Entity List. All items subject to the EAR require a license with a presumption-of-denial review policy for both entities. The rule also revises entries for two existing Chinese entities and removes one UAE entry.

BIS final rule (FR Doc 2024-01408, 89 FR 4804, effective 23 January 2024) strengthens the EAR sanctions architecture against Russia and Belarus by adding 94 HTS-6 entries to the Russian and Belarusian Industry Sector Sanctions (§746.5/§746.8) — covering hand tools, parachutes, aircraft training simulators, and airplane/helicopter components — and expands the de minimis threshold for foreign-made goods incorporating US-origin 600-series and 9×515 items destined for Russia or Belarus. A parallel provision targets Iran's supply of unmanned aerial vehicles (UAVs) to Russia by adding HTS code 852910 (antennas and antenna reflectors) to the §746.7 Iran export-control list. The rule also refines Crimea licensing to permit exports supporting Ukrainian Armed Forces deployments in occupied territories.

The Bureau of Industry and Security (BIS) added 42 entities under 44 entries to the Entity List, effective December 7, 2023. The majority — 28 entities in Russia — are sanctioned for procuring or contracting on behalf of Russia's defense sector, including avionics, military-grade drones, and military electronics. Fourteen additional entities across Armenia, Belarus, Belgium, Cyprus, Germany, Kazakhstan, the Netherlands, China, and the UAE were added for operating diversion and transshipment networks that supply U.S.-origin items to Russian military end-users. All listed entities face a license requirement for all EAR-controlled items with a presumption of denial.

The Bureau of Industry and Security amended the Export Administration Regulations by adding four entities under nine entries to the Entity List, effective November 21, 2023 (FR Doc. 2023-25684). Three entities — Aerofalcon S.L. (Spain), Novax Group S.A. (Costa Rica, Ecuador, Panama, Russia, Venezuela), and Zero Waste Global SA (Panama, Venezuela) — were listed for circumventing US sanctions by supplying Nicolás Maduro's government with US-origin aircraft parts using fraudulent export documentation. A fourth entity, Si2 Microsystems Private Limited (India), was listed for supplying Russian defense-sector consignees with US-origin integrated circuits in violation of Section 746.5(a)(1)(ii) Russia/Belarus export restrictions. All entities are subject to a license requirement for all EAR items with a presumption of denial.

The Bureau of Industry and Security (BIS) added thirteen entities to the Entity List effective November 2, 2023 — twelve in Russia and one in Uzbekistan — for posing a significant risk of supporting Russia's war against Ukraine through the procurement, development, and proliferation of unmanned aerial vehicles (UAVs). The designated group includes ZALA Aero Group, the Kalashnikov Concern-linked maker of the Lancet loitering munition and Orlan-10 reconnaissance drone. A license requirement now applies to all items subject to the EAR exported, reexported, or transferred to these parties, with a license review policy of denial for everything except food and medicine designated EAR99 (case-by-case), and the Russia/Belarus Military End User Foreign Direct Product rule applies.

On 25 October 2023 the Bureau of Industry and Security published an interim final rule (88 FR 73424; FR Doc 2023-23055) making substantive revisions to the October 7 2022 advanced-computing IFR, incorporating 43 public comments covering 78 topics. The rule replaced the prior TOPS-based performance metric with a new "Total Processing Performance" (TPP) / performance-density dual-threshold structure for ECCN 3A090, splitting the control into tiers 3A090.a (full licence requirement for highest-capability datacenter AI chips) and 3A090.b (new License Exception NAC with 25-day prior notification for the intermediate tier). Geographic scope was expanded from China-and-Macau to Country Groups D:1/D:4/D:5 to block diversion via third-country intermediaries and offshore datacenters.

The US Bureau of Industry and Security issued an interim final rule on 17 October 2023 that substantially expanded the advanced-computing and semiconductor manufacturing controls first imposed in October 2022. The rule closed the performance-threshold workaround that NVIDIA had used to ship China-specific A800/H800 GPUs, replacing it with a "performance density" metric and adding a new "Notified Advanced Computing" licence category. It expanded controls on chipmaking equipment (additional ECCNs covering deposition, etch, metrology), pulled 21 additional countries (mostly Middle East / Central Asia) into a regional licensing scheme to prevent transshipment, and added 13 Chinese entities to the Entity List including AI-chip designers.

The Bureau of Industry and Security (BIS) added 49 entities under 52 entries to the Entity List, effective October 11, 2023. The bulk of additions — 42 of 49 — are Chinese entities determined to be acting contrary to US national security or foreign policy interests, predominantly for supplying US-origin integrated circuits to Russian defense-sector consignees after March 1, 2023 in violation of export controls. Remaining entities span Estonia, Finland, Germany, India, Turkey, UAE, and the United Kingdom and were designated on similar Russia-diversion or end-use violation grounds. All listed parties face a license requirement for all EAR-subject items, reviewed under a presumption of denial.