Industrial Policy & Trade Monitor· 2667 actions· ✨ 89 recent

In a final rule published in the Federal Register on 4 February 2026 (effective 3 February 2026), the Bureau of Industry and Security (BIS) deleted the "X" designation for Cambodia from Country Group D:5 of the Export Administration Regulations (EAR), removing Cambodia from the EAR's list of arms-embargoed destinations. The action conforms the EAR to a Department of State final rule of 7 November 2025, which removed Cambodia as an arms-embargoed destination under International Traffic in Arms Regulations (ITAR) §126.1. Cambodia remains designated in Country Group D:1 and remains subject to the military and military-intelligence end-use/end-user controls in EAR §§744.21 and 744.22.

The US Bureau of Industry and Security amended the Export Administration Regulations to add 12 entities to the Entity List under the destinations of China (11) and Taiwan (1) via Final Rule 2025-05427 (90 FR 14046), companion to the larger 70-entity rule (2025-05426) published the same day. Targets fall in three clusters: (i) Beijing Academy of Artificial Intelligence and Beijing Innovation Wisdom Technology — added for acquiring US-origin items in support of China's military modernization, specifically developing large AI models and advanced computing chips for defense; (ii) the Inspur group — Inspur (Beijing) Electronic Information Industry, Inspur Electronic Information Industry, Inspur Electronic Information (Hong Kong), Inspur (HK) Electronics, Inspur Software, and Inspur Taiwan — added as subsidiaries contributing to supercomputers for military end use; and (iii) Henan Dingxin, Nettrix Information Industry, Suma Technology, and Suma-USI Electronics — added for involvement in the development of Chinese exascale supercomputers. License requirements are for all items subject to the EAR; review policy is presumption of denial for the AI cluster and policy of denial for the supercomputer clusters.

The Bureau of Industry and Security signed an Interim Final Rule on 13 January 2025 (90 FR 4544, published 15 January 2025) introducing the first horizontal export-control regime for advanced AI compute and closed-weight model weights. It revised ECCN 3A090 advanced-IC thresholds, created a new ECCN 4E091 covering closed-weight model weights trained on more than 10^26 operations, and bucketed every destination worldwide into a three-tier country group: Tier 1 (~18 close allies, license-free flows), Tier 2 (the rest of the world, per-country compute caps with National VEU and Universal VEU pathways), Tier 3 (US arms-embargoed destinations including China and Russia under comprehensive denial). It added license exceptions AIA, ACM, and LPP and set staggered compliance dates of 15 May 2025 (general) and 15 January 2026 (data-center / model-weight provisions). The Trump administration's BIS rescinded the rule on 13 May 2025 — two days before the primary compliance date — but it was on the books for four months and shaped allied compliance build-out and the architecture of subsequent US AI export controls.

BIS final rule (FR Doc 2024-19132, 89 FR 68539, published 27 August 2024) expanding the Russia/Belarus-Military End User (MEU) Foreign-Direct Product (FDP) rule under the Export Administration Regulations so that it also applies to transactions involving Entity List entries posing a significant diversion risk to Russia's and Belarus's defense industry or intelligence services — the rule is renamed accordingly. The rule also imposes new export, reexport, and in-country transfer controls on software for the operation of computer numerical control (CNC) machine tools destined for Russia or Belarus, and makes corrections eliminating obsolete cross- references introduced by the BIS 25 January 2024 and 18 June 2024 Russia/Belarus final rules. Effective 27 August 2024, except amendatory instruction 11 effective 16 September 2024.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) by adding three Kaspersky entities to the Entity List under End-User Review Committee (ERC) determinations — AO Kaspersky Lab (Moscow), OOO Kaspersky Group (Moscow), and Kaspersky Labs Limited (London). All three are designated for cooperation with Russian military and intelligence authorities in support of Russian government cyber-intelligence objectives. Exports, reexports, and in-country transfers of all items subject to the EAR to the three entities now require a BIS licence reviewed under a policy of presumption of denial, with no licence exceptions available. The action is paired with a same-week Commerce ICTS final determination prohibiting Kaspersky cybersecurity and anti-virus software transactions in the United States.

The Bureau of Industry and Security (BIS) extended for a second time the temporary unilateral export control on software classified as ECCN 0D521 — "software specially designed for training a Deep Convolutional Neural Network to automate the analysis of geospatial imagery and point clouds" — adding a third year of control through January 6, 2023. The extension was required because COVID-19 prevented the Wassenaar Arrangement from formally convening in 2020 or holding sufficient deliberations in 2021 to consider the US multilateral control proposal submitted in 2020. Only License Exception GOV (§ 740.11(b)(2)(ii)) is available; all other exports require a specific license from BIS.

In a final rule effective December 9, 2021 (FR Doc 2021-26633), the Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) to add Cambodia to Country Group D:5 (US arms-embargoed destinations), consistent with a simultaneous Department of State final rule adding Cambodia to ITAR §126.1. The rule also subjects Cambodia to military end-use (MEU) controls under EAR §744.21 and military-intelligence end-use/end-user (MIEU) controls under EAR §744.22. The stated rationale was deepening Chinese military presence at Ream Naval Base, growing corruption, and human-rights abuses by the Cambodian government.

The Bureau of Industry and Security amended the Export Administration Regulations by adding six Russian technology entities to the Entity List, all designated consistent with Executive Order 14024 on blocking property associated with harmful foreign activities of the Russian government. The designated entities operate in Russia's technology sector and have been determined to support Russian intelligence services, including notable cybersecurity firms and defense-innovation institutions. All items subject to the EAR require a BIS licence for export, reexport, or transfer to these parties, subject to a presumption-of-denial review policy with no licence exceptions available. The rule also corrects an existing FSB entry to reference updated General Licence No. 1B.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) on April 9, 2021 to extend military-intelligence end-use and end-user controls to Burma (Myanmar) and to apply U.S.-person activity prohibitions to Burma's military-intelligence entities — specifically the Office of Chief of Military Security Affairs (OCMSA) and the Directorate of Signal. The rule also corrected technical errors introduced by BIS's January 15, 2021 interim final rule (FR Doc 2021-01879), which had originally established the military-intelligence end-use and end-user control framework covering China, Cuba, Iran, North Korea, Russia, Syria, and Venezuela. The addition of Burma responded directly to the February 1, 2021 SAC military coup and the Burmese military's use of surveillance technology to oppress civil society, restrict internet access, and imprison protesters.

The Bureau of Industry and Security (BIS) issued an interim final rule on January 15, 2021 substantially expanding the Export Administration Regulations (EAR) Part 744 end-use and end-user control framework to cover military-intelligence entities in China, Cuba, Iran, North Korea, Russia, Syria, and Venezuela. The rule created a new license requirement for exports of ANY EAR-subject item to named military-intelligence end-users — including EAR99-classified items — and separately imposed restrictions on U.S. persons worldwide providing "support" to military-intelligence end-uses or end-users without a BIS licence. It also broadened chemical and biological weapons controls from "will directly assist" to "will support," expanding the reach of §744.4 and §744.3 on WMD-delivery systems. A technical correction published March 17, 2021 (FR Doc 2021-05623) fixed a drafting error in Instruction 9 that would have inadvertently deleted §744.3(a)(3)(i)-(ii), the rocket systems and UAV provisions.

The Bureau of Industry and Security (BIS) extended for one year the temporary unilateral export control on software classified as ECCN 0D521 — "software specially designed for training a Deep Convolutional Neural Network to automate the analysis of geospatial imagery and point clouds" — adding a second year of control through January 6, 2022. The extension was required because COVID-19 prevented the Wassenaar Arrangement from formally convening in 2020 to consider the US multilateral control proposal submitted that year. Only License Exception GOV (§ 740.11(b)(2)(ii)) is available; all other exports require a specific licence from BIS.