Industrial Policy & Trade Monitor· 2666 actions· ✨ 89 recent

BIS issued an Interim Final Rule (IFR) on 21 January 2026 (effective 20 January 2026) easing Export Administration Regulations (EAR) controls on certain civil unmanned aerial vehicles (UAVs) and related technology. The IFR makes two changes: (i) ECCN 9A012.a.1 commercial UAVs with maximum endurance under one hour can now be exported License-Free (NLR) to most Wassenaar Arrangement Participating States (Country Group A:1, excluding Malta, Russia, Ukraine), versus the prior limitation to UK / Australia / Canada only; and (ii) License Exception STA (Strategic Trade Authorization) is expanded to cover certain MT-controlled UAVs that cannot deliver a 500kg payload to 300+ km — including long-range cargo-delivery drones and ECCN 9A120 agricultural-spraying UAVs — for export to Country Group A:5 partners and allies. The IFR implements the export-promotion directive in §6 of EO 14307 (Unleashing American Drone Dominance, 6 June 2025). Comment period closes 19 February 2026.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) to add 32 entities to the Entity List, with the largest bloc — 23 entries — under the destination of China, plus India (1), Iran (1), Singapore (1), Taiwan (1), Turkey (3), and the United Arab Emirates (2). The rule also removed two addresses from one Russian entry (Intertech Rus LLC) and made 27 typographical corrections to existing entries. Several Chinese additions — including Shanghai Fudan Microelectronics, Sino IC Technology, GMC Semiconductor (Wuxi), and Chinese Academy of Sciences units (National Time Service Center; Aerospace Information Research Institute) — were given footnote 4 designations, extending the EAR's foreign-direct-product (FDP) reach to non-US-origin items destined for Russian military end use. Three Turkish entries (Atempo, EB Teknoloji, Dentun Elektronik) and one Indian entry (AR Sales Pvt Ltd) were footnote-3 Russian Procurement Entity designations. The rule is a final rule effective September 12, 2025; all listed parties are subject to a license requirement for all items subject to the EAR with a presumption-of-denial review policy.

The US Bureau of Industry and Security (BIS) amended the Export Administration Regulations to remove three foreign-owned semiconductor fabs operating in China — Intel Semiconductor (Dalian) Ltd, Samsung China Semiconductor Co. Ltd, and SK hynix Semiconductor (China) Ltd — from the Validated End-User (VEU) Authorizations list (15 CFR Part 748). BIS framed the VEU program as a "loophole" that previously allowed these fabs to receive most US-origin chipmaking equipment, software and technology license-free, a privilege no US-owned fab in China ever had. After the effective date, every restricted shipment to these fabs will require an individual export license, reviewed case-by-case under the existing 2022/2023 advanced- computing controls. The rule is published as Federal Register document 2025-16735 (90 FR 42321), Docket BIS-2025-0555, RIN 0694-AK32.

On 23 May 2025 the Bureau of Industry and Security notified major electronic design automation (EDA) suppliers — Cadence Design Systems, Synopsys, and Siemens EDA — by letter that a license is now required for any export, re-export, or in-country transfer of EDA software and technology classified under ECCNs 3D991 and 3E991 where a party to the transaction is located in China or is a Chinese "military end user" wherever located. BIS determined the shipments posed an unacceptable risk of diversion to Chinese military end use. The action was not published as a Federal Register rule; it surfaced publicly only through the affected companies' SEC 8-K disclosures. Synopsys suspended its FY2025 financial guidance in response. BIS rescinded the requirement effective 2 July 2025 (see amendments) amid the broader US-China trade truce, and the three vendors restored access for affected customers.

The US Bureau of Industry and Security amended the Export Administration Regulations to add 12 entities to the Entity List under the destinations of China (11) and Taiwan (1) via Final Rule 2025-05427 (90 FR 14046), companion to the larger 70-entity rule (2025-05426) published the same day. Targets fall in three clusters: (i) Beijing Academy of Artificial Intelligence and Beijing Innovation Wisdom Technology — added for acquiring US-origin items in support of China's military modernization, specifically developing large AI models and advanced computing chips for defense; (ii) the Inspur group — Inspur (Beijing) Electronic Information Industry, Inspur Electronic Information Industry, Inspur Electronic Information (Hong Kong), Inspur (HK) Electronics, Inspur Software, and Inspur Taiwan — added as subsidiaries contributing to supercomputers for military end use; and (iii) Henan Dingxin, Nettrix Information Industry, Suma Technology, and Suma-USI Electronics — added for involvement in the development of Chinese exascale supercomputers. License requirements are for all items subject to the EAR; review policy is presumption of denial for the AI cluster and policy of denial for the supercomputer clusters.

On 16 January 2025 the US Bureau of Industry and Security published an interim final rule (90 FR 4598; FR Doc 2025-00723) creating new ECCN 3A069 for high-parameter flow cytometers and liquid chromatography mass spectrometers specially designed for top-down proteomics, plus new ECCN 3E069 for related development and production technology. Items previously controlled under the catch-all ECCN 3A999 are migrated into the dedicated 3A069 classification, which carries National Security (NS), Regional Stability (RS), and Anti-Terrorism (AT) controls. Licensing policy is presumption of denial for destinations in Country Group D:1 and D:5, Macau, and Country Group E (i.e. China, Russia, Iran, North Korea, Cuba, Syria, Venezuela). The rule also adds new EEI/AES filing requirements (§ 758.1(b)(11)) for all 3A069 exports to Country Group D destinations. Public comments were accepted until 17 March 2025.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) by adding 11 entities under 11 entries to the Entity List, all listed under the destination of China, People's Republic of (China). The rule also revises one existing entry on the Entity List under the destination of India. BIS determined the added entities have been involved in, are involved in, or pose a significant risk of becoming involved in activities contrary to the national security or foreign policy interests of the United States. License requirements apply to all items subject to the EAR with a presumption-of-denial review policy. The rule was effective on publication, January 16, 2025. This action is the companion piece to the same-day 16-entity Sophgo-cluster addition (FR 2025-00480) — together totalling the "27 Chinese companies" referenced in trade-press coverage.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations by adding 8 entities to the Entity List under the destinations of Burma (2), China (2), and Russia (4), citing actions contrary to US foreign-policy interests, primarily enabling human-rights violations through aerial attacks on civilians (Burma), Uyghur surveillance (China), and facial-recognition targeting of protesters (Russia). All designated entities require licenses for all items subject to the EAR with a presumption of denial. The rule was effective immediately on publication, December 11, 2024.

Bureau of Industry and Security final rule (89 FR 84460, Doc 2024-24562) adding 26 entities to the Entity List across four destinations: six in China (aviation simulation for PLA modernisation; procurement for Iran WMD/UAV programs; evasive conduct), one in Egypt and three in the UAE (acquiring US civil aircraft parts for Russian buyers post-Ukraine invasion), and sixteen in Pakistan (nine front companies of Advanced Engineering Research Organization for Pakistan's cruise-missile and strategic-UAV programs, plus seven contributing to Pakistan's ballistic- missile program). The rule also removes two existing entries. All additions are licensed under a presumption-of-denial policy for all EAR-subject items.

In a final rule published at 89 FR 84766 (FR Doc 2024-23932), the US Bureau of Industry and Security (BIS) amends the Export Administration Regulations (EAR) to remove BIS licence requirements on certain spacecraft and related items — including remote-sensing spacecraft and on-orbit servicing, assembly, and manufacturing (OSAM) items — for exports and reexports to Australia, Canada, and the United Kingdom. The rule is effective immediately on publication (23 October 2024) and is part of a three-rule package modernising the US space-related export-control regime (companion IFR 2024-23958 broadens controls relief for ~40 additional destinations; companion proposed rule 2024-23975 floats a new License Exception Commercial Space Activities). The AU/CA/UK carve-out builds on the trilateral National Technology and Industrial Base (NTIB) framework.

The US Bureau of Industry and Security (BIS) published an interim final rule (89 FR 80064; FR doc 2024-22587) amending the Export Administration Regulations (15 CFR 748.15) to expand the Validated End User (VEU) program with a new "Data Center VEU Authorization" pathway. The rule lets BIS pre-authorize specified data-center operators in third countries to receive advanced computing integrated circuits (ECCNs 3A090, 4A090 and related) and related technology without individual export licenses, conditional on vetted security plans, end-use monitoring, and reporting. Country Group D:5 destinations — China, Russia, Iran, Belarus, Venezuela, Cuba and 17 other arms-embargoed states — are categorically excluded. Eligible destinations include Egypt, Laos, Moldova, Oman, Pakistan, Qatar, Saudi Arabia, Turkmenistan, and the UAE — extending the US chip-equipment perimeter into a managed trusted-data-center channel for Gulf, MENA, and Central Asian AI build-out.

The US Bureau of Industry and Security issued a final rule on 5 September 2024 (effective 6 September 2024, published in the Federal Register on the same day as 89 FR 73285) establishing multilateral export controls on four categories of emerging technologies: (1) quantum computing items including quantum computers, related cryogenic / control / measurement systems, and certain quantum software; (2) gate-all-around field-effect transistor (GAAFET) production technology — the next-node semiconductor architecture beyond FinFET; (3) advanced additive-manufacturing equipment for metals + alloys; (4) certain biotech-related items added in a parallel rule on 12 September 2024. The rule operates without country exceptions for some categories, with multilateral coordination via Wassenaar + Australia Group + Nuclear Suppliers Group frameworks.

The U.S. Bureau of Industry and Security (BIS) published a final rule expanding the scope of the Iran Foreign Direct Product (FDP) rule in the Export Administration Regulations (EAR) to implement the "No Technology for Terror Act" (Public Law 118-50, Division N), signed by President Biden on April 24, 2024. The expanded rule extends EAR jurisdiction to additional foreign-produced items destined for Iran — including a broader set of items derived from U.S.-origin technology or software, or produced by plants/components that are themselves direct products of U.S.-origin technology — and requires a BIS license for their export, reexport, or in-country transfer to Iran. The rule also provides specified exclusions from the otherwise-applicable license requirements. The rule became effective on July 23, 2024 (publication July 26, 2024).

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) by adding three Kaspersky entities to the Entity List under End-User Review Committee (ERC) determinations — AO Kaspersky Lab (Moscow), OOO Kaspersky Group (Moscow), and Kaspersky Labs Limited (London). All three are designated for cooperation with Russian military and intelligence authorities in support of Russian government cyber-intelligence objectives. Exports, reexports, and in-country transfers of all items subject to the EAR to the three entities now require a BIS licence reviewed under a policy of presumption of denial, with no licence exceptions available. The action is paired with a same-week Commerce ICTS final determination prohibiting Kaspersky cybersecurity and anti-virus software transactions in the United States.

The US Bureau of Industry and Security (BIS) final rule (89 FR 41706; FR Doc 2024-10485) added 37 entities under 37 entries to the Entity List, all listed under the destination of the People's Republic of China. BIS designated these parties for one or more of three rationales: (i) shipping US-controlled items to Russia in violation of EAR controls, (ii) attempting to acquire US-origin items to support China's military modernisation or quantum-technology capabilities, and (iii) ties to the PRC high-altitude balloon that overflew the United States in late January–early February 2023. The designations span PRC technology companies (predominantly quantum-computing firms), manufacturing companies, and research institutes. License requirement is "all items subject to the EAR" with a policy of presumption of denial and no license exceptions available. The rule is effective 2024-05-09, with publication in the Federal Register on 2024-05-14.

The Bureau of Industry and Security (BIS), within the U.S. Department of Commerce, published an interim final rule (FR Doc 2024-08813) on April 30, 2024 amending the Export Administration Regulations (EAR) to restructure export controls on firearms, ammunition, parts, accessories, and related technology and software (EAR Categories 0 and 1). The rule created new Export Control Classification Numbers (ECCNs) for semi-automatic firearms, added Crime Control / Detection (CC) license requirements, narrowed license-exception eligibility, introduced a presumption of denial for many non-government end-users, and imposed a default 1-year license validity for semi-automatic firearms. Effective May 30, 2024; later rescinded (except for the new ECCNs) by FR Doc 2025-18992 on September 30, 2025.

The US Bureau of Industry and Security (BIS) issued an interim final rule (IFR) amending the Export Administration Regulations (EAR) to remove list-based license requirements — including National Security Column 1 (NS1), Regional Stability Column 1 (RS1) and Missile Technology Column 1 (MT1) reasons-for-control — for exports, reexports and in-country transfers to or within Australia and the United Kingdom. The IFR also expands the availability of license exceptions and reduces the scope of end-use and end-user-based license requirements for the two AUKUS partners, while leaving firearms-related items (Crime Control / CC) and a narrow set of other ECCNs untouched. The rule is the EAR-side companion to a parallel DDTC proposed rule creating an ITAR §126.7 exemption for defense articles and services traded among authorised AU/UK/US users, and is the foundational regulatory implementation of the AUKUS Pillar 2 advanced-capability cooperation track.

The US Bureau of Industry and Security (BIS) final rule (89 FR 25503; FR Doc 2024-07760) added 11 entries to the Entity List under China (6), Russia (3), and the United Arab Emirates (2), effective 2024-04-11. The primary rationale for the Russia and UAE tranches — and at least one China entity (Shenzhen Jiasibo Technology) — is procurement of US-controlled dual-use aerospace and UAV components for Iran's Shahed- series UAV programme via the Iran Aircraft Manufacturing Industrial Company (HESA); those drones have been used against oil tankers in the Middle East and deployed by Russia in Ukraine. The remaining five China entities were designated for acquiring US-origin items to support China's military modernisation. The rule also adds one alias to the existing entry for Shanghai Biren Intelligent Technology Co., Ltd. This action was the first Entity List final rule published after BIS implemented the 50 Percent Rule for controlling foreign subsidiaries of listed entities.

BIS amends the Export Administration Regulations (EAR) to clarify controls on radiation hardened integrated circuits (rad-hard ICs) and equipment — including computer and telecommunications devices — that incorporate them. The rule affirms the availability of License Exception GOV for rad-hard ICs acquired pursuant to an official written request or directive from the Department of Defense or Department of Energy. It also expands License Exception GOV to cover microelectronics exports, reexports, and in-country transfers made under U.S. Government contracts that explicitly provide for such transactions, removing export-control obstacles for official government business. Published at 89 FR 18353–59 (FR Doc 2024-05267), effective on publication date.

Bureau of Industry and Security final rule (89 FR 14403, Doc 2024-03674) adding two entities under seven entries to the Entity List, effective February 27, 2024. Sandvine Incorporated, a Canadian deep packet inspection vendor, is listed across six destinations (Canada, India, Japan, Malaysia, Sweden, UAE) because it supplies DPI technology to the Government of Egypt where it is used for mass web-monitoring and censorship. Chengdu Beizhan Electronics Co., Ltd. is listed under China for acquiring and attempting to acquire U.S.-origin items on behalf of the University of Electronic Science and Technology of China (UESTC), a PLA-affiliated institution already on the Entity List. All items subject to the EAR require a license with a presumption-of-denial review policy for both entities. The rule also revises entries for two existing Chinese entities and removes one UAE entry.

BIS published a two-part final rule amending the Export Administration Regulations (EAR) for cameras, systems, and related components, effective March 8, 2024. Part one creates new ECCN 6A293 controlling ultra-high-speed cameras (minimum exposure time ≤1 microsecond AND throughput ≥13.43 Giga-pixels per second at 205,000 fps) for nuclear nonproliferation (NP) reasons with no License Exception STA eligibility, capturing instruments used in weapons-test diagnostics not previously covered by 6A003 or 6A203. Part two lifts military-end-user (MEU) restrictions on ECCNs 0A504, 6A002, 6A003, 6A993.a, and 8A002.d for Country Group A:1 destinations (32 closest US allies including EU member states, Canada, Japan, Australia, UK, and South Korea), aligning controls with commercial availability and established allied strategic relationships.

On 8 December 2023 the Bureau of Industry and Security (BIS) published a direct final rule (88 FR 85479; FR Doc 2023-26532) making two export-liberalisation amendments to the Export Administration Regulations (EAR). First, BIS removes Chemical and Biological Weapons (CB) proliferation column controls from the Commerce Country Chart for exports of certain pathogens and toxins (ECCNs 1C351, 1C353, and 1C354) when destined to Australia Group (AG) member countries, on the basis that AG members operate equivalent domestic CBW-export controls. Second, the rule revises the Crime Control and Detection (CC) column entries for Austria, Finland, Ireland, Liechtenstein, South Korea, Sweden, and Switzerland, reflecting the updated US assessment of those countries' law-enforcement export-control standards. Both changes are effective on publication and reduce US export-licensing burdens for allied-country destinations without altering controls for non-allied markets.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) to implement changes to the Missile Technology Control Regime (MTCR) Annex agreed at Technical Experts Meetings in 2018, 2019, and 2021, revising six ECCNs (1C111, 2A101, 2B119, 6A107, 9A101, and 9E515). The rule simultaneously expands license exception eligibility for MT-controlled items — adding one new authorization and broadening four existing exceptions — for exports to allies and partners not in Country Groups D:4 or D:5. BIS estimates the changes will reduce MT-related license applications by approximately 400 per year, easing compliance burden on defence and aerospace exporters dealing with allied governments.

BIS implements December 2022 Wassenaar Arrangement plenary decisions by amending Commerce Control List ECCNs 9A001, 9A003, 9E001, 9E002, and 9E003 via an interim final rule effective October 18, 2023. The rule moves technology for developing supersonic-capable aero gas turbine engine components from ECCN 9E001 to a new paragraph 9E003.k, preserving development-phase controls even after an engine obtains civil certification. BIS simultaneously extends to supersonic engines the civil-certification release from 9A001 to 9A991 already available for subsonic engines, and opens a 45-day public comment period (deadline December 4, 2023) on whether to restrict Strategic Trade Authorization eligibility for ECCN 9E003.k for certain Country Group A:5 partner-country destinations.

BIS published a final rule on August 18, 2023, amending the Export Administration Regulations (EAR) to implement decisions reached at the Nuclear Suppliers Group (NSG) plenary meetings in Nur-Sultan (June 2019) and Warsaw (June 2022). The rule revises five existing Export Control Classification Numbers (ECCNs) on the Commerce Control List (CCL) to align with multilateral commitments made by NSG participating governments. Changes include decontrolling water-hydrogen sulfide exchange tray columns from ECCN 1B22, clarifying isotope purification scope in ECCN 1B231, and updating mass-unit terminology in ECCN 3A233. The rule takes effect immediately upon publication.

Bureau of Industry and Security final rule (88 FR 46071, Doc 2023-15343) adding four entities to the Entity List effective July 18, 2023. Intellexa S.A. (Greece) and Intellexa Limited (Ireland) — the corporate architecture behind the "Predator" commercial spyware platform — and Cytrox Holdings Zrt. (Hungary) and Cytrox AD (North Macedonia) — the developer of the underlying spyware technology — were listed for "trafficking in cyber exploits used to gain access to information systems, thereby threatening the privacy and security of individuals and organizations worldwide." All items subject to the EAR require a license with a presumption-of-denial review policy for all four entities, effectively cutting off access to US-origin hardware, software, and technology.

The Bureau of Industry and Security (BIS) issued a final rule on 19 May 2023 strengthening existing Export Administration Regulations (EAR) sanctions against Russia and Belarus. The rule expands the Foreign Direct Product (FDP) rule — which applies EAR jurisdiction to foreign-made items produced with US technology or equipment — to cover the temporarily occupied Crimea region of Ukraine. It also revises controls targeting Iran's supply of unmanned aerial vehicles (UAVs) to Russia, closing loopholes identified in prior rounds of Russia-Ukraine-related export-control rulemaking.

The Bureau of Industry and Security (BIS) added 37 entities under 38 entries to the Entity List, effective March 2, 2023, spanning six destinations: China (28), Pakistan (4), Burma (3), Russia (1), Belarus (1), and Taiwan (1). The China tranche — the largest — targets entities supporting the People's Liberation Army's military modernization, including BGI Research and Forensic Genomics International (genomic surveillance/data risk), Inspur Group Co. Ltd. (cloud servers supplied to Chinese military), and Loongson Technology (domestic CPU developer). Three Burmese entities, including the Ministry of Transport and Communications, are designated for providing surveillance equipment enabling the military junta's tracking and targeting of civilians. Pakistani entities Abdul Razaq Asim, Add-On Technology, and Dynamic Engineers are added for contributing to Pakistan's ballistic missile programs; Russian DMT Electronics and Belarusian DMT Trading LLC for export-control evasion. All listed entities are subject to a license requirement for all items subject to the EAR, with the review policy being presumption of denial for the majority of Chinese entries.

The Bureau of Industry and Security (BIS) added 76 Russian entities to the Entity List effective February 24, 2023, spanning three rationale categories: (1) biometric surveillance technology enabling Russian filtration operations in occupied Ukraine; (2) illicit acquisition of U.S.-origin controlled items; and (3) the Russian military-industrial complex encompassing missiles, aviation, shipbuilding, semiconductors, telecom, and defense electronics. All 76 entities are subject to a license requirement for all EAR-subject items with a presumption of denial; 66 entities receive footnote-3 designation as Russian military end-users, subjecting them to the Russia/Belarus Military End-User Foreign Direct Product Rule under §734.9(g). Four existing Entity List entries were simultaneously revised with additional aliases and tightened to a policy of denial. Notable designations include KAMAZ, the Skolkovo Foundation, Skoltech, Ilyushin Aviation Complex, and the State Missile Center Named After Akademika V.P. Makeyev.

The Bureau of Industry and Security (BIS) added 10 entities under 13 destination entries to the Entity List, effective February 24, 2023. The additions span three groups: (1) five Chinese entities operating in the commercial satellite and dual-use space sector — most notably Spacety Co., Ltd. and China HEAD Aerospace Technology Co., both suspected of supplying satellite imagery and space technology in support of the Russian military in Ukraine; (2) two Canadian procurement intermediaries (CPUNTO Inc. and Electronic Network Inc.) facilitating illicit acquisition of US-origin controlled items; and (3) three Russian defense-industrial procurement companies supplying the Russian military. All listed entities are subject to a license requirement for all EAR-subject items with a policy of denial, except EAR99 food and medicine which receive case-by-case review.

The Bureau of Industry and Security (BIS) established a new Iran Foreign Direct Product (FDP) rule and created Supplement No. 7 to Part 746 of the EAR, effective 24 February 2023, to address Iran's supply of UAVs to Russia for use against Ukraine. The rule adds twelve HTS-6 codes covering UAV-relevant components — aircraft engines, processors, capacitors, memories, and radio navigation equipment — many of which are EAR99 items outside existing ECCNs, requiring a new licence for exports and reexports to Iran. Simultaneously, the rule expands the existing Russia/Belarus FDP rule to cover these same items, closing a gap where foreign-produced items derived from US technology could transit to Russia via Iran without triggering EAR licence requirements.

The US Bureau of Industry and Security (BIS) removed nine Russian persons from the Unverified List (UVL) and simultaneously added them to the Entity List after the Russian government failed to facilitate end-use checks for more than 60 days — the first application of BIS's October 2022 escalation policy. All nine entities are subject to a license requirement covering all items subject to the EAR, with a policy of denial and no license exceptions available. The list spans electronics traders, state maritime infrastructure, defense R&D, microelectronics, and industrial equipment manufacturers.

The Bureau of Industry and Security expanded EAR sanctions against Russia and Belarus effective 15 September 2022, adding new export-control categories covering quantum computing equipment and related technology (new licensing requirements under a near-total policy of denial), discrete chemicals and biologics including fentanyl precursors and CBW-related production equipment (new Supplement No. 6 to Part 746), and 57 EAR99 industrial items added to the industry-sector sanctions list (Supplement No. 4). Six entities were concurrently designated as Russian Military End Users (MEU), and MEU/MIEU licensing restrictions were extended worldwide (previously limited to six countries). The rule also extended the Foreign Direct Product Rule to additional categories of foreign-made items.

The U.S. Bureau of Industry and Security (BIS) added seven Chinese entities — under seven entries — to the Entity List, effective August 24, 2022, for acquiring or attempting to acquire U.S.-origin items in support of China's military modernization efforts. The entities span China's state-owned aerospace, space-technology, electronics, and control-systems research institutes. All seven entries carry a license requirement covering all items subject to the EAR, with a presumption-of-denial review policy.

The Bureau of Industry and Security (BIS) amended the Commerce Control List (CCL) under the Export Administration Regulations (EAR) to implement four emerging and foundational technology decisions agreed at the December 2021 Wassenaar Arrangement Plenary meeting, pursuant to ECRA Section 1758. The rule adds new export controls on ultra-wide bandgap semiconductor substrates (gallium oxide Ga₂O₃ and diamond), ECAD software for Gate-All- Around Field-Effect Transistor (GAAFET) integrated circuit development, and Pressure Gain Combustion (PGC) technology for advanced gas turbine engines. Controls require a licence for items destined to countries listed in the NS:1 and AT:1 columns of the Commerce Country Chart; ECAD software controls (ECCN 3D006) have a delayed compliance date of October 14, 2022.

The U.S. Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) by adding 36 entities under 41 entries to the Entity List, effective June 28, 2022. The entities — located across China, Lithuania, Pakistan, Russia, Singapore, the UAE, the United Kingdom, Uzbekistan, and Vietnam — were designated for acting contrary to U.S. national security or foreign policy interests. Key grounds include support for China's military modernization and AI-enabled surveillance programs, Pakistan-based proliferation concerns, and supply-chain facilitation for Russia amid the Ukraine invasion. The rule also revised eleven existing entries (Belarus, China, Russia, Slovakia) and corrected one entry (Pakistan).

BIS finalized changes to the Export Administration Regulations (EAR) governing controls on cybersecurity items — primarily intrusion software, command-and-control platforms, and surveillance tools capable of disrupting or monitoring information systems without authorization. The final rule, effective May 26 2022, revises License Exception ACE (Authorized Cybersecurity Exports) originally established by an October 2021 interim rule and narrows end-user carve-outs for government end users in Country Group D:5 and A:6 destinations. Exports of affected ECCNs (4A005, 4D001, 4D004, 4E001, 5A001.j, 5B001, 5D001, 5E001) to Country Groups E:1 and E:2 remain prohibited; D:1 through D:5 government-end-user transactions require a license.

BIS amended the Export Administration Regulations to add Iceland, Liechtenstein, Norway, and Switzerland to the list of countries excluded from certain EAR license requirements that apply to items destined for Russia or Belarus. The exclusion recognizes that these four countries have implemented substantially similar export-control regimes aligned with US restrictions, and applies specifically to the Foreign Direct Product (FDP) rule under EAR Part 734.9. The change reduces the licensing burden for entities in these partner countries when producing or handling items using US-origin technology or equipment in transactions with Russia/Belarus, consistent with the broader allied coordination approach adopted after February 2022.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) by adding 120 entities under 120 entries to the Entity List, effective 1 April 2022 and published in the Federal Register on 7 April 2022. All 120 entities — located in Russia and Belarus — were determined to be acting contrary to US national security or foreign policy interests in the context of Russia's further invasion of Ukraine beginning 24 February 2022. The rule imposes a presumption-of-denial policy for all EAR-subject items and prohibits all license exceptions for exports, reexports, or in-country transfers to the listed parties. Ninety-five of the 120 entities are additionally designated under Footnote 3 of the Entity List as military end users, triggering the Russian/Belarusian Military End User foreign-produced direct product rule (MEU FDP Rule), extending US extraterritorial reach to non-US items made with US-origin technology.

Effective 2 March 2022, the US Bureau of Industry and Security (BIS) extended to Belarus the same sweeping EAR sanctions imposed on Russia following Russia's full-scale invasion of Ukraine on 24 February 2022. The rule adds Commerce Control List (CCL)-based license requirements for Belarus with a policy of denial across virtually all categories, extends both the Russia Foreign Direct Product (FDP) rule and the Russia Military End User (MEU) FDP rule to cover Belarus and Belarusian military end users, and aligns Belarus with Russia's license review policy. The action was triggered by Belarus's active enablement of the Russian military operation from its territory.

Effective 24 February 2022 — the date of Russia's full-scale invasion of Ukraine — the US Bureau of Industry and Security (BIS) published an interim final rule (87 FR 12226, FR Doc 2022-04300) adding sweeping new export license requirements under a new § 746.8 of the Export Administration Regulations (EAR). The rule requires a licence for any item in CCL Categories 3–9 (electronics, computers, telecommunications, sensors, lasers, navigation/avionics, marine, aerospace, propulsion) exported, reexported, or transferred to Russia, with a review policy of denial. Two new Russia-specific Foreign Direct Product (FDP) rules extend US jurisdiction to foreign-manufactured goods: the Russia FDP Rule (§ 734.9(f)) covers all foreign-made items using US technology/equipment destined for Russia, and the Russia-MEU FDP Rule (§ 734.9(g)) covers items destined to 47 designated military-end-user (MEU) entities with no licence exceptions available. All three restrictions carry a presumption of denial, making this the most sweeping peacetime expansion of the EAR since its modern codification.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) on 8 February 2022 to add 33 persons — all based in China — to the Unverified List (UVL) under EAR §744.15(c), on the basis that BIS could not satisfactorily complete end-use checks for these entities for reasons outside US Government control. Placement on the UVL bars exporters from using any EAR license exception when shipping controlled items to listed parties and requires exporters to obtain a certified UVL Statement from the entity or secure a BIS export licence. Sectors represented include semiconductor manufacturing equipment, optoelectronics, UAVs, specialty chemicals, and biotechnology.

Effective 3 February 2022, the Bureau of Industry and Security published a final rule (87 FR 6231, FR Doc 2022-02302) consolidating all existing Foreign Direct Product (FDP) rules from scattered locations in EAR Parts 736 and 744 into a single new section, 15 CFR §734.9, under Part 734 (Scope of the EAR). The rule made no substantive changes to existing controls — it reorganised four pre-existing FDP rules (National Security, 9x515, 600 Series, and Entity List) into a clean §734.9(b)–(e) architecture, clarified the definition of "major component" at §734.9(a), and corrected a drafting ambiguity that had obscured the U.S.-origin technology trigger for three of the four rules. The newly created §734.9 structure became the vehicle used by BIS to add the Russia/Belarus FDP rule (§734.9(f)) just 21 days later, on 24 February 2022.

The US Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) by adding 37 entities under 40 entries to the Entity List, effective December 17, 2021. The additions span three distinct threat rationales: (1) support for Chinese military modernization across semiconductors, submarine cables, armored vehicles, and defense electronics; (2) the Academy of Military Medical Sciences and 11 affiliated institutes pursuing biotechnology processes for military end uses, including purported brain-control weaponry under EAR §744.11(b); and (3) a cross-border Iran sanctions-evasion network operating across China, Georgia, Malaysia, and Turkey that diverted US-origin items to Iran's defense industries and advanced conventional weapons programs. All 40 entries carry a presumption-of-denial licensing policy for all items subject to the EAR, with no license exceptions available.

The US Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) effective November 26, 2021, by adding 28 entries to the Entity List across China (12), Japan (1), Pakistan (13 including 2 individuals), Singapore (1), and Taiwan (1). Designations span three distinct threat clusters: (1) eight Chinese entities supporting military applications of quantum computing, including QuantumCTek Co. and the Hefei National Laboratory for Physical Sciences at Microscale; (2) approximately twelve Pakistani procurement entities and three Chinese suppliers facilitating Pakistan's unsafeguarded nuclear activities and ballistic missile program; and (3) the Corad Technology network across China, Japan, Singapore, and Taiwan that sold Western technology to Iran's military/space programs and North Korean front companies. Additionally, the Moscow Institute of Physics and Technology was added to the Military End-User (MEU) List for producing military products. All Entity List entries carry presumption-of-denial licensing policy with no exceptions available.

On November 4, 2021, BIS added four entities to the Entity List under a policy of denial: NSO Group and Candiru (Israel), Positive Technologies (Russia), and Computer Security Initiative Consultancy PTE (Singapore). NSO Group and Candiru were designated for supplying commercial spyware to foreign governments used to maliciously surveil government officials, journalists, activists, and academics; Positive Technologies and CSIC for trafficking cyber tools enabling unauthorized access to information systems. All four entities now require BIS licenses for any export, re-export, or in-country transfer of EAR-controlled items, with a presumption of denial.

BIS published an interim final rule on October 21, 2021 establishing new Export Control Classification Numbers (ECCNs 4A005, 4D004, 4E001.c, and 5A001.j) for intrusion software systems, command-and-control platforms, and IP network surveillance tools, implementing the Wassenaar Arrangement 2017 cybersecurity decisions into the Export Administration Regulations (EAR). The rule simultaneously created License Exception ACE (Authorized Cybersecurity Exports), codified at § 740.22, to authorize exports to most destinations while imposing licence requirements — or outright prohibitions — for sales to Country Groups E:1/E:2 governments and certain D-group government end-users. Carve-outs for vulnerability disclosure and cyber-incident-response activities were included to protect legitimate security research. The effective date was subsequently delayed from January 19, 2022 to March 7, 2022 by a separate interim rule (FR 2022-00448), and the rule was finalized with revisions on May 26, 2022 (FR 2022-11282).

BIS amends the Export Administration Regulations (EAR) to implement the decision adopted at the Australia Group (AG) Virtual Implementation Meeting of May 2021, creating new ECCN 2D352 to control software designed for nucleic acid assemblers and synthesizers (ECCN 2B352.j) that is capable of designing and building functional genetic elements from digital sequence data. The rule also amends ECCN 2E001 to capture technology for the development of 2D352-controlled software. Exports to most non-allied destinations require a BIS licence under CB Column 2 and AT Column 1, and the classification of 2D352 software as a critical technology triggers mandatory CFIUS filing requirements for qualifying foreign investment.

The Bureau of Industry and Security amended the Export Administration Regulations by adding six Russian technology entities to the Entity List, all designated consistent with Executive Order 14024 on blocking property associated with harmful foreign activities of the Russian government. The designated entities operate in Russia's technology sector and have been determined to support Russian intelligence services, including notable cybersecurity firms and defense-innovation institutions. All items subject to the EAR require a BIS licence for export, reexport, or transfer to these parties, subject to a presumption-of-denial review policy with no licence exceptions available. The rule also corrects an existing FSB entry to reference updated General Licence No. 1B.

The Bureau of Industry and Security amended the Export Administration Regulations by adding 34 entities under 43 entries to the Entity List, effective July 12, 2021. The largest cluster — 14 Chinese entities — comprises suppliers of surveillance infrastructure enabling the Chinese government's human-rights abuses in Xinjiang, including video analytics firms, network equipment makers, and geolocation platforms deployed in the Uyghur Region. Six Russian individuals and entities were added for participation in military procurement networks acquiring US-origin electronics and components in violation of the EAR. Additional listings cover Iran sanctions evaders (Canada, Lebanon), a UAE-based nuclear-proliferation facilitator, and one entity elevated from the Unverified List to the Entity List under China. All items subject to the EAR require a BIS licence to export, re-export, or transfer in-country to the listed parties, with a presumption-of-denial review policy.