Industrial Policy & Trade Monitor· 2666 actions· ✨ 89 recent

Commission Delegated Regulation (EU) 2023/66, adopted 21 October 2022 and published in the Official Journal on 11 January 2023 (OJ L 9), replaces Annex I of Regulation (EU) 2021/821 (the EU Dual-Use Recast Regulation) with an updated control list implementing the 2022 multilateral decisions of the Wassenaar Arrangement, MTCR, Australia Group, NSG and the Chemical Weapons Convention. Per GTA's tracking of the CN-code-level change, the update removed 7 six-digit CN codes and added 8 new ones. It entered into force on 12 January 2023, the day after publication.

The US Bureau of Industry and Security (BIS) removed nine Russian persons from the Unverified List (UVL) and simultaneously added them to the Entity List after the Russian government failed to facilitate end-use checks for more than 60 days — the first application of BIS's October 2022 escalation policy. All nine entities are subject to a license requirement covering all items subject to the EAR, with a policy of denial and no license exceptions available. The list spans electronics traders, state maritime infrastructure, defense R&D, microelectronics, and industrial equipment manufacturers.

The Bureau of Industry and Security expanded EAR sanctions against Russia and Belarus effective 15 September 2022, adding new export-control categories covering quantum computing equipment and related technology (new licensing requirements under a near-total policy of denial), discrete chemicals and biologics including fentanyl precursors and CBW-related production equipment (new Supplement No. 6 to Part 746), and 57 EAR99 industrial items added to the industry-sector sanctions list (Supplement No. 4). Six entities were concurrently designated as Russian Military End Users (MEU), and MEU/MIEU licensing restrictions were extended worldwide (previously limited to six countries). The rule also extended the Foreign Direct Product Rule to additional categories of foreign-made items.

The U.S. Bureau of Industry and Security (BIS) added seven Chinese entities — under seven entries — to the Entity List, effective August 24, 2022, for acquiring or attempting to acquire U.S.-origin items in support of China's military modernization efforts. The entities span China's state-owned aerospace, space-technology, electronics, and control-systems research institutes. All seven entries carry a license requirement covering all items subject to the EAR, with a presumption-of-denial review policy.

The Bureau of Industry and Security (BIS) amended the Commerce Control List (CCL) under the Export Administration Regulations (EAR) to implement four emerging and foundational technology decisions agreed at the December 2021 Wassenaar Arrangement Plenary meeting, pursuant to ECRA Section 1758. The rule adds new export controls on ultra-wide bandgap semiconductor substrates (gallium oxide Ga₂O₃ and diamond), ECAD software for Gate-All- Around Field-Effect Transistor (GAAFET) integrated circuit development, and Pressure Gain Combustion (PGC) technology for advanced gas turbine engines. Controls require a licence for items destined to countries listed in the NS:1 and AT:1 columns of the Commerce Country Chart; ECAD software controls (ECCN 3D006) have a delayed compliance date of October 14, 2022.

The U.S. Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) by adding 36 entities under 41 entries to the Entity List, effective June 28, 2022. The entities — located across China, Lithuania, Pakistan, Russia, Singapore, the UAE, the United Kingdom, Uzbekistan, and Vietnam — were designated for acting contrary to U.S. national security or foreign policy interests. Key grounds include support for China's military modernization and AI-enabled surveillance programs, Pakistan-based proliferation concerns, and supply-chain facilitation for Russia amid the Ukraine invasion. The rule also revised eleven existing entries (Belarus, China, Russia, Slovakia) and corrected one entry (Pakistan).

Canada amended the Special Economic Measures (Belarus) Regulations via SOR/2022-167, registered and in force 25 June 2022, adding four new schedules targeting Belarus over its support for Russia's invasion of Ukraine. Schedule 3 bans export of advanced technologies (quantum computers, advanced manufacturing and cryogenic equipment); Schedule 4 bans export of luxury goods (Part 1) and import of luxury goods from Belarus (Part 2); Schedule 5 bans export of goods usable in weapons manufacturing, including raw materials such as tungsten, aluminium and titanium, engines, industrial machinery, vehicles, aircraft and maritime vessels. The same instrument added 13 Belarusian officials and 2 state entities to the asset-freeze list.

BIS finalized changes to the Export Administration Regulations (EAR) governing controls on cybersecurity items — primarily intrusion software, command-and-control platforms, and surveillance tools capable of disrupting or monitoring information systems without authorization. The final rule, effective May 26 2022, revises License Exception ACE (Authorized Cybersecurity Exports) originally established by an October 2021 interim rule and narrows end-user carve-outs for government end users in Country Group D:5 and A:6 destinations. Exports of affected ECCNs (4A005, 4D001, 4D004, 4E001, 5A001.j, 5B001, 5D001, 5E001) to Country Groups E:1 and E:2 remain prohibited; D:1 through D:5 government-end-user transactions require a license.

BIS amended the Export Administration Regulations to add Iceland, Liechtenstein, Norway, and Switzerland to the list of countries excluded from certain EAR license requirements that apply to items destined for Russia or Belarus. The exclusion recognizes that these four countries have implemented substantially similar export-control regimes aligned with US restrictions, and applies specifically to the Foreign Direct Product (FDP) rule under EAR Part 734.9. The change reduces the licensing burden for entities in these partner countries when producing or handling items using US-origin technology or equipment in transactions with Russia/Belarus, consistent with the broader allied coordination approach adopted after February 2022.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) by adding 120 entities under 120 entries to the Entity List, effective 1 April 2022 and published in the Federal Register on 7 April 2022. All 120 entities — located in Russia and Belarus — were determined to be acting contrary to US national security or foreign policy interests in the context of Russia's further invasion of Ukraine beginning 24 February 2022. The rule imposes a presumption-of-denial policy for all EAR-subject items and prohibits all license exceptions for exports, reexports, or in-country transfers to the listed parties. Ninety-five of the 120 entities are additionally designated under Footnote 3 of the Entity List as military end users, triggering the Russian/Belarusian Military End User foreign-produced direct product rule (MEU FDP Rule), extending US extraterritorial reach to non-US items made with US-origin technology.

Canada amended the Special Economic Measures (Russia) Regulations via SOR/2022-067, registered and in force 24 March 2022, establishing a new "Restricted Goods and Technologies List" and prohibiting any person in Canada, and any Canadian outside Canada, from exporting, selling, supplying or shipping any listed good or technology to Russia or to any person in Russia. The list is maintained and published separately by Global Affairs Canada and covers items with dual civilian/military applications across electronics, computers, telecommunications, sensors and lasers, navigation and avionics, marine, aerospace and transportation equipment.

Effective 2 March 2022, the US Bureau of Industry and Security (BIS) extended to Belarus the same sweeping EAR sanctions imposed on Russia following Russia's full-scale invasion of Ukraine on 24 February 2022. The rule adds Commerce Control List (CCL)-based license requirements for Belarus with a policy of denial across virtually all categories, extends both the Russia Foreign Direct Product (FDP) rule and the Russia Military End User (MEU) FDP rule to cover Belarus and Belarusian military end users, and aligns Belarus with Russia's license review policy. The action was triggered by Belarus's active enablement of the Russian military operation from its territory.

On 25 February 2022, the day after Russia's full-scale invasion of Ukraine, the Council of the European Union adopted Regulation (EU) 2022/328, amending Regulation (EU) No 833/2014. It prohibits the sale, supply, transfer or export of dual-use goods and technology to any person, entity or body in Russia, or for military use or military end-users there, and extends to goods and technology suited for use in the oil refining industry and for the aviation and space industry, alongside a ban on related technical assistance, brokering, financing and insurance/maintenance services. The Regulation entered into force on the day after its Official Journal publication (OJ L 49, 25.2.2022), i.e. 26 February 2022.

Effective 24 February 2022 — the date of Russia's full-scale invasion of Ukraine — the US Bureau of Industry and Security (BIS) published an interim final rule (87 FR 12226, FR Doc 2022-04300) adding sweeping new export license requirements under a new § 746.8 of the Export Administration Regulations (EAR). The rule requires a licence for any item in CCL Categories 3–9 (electronics, computers, telecommunications, sensors, lasers, navigation/avionics, marine, aerospace, propulsion) exported, reexported, or transferred to Russia, with a review policy of denial. Two new Russia-specific Foreign Direct Product (FDP) rules extend US jurisdiction to foreign-manufactured goods: the Russia FDP Rule (§ 734.9(f)) covers all foreign-made items using US technology/equipment destined for Russia, and the Russia-MEU FDP Rule (§ 734.9(g)) covers items destined to 47 designated military-end-user (MEU) entities with no licence exceptions available. All three restrictions carry a presumption of denial, making this the most sweeping peacetime expansion of the EAR since its modern codification.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) on 8 February 2022 to add 33 persons — all based in China — to the Unverified List (UVL) under EAR §744.15(c), on the basis that BIS could not satisfactorily complete end-use checks for these entities for reasons outside US Government control. Placement on the UVL bars exporters from using any EAR license exception when shipping controlled items to listed parties and requires exporters to obtain a certified UVL Statement from the entity or secure a BIS export licence. Sectors represented include semiconductor manufacturing equipment, optoelectronics, UAVs, specialty chemicals, and biotechnology.

Effective 3 February 2022, the Bureau of Industry and Security published a final rule (87 FR 6231, FR Doc 2022-02302) consolidating all existing Foreign Direct Product (FDP) rules from scattered locations in EAR Parts 736 and 744 into a single new section, 15 CFR §734.9, under Part 734 (Scope of the EAR). The rule made no substantive changes to existing controls — it reorganised four pre-existing FDP rules (National Security, 9x515, 600 Series, and Entity List) into a clean §734.9(b)–(e) architecture, clarified the definition of "major component" at §734.9(a), and corrected a drafting ambiguity that had obscured the U.S.-origin technology trigger for three of the four rules. The newly created §734.9 structure became the vehicle used by BIS to add the Russia/Belarus FDP rule (§734.9(f)) just 21 days later, on 24 February 2022.

The US Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) by adding 37 entities under 40 entries to the Entity List, effective December 17, 2021. The additions span three distinct threat rationales: (1) support for Chinese military modernization across semiconductors, submarine cables, armored vehicles, and defense electronics; (2) the Academy of Military Medical Sciences and 11 affiliated institutes pursuing biotechnology processes for military end uses, including purported brain-control weaponry under EAR §744.11(b); and (3) a cross-border Iran sanctions-evasion network operating across China, Georgia, Malaysia, and Turkey that diverted US-origin items to Iran's defense industries and advanced conventional weapons programs. All 40 entries carry a presumption-of-denial licensing policy for all items subject to the EAR, with no license exceptions available.

The US Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) effective November 26, 2021, by adding 28 entries to the Entity List across China (12), Japan (1), Pakistan (13 including 2 individuals), Singapore (1), and Taiwan (1). Designations span three distinct threat clusters: (1) eight Chinese entities supporting military applications of quantum computing, including QuantumCTek Co. and the Hefei National Laboratory for Physical Sciences at Microscale; (2) approximately twelve Pakistani procurement entities and three Chinese suppliers facilitating Pakistan's unsafeguarded nuclear activities and ballistic missile program; and (3) the Corad Technology network across China, Japan, Singapore, and Taiwan that sold Western technology to Iran's military/space programs and North Korean front companies. Additionally, the Moscow Institute of Physics and Technology was added to the Military End-User (MEU) List for producing military products. All Entity List entries carry presumption-of-denial licensing policy with no exceptions available.

On November 4, 2021, BIS added four entities to the Entity List under a policy of denial: NSO Group and Candiru (Israel), Positive Technologies (Russia), and Computer Security Initiative Consultancy PTE (Singapore). NSO Group and Candiru were designated for supplying commercial spyware to foreign governments used to maliciously surveil government officials, journalists, activists, and academics; Positive Technologies and CSIC for trafficking cyber tools enabling unauthorized access to information systems. All four entities now require BIS licenses for any export, re-export, or in-country transfer of EAR-controlled items, with a presumption of denial.

BIS published an interim final rule on October 21, 2021 establishing new Export Control Classification Numbers (ECCNs 4A005, 4D004, 4E001.c, and 5A001.j) for intrusion software systems, command-and-control platforms, and IP network surveillance tools, implementing the Wassenaar Arrangement 2017 cybersecurity decisions into the Export Administration Regulations (EAR). The rule simultaneously created License Exception ACE (Authorized Cybersecurity Exports), codified at § 740.22, to authorize exports to most destinations while imposing licence requirements — or outright prohibitions — for sales to Country Groups E:1/E:2 governments and certain D-group government end-users. Carve-outs for vulnerability disclosure and cyber-incident-response activities were included to protect legitimate security research. The effective date was subsequently delayed from January 19, 2022 to March 7, 2022 by a separate interim rule (FR 2022-00448), and the rule was finalized with revisions on May 26, 2022 (FR 2022-11282).

BIS amends the Export Administration Regulations (EAR) to implement the decision adopted at the Australia Group (AG) Virtual Implementation Meeting of May 2021, creating new ECCN 2D352 to control software designed for nucleic acid assemblers and synthesizers (ECCN 2B352.j) that is capable of designing and building functional genetic elements from digital sequence data. The rule also amends ECCN 2E001 to capture technology for the development of 2D352-controlled software. Exports to most non-allied destinations require a BIS licence under CB Column 2 and AT Column 1, and the classification of 2D352 software as a critical technology triggers mandatory CFIUS filing requirements for qualifying foreign investment.

The Bureau of Industry and Security amended the Export Administration Regulations by adding six Russian technology entities to the Entity List, all designated consistent with Executive Order 14024 on blocking property associated with harmful foreign activities of the Russian government. The designated entities operate in Russia's technology sector and have been determined to support Russian intelligence services, including notable cybersecurity firms and defense-innovation institutions. All items subject to the EAR require a BIS licence for export, reexport, or transfer to these parties, subject to a presumption-of-denial review policy with no licence exceptions available. The rule also corrects an existing FSB entry to reference updated General Licence No. 1B.

The Bureau of Industry and Security amended the Export Administration Regulations by adding 34 entities under 43 entries to the Entity List, effective July 12, 2021. The largest cluster — 14 Chinese entities — comprises suppliers of surveillance infrastructure enabling the Chinese government's human-rights abuses in Xinjiang, including video analytics firms, network equipment makers, and geolocation platforms deployed in the Uyghur Region. Six Russian individuals and entities were added for participation in military procurement networks acquiring US-origin electronics and components in violation of the EAR. Additional listings cover Iran sanctions evaders (Canada, Lebanon), a UAE-based nuclear-proliferation facilitator, and one entity elevated from the Unverified List to the Entity List under China. All items subject to the EAR require a BIS licence to export, re-export, or transfer in-country to the listed parties, with a presumption-of-denial review policy.

The Bureau of Industry and Security (BIS) added eight entities to the Entity List — six based in Pakistan and two in the UAE — on grounds that they were acting contrary to US national security or foreign policy interests through involvement in proliferation to unsafeguarded nuclear activities. All EAR items destined for these entities require a license with a presumption of denial; no license exceptions are available. Separately, one China-based entity (Molecular Devices Shanghai Corporation) was removed from the Military End-User (MEU) List, and a second China MEU entry was renamed (Hutchison Optel Telecom Technology → Chongqing Optel Telecom Technology Co., Ltd.).

Regulation (EU) 2021/821, adopted 20 May 2021 and applied from 9 September 2021, establishes the Union regime for controlling exports, brokering, technical assistance, transit, and transfer of dual-use items, repealing Regulation (EC) No 428/2009. Annex I lists controlled items implementing internationally agreed dual-use controls under the Wassenaar Arrangement, MTCR, Australia Group, NSG, and Chemical Weapons Convention. The regulation introduces a new catch-all control on cyber-surveillance technologies that could facilitate human-rights violations (Art. 5 and Annex IV), and strengthens cooperation between Member States and the European Commission, placing specific obligations on exporters. It serves as the statutory anchor for all EU export licences, every multilateral-regime transposition into EU law, and coordination mechanisms with US BIS, UK ECJU, JP METI, and KR MOTIE export-control regimes.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) on April 9, 2021 to extend military-intelligence end-use and end-user controls to Burma (Myanmar) and to apply U.S.-person activity prohibitions to Burma's military-intelligence entities — specifically the Office of Chief of Military Security Affairs (OCMSA) and the Directorate of Signal. The rule also corrected technical errors introduced by BIS's January 15, 2021 interim final rule (FR Doc 2021-01879), which had originally established the military-intelligence end-use and end-user control framework covering China, Cuba, Iran, North Korea, Russia, Syria, and Venezuela. The addition of Burma responded directly to the February 1, 2021 SAC military coup and the Burmese military's use of surveillance technology to oppress civil society, restrict internet access, and imprison protesters.

The US Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) to remove Hong Kong as a separate, preferentially treated destination, effective December 23, 2020. Hong Kong is reclassified from Computer Tier 1 to Tier 3 and now subject to the same licence requirements, licence exceptions, and end-use restrictions that apply to mainland China. The rule implements Section 3 of Executive Order 13936 (July 14, 2020, "Hong Kong Normalization"), itself a response to China's imposition of the National Security Law on Hong Kong on June 30, 2020.

The Bureau of Industry and Security issued a correcting amendment to its September 11, 2020 Final Rule implementing Wassenaar Arrangement 2018 Plenary decisions, which had inadvertently introduced errors into six Export Control Classification Numbers (ECCNs) on the Commerce Control List (CCL). The correction revises memory-technology terminology in ECCN 3A001 from enumerated chip types (EEPROMs, flash, MRAMs) to the consolidated term "non-volatile memories" (with an added Technical Note), and removes a redundant "Mega Samples Per Second" label from ECCN 3A002 subparagraphs. Errors in ECCNs 3A991, 5A002, 7A005, and 9E003 are also rectified. No new export controls are introduced; the correction restores the policy intent of the parent rule and resolves ambiguities that could affect classification determinations.

The Bureau of Industry and Security (BIS) amended 15 CFR Part 742 to revise the license review policy for items controlled for National Security (NS) reasons destined to the People's Republic of China, the Russian Federation, and Venezuela. The rule shifts the evaluation standard from assessing contributions to "military capabilities" to whether the export will make a "material contribution to the development, production, maintenance, repair, or operation of weapons systems" of those countries. Venezuela is added to the pre-existing China/Russia NS review framework, and BIS codifies a presumption of approval for civil end-uses and a presumption of denial for weapons-system contributions, supplemented by an illustrative list of review factors to guide license applications.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) to establish new Export Control Classification Numbers (ECCNs) 0A977, 0D977, and 0E977 for water cannon systems designed for riot or crowd control, their software, and related technology. A Commerce Control List licence is now required for exports and reexports to most destinations worldwide, with NATO members and certain other close military allies exempt from the new requirement. The rule furthers US foreign policy interests by enabling human rights-based review of crowd-control equipment transfers globally.

BIS published an interim final rule on 5 October 2020 implementing multilateral export controls on six emerging technology categories agreed at the December 2019 Wassenaar Arrangement Plenary meeting, revising Commerce Control List ECCNs 2B001, 3D003, 3E004, 5A004, 5D001, and 9A004. The six technologies are: hybrid additive-manufacturing/CNC machine tools; computational lithography software for extreme-ultraviolet (EUV) mask fabrication; wafer-finishing technology for 5 nm-node production; digital forensics tools that circumvent device authentication to extract raw data; software for monitoring and analysis of communications acquired from a handover interface; and sub-orbital craft. As the first of two US implementing actions for the 2019 Wassenaar Plenary, this rule elevated nascent commercial technologies into permanent CCL classifications enforceable against all non-EAR99 destinations.

The US Bureau of Industry and Security (BIS) added 47 entities across 51 entries to the EAR Entity List effective 22 September 2020, covering entities in China, Hong Kong, Iran, Pakistan, Canada, Malaysia, Oman, Thailand, Turkey, the UAE, and the UK. All 47 entities were determined to be acting contrary to US national security or foreign policy interests. For 39 of the 47 entities BIS imposed a license requirement for all EAR-subject items with a presumption-of-denial review policy; the remaining eight face case-by-case review. The round targeted Iranian dual-use procurement networks, Chinese military-affiliated research institutes, and Pakistan-linked proliferators, reinforcing the layered export-control perimeter across multiple adversary programs simultaneously.

The Bureau of Industry and Security issued a final rule on September 11, 2020 amending the Export Administration Regulations (EAR) and Commerce Control List (CCL) to implement the remaining decisions adopted at the Wassenaar Arrangement December 2018 Plenary meeting, covering 28 ECCNs revised across Categories 1–3 and 5–9 and one new ECCN (6B002) added. The rule harmonises US dual-use export controls with the 41 other WA participating states, tightening or clarifying controls on semiconductors, sensors/lasers, navigation/avionics, marine equipment, aerospace propulsion, and information-security items. An earlier May 2019 rule had already implemented five emerging-technology decisions from the same 2018 Plenary; this rule covers the residual set of decisions not addressed at that time.

The Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) by adding sixty entities under sixty-one entries to the Entity List (Supplement No. 4 to Part 744), effective August 27, 2020. The designated entities, spanning China, Hong Kong, France, Indonesia, Malaysia, Oman, Pakistan, Russia, Switzerland, and the UAE, were found to be acting contrary to US national security or foreign policy interests. The rule also revised five existing entries under Canada, Germany, Hong Kong, Iran, and the UAE.

The Export Control Reform Act of 2018 (ECRA, Subtitle B Part I of Pub. L. 115-232, the John S. McCain National Defense Authorization Act for FY2019, signed 13 August 2018 by President Trump, codified at 50 U.S.C. §§ 4801–4852) provides permanent statutory authority for the Export Administration Regulations (EAR), replacing the long-lapsed Export Administration Act of 1979 and resolving a decades-long gap in which the EAR operated on emergency authority alone. ECRA is the foundational parent statute of the modern US dual-use export-control regime: it authorises the Commerce Control List, the Entity List, the Unverified List, the Military End-User (MEU) List, the Foreign Direct Product Rule (FDPR), the emerging-and-foundational technology control framework (§1758), and BIS enforcement and civil/criminal penalty authority — the entire regulatory toolkit under which every BIS-administered export-control action filed in the IPTM register derives its legal authority. ECRA also codified ongoing US participation in the multilateral export-control regimes (Wassenaar, NSG, MTCR, Australia Group) and created the interagency Technology Alert List process.