Industrial Policy & Trade Monitor· 2666 actions· ✨ 90 recent

The US Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) by adding 37 entities under 40 entries to the Entity List, effective December 17, 2021. The additions span three distinct threat rationales: (1) support for Chinese military modernization across semiconductors, submarine cables, armored vehicles, and defense electronics; (2) the Academy of Military Medical Sciences and 11 affiliated institutes pursuing biotechnology processes for military end uses, including purported brain-control weaponry under EAR §744.11(b); and (3) a cross-border Iran sanctions-evasion network operating across China, Georgia, Malaysia, and Turkey that diverted US-origin items to Iran's defense industries and advanced conventional weapons programs. All 40 entries carry a presumption-of-denial licensing policy for all items subject to the EAR, with no license exceptions available.

The US Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) effective November 26, 2021, by adding 28 entries to the Entity List across China (12), Japan (1), Pakistan (13 including 2 individuals), Singapore (1), and Taiwan (1). Designations span three distinct threat clusters: (1) eight Chinese entities supporting military applications of quantum computing, including QuantumCTek Co. and the Hefei National Laboratory for Physical Sciences at Microscale; (2) approximately twelve Pakistani procurement entities and three Chinese suppliers facilitating Pakistan's unsafeguarded nuclear activities and ballistic missile program; and (3) the Corad Technology network across China, Japan, Singapore, and Taiwan that sold Western technology to Iran's military/space programs and North Korean front companies. Additionally, the Moscow Institute of Physics and Technology was added to the Military End-User (MEU) List for producing military products. All Entity List entries carry presumption-of-denial licensing policy with no exceptions available.

Regulation (EU) 2021/821, adopted 20 May 2021 and applied from 9 September 2021, establishes the Union regime for controlling exports, brokering, technical assistance, transit, and transfer of dual-use items, repealing Regulation (EC) No 428/2009. Annex I lists controlled items implementing internationally agreed dual-use controls under the Wassenaar Arrangement, MTCR, Australia Group, NSG, and Chemical Weapons Convention. The regulation introduces a new catch-all control on cyber-surveillance technologies that could facilitate human-rights violations (Art. 5 and Annex IV), and strengthens cooperation between Member States and the European Commission, placing specific obligations on exporters. It serves as the statutory anchor for all EU export licences, every multilateral-regime transposition into EU law, and coordination mechanisms with US BIS, UK ECJU, JP METI, and KR MOTIE export-control regimes.

The U.S. Bureau of Industry and Security (BIS) added seven Chinese supercomputing entities to the Entity List, imposing a license requirement covering all items subject to the Export Administration Regulations (EAR) with a presumption of denial. The entities were designated for procuring and building supercomputers used by China's military actors, supporting China's military modernization, and aiding the development of weapons of mass destruction (WMD) and hypersonic weapons programs. This was the Biden administration's first Entity List action targeting China's supercomputing sector.

BIS amended the Commerce Control List (CCL) under the Export Administration Regulations (EAR) to implement decisions agreed at the December 2019 Wassenaar Arrangement Plenary meeting, revising 22 ECCNs across nine CCL categories — including nuclear and conventional arms-related items, materials, manufacturing equipment, semiconductors, laser/sensor systems, and aerospace. The rule harmonises US controls with those of Wassenaar Participating States, maintaining competitive parity among allied exporters while preserving national-security licensing for non-partner destinations. Separately, the rule eliminated email notification and self-classification reporting obligations for most mass-market encryption products and publicly available encryption source code, reducing associated compliance submissions by an estimated 60–80%.