Industrial Policy & Trade Monitor· 2666 actions· ✨ 90 recent

The Bureau of Industry and Security added 36 entities — 35 in China, 1 in Japan — to the Entity List under a presumption of denial for all EAR-controlled items, effective December 16, 2022. The most consequential additions are Yangtze Memory Technologies (YMTC, simultaneously removed from the Unverified List), eight Cambricon AI-chip subsidiaries, and Shanghai Micro Electronics Equipment (SMEE), China's sole domestic lithography producer. Three existing entries were revised: CETC 13 and two affiliates gained a Footnote 3 Russian-military-end-user designation, bringing them under the Russia/Belarus Foreign Direct Product rule with a blanket denial policy.

The U.S. Bureau of Industry and Security (BIS) amended the Export Administration Regulations (EAR) by adding 36 entities under 41 entries to the Entity List, effective June 28, 2022. The entities — located across China, Lithuania, Pakistan, Russia, Singapore, the UAE, the United Kingdom, Uzbekistan, and Vietnam — were designated for acting contrary to U.S. national security or foreign policy interests. Key grounds include support for China's military modernization and AI-enabled surveillance programs, Pakistan-based proliferation concerns, and supply-chain facilitation for Russia amid the Ukraine invasion. The rule also revised eleven existing entries (Belarus, China, Russia, Slovakia) and corrected one entry (Pakistan).

BIS finalized changes to the Export Administration Regulations (EAR) governing controls on cybersecurity items — primarily intrusion software, command-and-control platforms, and surveillance tools capable of disrupting or monitoring information systems without authorization. The final rule, effective May 26 2022, revises License Exception ACE (Authorized Cybersecurity Exports) originally established by an October 2021 interim rule and narrows end-user carve-outs for government end users in Country Group D:5 and A:6 destinations. Exports of affected ECCNs (4A005, 4D001, 4D004, 4E001, 5A001.j, 5B001, 5D001, 5E001) to Country Groups E:1 and E:2 remain prohibited; D:1 through D:5 government-end-user transactions require a license.

On 16 March 2022 the Swiss Federal Council adopted a total revision of the Ordinance on Measures against Belarus (SR 946.231.116.9), aligning Switzerland's autonomous sanctions with the EU's Belarus regime. It bans imports of Belarusian petroleum products, potassium chloride ("potash"), wood, iron and steel, and cement and rubber products; bans exports of goods used to manufacture or process tobacco products, weapons, surveillance equipment, and goods usable for Belarus's military or security development; and imposes financial sanctions including a ban on public financing for trade with or investment in Belarus, restrictions on securities/loans/ deposits, a prohibition on transactions with the National Bank of the Republic of Belarus, and exclusion of listed Belarusian banks from SWIFT. The ordinance entered into force on the day it was adopted.

OFAC codified the Chinese Military-Industrial Complex Sanctions Regulations at 31 CFR Part 586, implementing Executive Order 13959 (November 12, 2020) as amended by Executive Order 14032 (June 3, 2021). The regulations prohibit US persons from purchasing or selling publicly traded securities of entities designated on OFAC's Non-SDN Chinese Military-Industrial Complex Companies (NS-CMIC) List, which identifies firms determined to support the People's Liberation Army or Chinese surveillance-technology programs. A divestment deadline of June 3, 2022 applied to entities named in the original EO 13959 annexes; future additions carry a one-year divestment window from the date of designation.

BIS published an interim rule on January 12, 2022 delaying the effective date of its October 21, 2021 cybersecurity items interim final rule by 45 days, from January 19, 2022 to March 7, 2022. The underlying October 2021 rule establishes new Export Control Classification Numbers (ECCNs) for cybersecurity items — including intrusion software, command-and-control platforms, and surveillance tools — and introduces License Exception ACE (Authorized Cybersecurity Exports) for national security and anti-terrorism purposes. The delay was granted after twelve public comments highlighted significant compliance challenges, with BIS acknowledging the need for additional time for industry to update procedures and for BIS to issue supplemental guidance before the controls took effect.