Export control compliance: dual-use items, end use and the catch-all

Where the control lists come from

Control lists originate in multilateral export control regimes, whose participating states agree the technical parameters for items with military or proliferation potential, and are then implemented in national or regional law. The European Union does this through a dual-use regulation that sets a common list and common authorisation types across member states, with national provisions layered on top. Military items sit under separate national controls. Because the lists are technical, classification against them is an engineering exercise as much as a legal one. The parameters describe performance thresholds, materials, accuracy, frequency and similar characteristics, and the correct answer usually requires the product specification rather than a marketing description.

Classification is the exporter's job

The exporter determines whether an item is listed, using the technical specification, and records the reasoning and the outcome. A finding that an item is not controlled is as important to document as a finding that it is, because it is the evidence that a check was performed rather than skipped. Software and technology deserve particular attention: controls apply to intangible transfers such as sending files, granting remote access to a controlled design or providing technical assistance, and those transfers frequently occur without anyone thinking of them as exports. The engineering team emailing a drawing is often the highest-risk export channel a company has, and it is rarely covered by a shipping process.

The catch-all: unlisted items can still be controlled

Even where an item is not listed, an authorisation requirement can arise where the exporter is informed by the competent authority, or is aware or has grounds for suspecting, that the item is or may be intended for a prohibited end use, such as a weapons of mass destruction programme, a military end use in an embargoed destination, or certain other sensitive applications. This is what turns end use and end user screening into a legal obligation rather than a commercial courtesy. It also means that ignoring available information is not a defence, which is why staff should record what a customer said about intended use, and why unanswered end use questions are a reason to pause rather than a formality to complete.

Authorisations, and choosing the right one

Where an authorisation is required, regimes generally offer a range: general authorisations that a qualifying exporter may use for defined items and destinations subject to registration and conditions, global authorisations covering multiple items or customers for a single exporter, and individual authorisations for a specific transaction. Each carries conditions, reporting duties and record-keeping obligations, and using a general authorisation without meeting its conditions is treated as exporting without one. Re-export and transit add further complexity, since goods may be subject to the controls of more than one jurisdiction depending on origin, content and the technology embedded in them. Contracts should therefore address whether the buyer may re-export, and to whom.

Programme, records and the logistics interface

An internal compliance programme is expected in many regimes and, in some, is a condition of using the more convenient authorisation types. Typical components are senior responsibility, written procedures, item classification records, screening of parties and end uses, physical and access security for controlled technology, training, audits, and record retention for the period the law prescribes. For forwarders the interface is narrower but real. Acting on an exporter's declaration is normal, yet a provider that knows an authorisation is missing, or that helps mis-describe goods, has its own exposure. A written statement from the exporter about control status, plus a policy of escalating obvious inconsistencies, is the appropriate control. Requirements differ by jurisdiction, so obtain specialist advice for the specific items and destinations.

Frequently asked questions

Is emailing a technical drawing abroad an export?

Under dual-use rules, intangible transfers of controlled software and technology, including electronic transmission, remote access and technical assistance, can require authorisation in the same way as a physical shipment. Engineering and support channels therefore need to be inside the compliance programme.

Our product is not on the control list. Are we clear?

Not automatically. Catch-all provisions can create an authorisation requirement where the exporter is informed, or is aware or has grounds to suspect, that the item is intended for a prohibited end use. Documenting the end use enquiry is therefore part of the check.

What is the forwarder's responsibility?

Ordinarily the exporter classifies and obtains any authorisation, and the forwarder acts on that. A provider that knows an authorisation is absent, or that participates in a misleading description, can nonetheless face its own exposure under national law.