1. Understanding the Export Administration Regulations Framework
The EAR, administered by the Commerce Department's Bureau of Industry and Security (BIS), controls items classified on the Commerce Control List (CCL) and imposes licensing requirements, record-keeping obligations, and screening duties on exporters. The regulations operate on a principle of deemed export, meaning that disclosure of controlled technical data to a foreign national inside the United States can trigger licensing requirements even if no physical shipment occurs. Our firm's analysis of Export Administration Regulations practices helps corporations understand when items cross from unrestricted to controlled status and what that classification means for their supply chain.
Corporations must determine whether an item is subject to EAR by consulting the CCL, the General Prohibitions, and country-specific restrictions. Items can be classified by type, electronics, software, encryption, end-use (military, nuclear, sensitive surveillance), or destination (embargoed countries, denied parties).
The Commerce Control List and Item Classification
The CCL organizes controlled items into ten categories: systems and equipment, materials processing, electronics, computers, telecommunications, sensors, navigation and avionics, marine technology, aerospace, and miscellaneous items. Each entry specifies control parameters and identifies the reason for control (national security, foreign policy, nonproliferation). Misclassification can expose a corporation to liability even if the exporter acted in good faith, because the regulations impose a duty to make reasonable inquiry and maintain accurate classification records.
Deemed Exports and Technical Data Disclosure
A deemed export occurs when a U.S. .erson discloses controlled technical data or source code to a foreign national, whether orally, in writing, or by inspection. This rule applies even if the disclosure happens at a U.S. .ffice, trade show, or conference call. Corporations with foreign national employees, contractors, or business partners must implement access controls and consider whether a deemed export license is required before sharing product specifications, manufacturing processes, or software architecture. Failure to manage deemed exports is a frequent enforcement focus because it is easy to overlook and difficult to detect after the fact.
2. Licensing Requirements and Exceptions
Most controlled items require a license from BIS before export or re-export unless a license exception applies. License exceptions are regulatory pathways that permit shipment of certain items without advance approval, subject to compliance conditions such as end-use statements, deemed export controls, or destination restrictions. Corporations must apply for a license when no exception is available, a process that typically takes 20 to 30 days, but can extend longer if BIS requests additional information or refers the application to another agency for interagency review.
| License Exception Type | Typical Use Case | Key Requirement |
|---|---|---|
| Temporary Imports and Exports (TMP) | Equipment for repair, demonstration, or testing | Return or re-export within one year |
| Governments (GOV) | Shipments to U.S. .nd certain foreign governments | End-user must be authorized government entity |
| Encryption Items (ENC) | Certain encryption products and components | NSA and BIS notification required |
| Technology and Software Unrestricted (TSU) | General-purpose software in public domain | Item must meet public domain definition |
Applying for a license requires preparation of accurate end-use statements, identification of the foreign consignee and end-user, and certification that the transaction does not violate any General Prohibition. BIS maintains a Denied Parties List, Entity List, and Unverified List; screening against these lists is a non-negotiable compliance step before any export or deemed export. Corporations that fail to screen face strict liability, meaning the exporter's lack of knowledge does not excuse the violation.
Denied Parties Screening and End-User Verification
Before each transaction, a corporation must verify that the foreign consignee, end-user, and any known intermediate parties are not on the Denied Parties List, the Entity List, or the Unverified List. Screening is performed using BIS's online search tool or third-party compliance software, and corporations must document the screening result in their export records. If an entity appears on any list, export is prohibited unless BIS grants a specific license exception or waiver.
End-user verification becomes critical when a foreign buyer is unknown or when the transaction involves a distributor or broker. Corporations may conduct a pre-license check with BIS to confirm whether an entity is eligible to receive controlled items. This step is optional but prudent when the buyer's legitimacy is uncertain.
3. Compliance Obligations and Record-Keeping
The EAR impose strict record-keeping and reporting requirements on exporters. Corporations must maintain export records for five years, including the license or license exception used, the description and quantity of items exported, the destination and end-user, the date of export, and any technical data or deemed exports associated with the transaction. Records must be retrievable within two business days of a BIS request, and failure to produce them can result in penalties and obstruction charges independent of the underlying export violation.
Corporations must also file Automated Export System (AES) entries for all exports subject to the Export Administration Regulations, unless an exemption applies. The AES filing serves as the official export declaration and is cross-checked against BIS databases to identify potential violations.
Internal Compliance Programs and Audit Readiness
BIS expects corporations to maintain an internal compliance program that includes written export policies, employee training, and a system for classifying items and screening transactions. A robust program demonstrates corporate intent to comply and can mitigate penalties if a violation occurs. Corporations should conduct periodic internal audits to identify gaps in classification, licensing, or record-keeping and correct them before BIS discovers them. Corporations headquartered or operating in New York may be subject to BIS compliance audits conducted at their place of business. New York federal courts have recognized that corporations cannot rely on informal assurances from customers or freight forwarders to satisfy EAR screening obligations, meaning that direct verification and documentation are essential defensive postures if a violation is alleged.
4. Enforcement, Penalties, and Defense Considerations
BIS enforces the EAR through civil and criminal penalties. Civil violations can result in fines up to $300,000 per violation or twice the value of the items exported, whichever is greater, plus denial of export privileges. Criminal violations carry penalties of up to $1 million and 20 years imprisonment for individuals. Knowing violations and violations involving national security items or embargoed countries trigger heightened penalties and potential referral to the Department of Justice for prosecution.
A corporation facing an EAR enforcement action should immediately engage counsel and conduct an internal investigation to identify the scope of potential violations and any mitigating factors. Cooperation with BIS, disclosure of violations, and remedial measures can result in reduced penalties under BIS's enforcement guidelines.
Administrative Proceedings and Settlement Options
If BIS issues a charging letter alleging violations, the corporation has a right to an administrative hearing before an administrative law judge. The hearing is an informal proceeding in which BIS must prove the violation by a preponderance of the evidence, and the corporation can present evidence and cross-examine BIS witnesses. Many cases settle before hearing through negotiated penalty agreements, which can include reduced fines, denial of export privileges for a limited period, or commitments to enhanced compliance programs.
- Preserve all communications regarding the transaction, including emails, purchase orders, and technical specifications
- Identify any third-party intermediaries, freight forwarders, or consultants involved in the transaction
- Document the corporation's classification methodology and any outside opinions obtained
- Review the corporation's export policies and training records to establish a compliance culture
- Consult with counsel before responding to any BIS inquiry or voluntary disclosure
Our firm advises corporations on EAR compliance strategy, internal audit preparation, and defense postures in enforcement matters. Early identification of potential violations and proactive remediation can significantly reduce exposure. Corporations should evaluate their export control posture by reviewing recent transactions to identify items that may be misclassified, foreign nationals with access to controlled technical data, and gaps in deemed export controls. Long-term compliance requires ongoing training of employees who handle exports, regular updates to classification procedures as product specifications evolve, and coordination with foreign subsidiaries and joint ventures to ensure consistent application of the regulations.
26 May, 2026
