How to Comply With U.S. Export Control Laws

Complying with U.S. export control laws comes down to four questions you answer before every shipment: what are you sending, where is it going, who will receive it, and how will they use it. Get those right and most exports move freely. Get them wrong — even unintentionally — and you risk fines, loss of export privileges, and criminal referral. This guide walks through the system the way an exporter actually meets it.

Know Which Agency Controls Your Export

The first compliance question is jurisdiction: U.S. export controls are split across three agencies, and your item usually falls under one of them. Matching the item to the right regime determines every rule that follows.

Most ordinary commercial products fall under the EAR, administered by the Bureau of Industry and Security (BIS). Military and defense-related items fall under the State Department’s ITAR. And any transaction — regardless of the item — can separately trigger OFAC sanctions if it touches a sanctioned country or party. A single shipment can implicate more than one regime at once.

Classify the Item

Once you know the regime, you classify the item. Under the EAR, classification means finding your product’s Export Control Classification Number (ECCN) on the Commerce Control List (CCL), which sorts controlled items into ten categories (from nuclear materials to propulsion systems) and tells you why each item is controlled.

If your item is subject to the EAR but does not match any ECCN, it is designated EAR99 — the catch-all that covers most low-tech commercial goods. EAR99 items generally ship without a license, unless the destination, end user, or end use is restricted. Defense articles, by contrast, are classified on the U.S. Munitions List under the ITAR.

Misclassification is the root of many violations. You can self-classify against the CCL, request a formal ruling (a CCATS) from BIS, or have a trade attorney confirm the analysis before you ship.

Screen Every Party to the Transaction

Classification tells you about the item; screening tells you about the people. U.S. law prohibits dealing with restricted parties regardless of what you are shipping. Before you ship, screen your customer, end user, freight forwarder, and any intermediaries against the government’s consolidated screening lists — including the BIS Entity List and OFAC’s Specially Designated Nationals (SDN) List.

Screening is not a one-time check. Lists change frequently, and ownership matters: under OFAC’s 50 Percent Rule, an entity owned 50% or more by blocked persons is itself blocked even if it is not named on any list. Treat a screening hit as a stop sign, not a speed bump.

Watch for Deemed Exports and End Use

Two traps catch exporters who think they only ship goods abroad. A deemed export occurs when controlled technology or source code is released to a foreign national inside the United States — sharing controlled technical data with a foreign-national employee can require a license just as an overseas shipment would. And end-use controls prohibit exports you have reason to believe will support, for example, weapons proliferation, even when the item and destination would otherwise be fine. When the facts look off, the “knowledge” standard means you cannot simply look away.

Get the License When You Need One

If classification and destination call for authorization, you apply for a license — through BIS for EAR items or DDTC for ITAR items — before the export. Some controlled exports qualify for a license exception, but exceptions are specific and conditional; read them narrowly. Shipping a controlled item without required authorization is a violation whether or not the goods ever reach a bad actor.

Build the Program That Holds It Together

Compliance is a routine, not a one-off. Exporters who handle controlled items put these habits in writing: classify every product, screen every party, document the analysis behind each decision, train the staff who touch exports, and keep records. A written risk-based compliance program turns scattered judgment calls into a repeatable process — and, if something does go wrong, it is the first thing regulators look for. The cost of skipping these steps is real: BIS can impose substantial civil penalties, refer cases for criminal prosecution, and issue a denial order stripping a company of its export privileges entirely.

Frequently Asked Questions

Does every export need a license? No. Most commercial items are EAR99 and ship without one. A license is generally required only when an item’s classification, destination, end user, or end use triggers a control.

What is the difference between the EAR and the ITAR? The EAR (administered by BIS) governs commercial and dual-use items; the ITAR (administered by the State Department’s DDTC) governs defense articles on the U.S. Munitions List. The first compliance step is deciding which one applies.

Can I be penalized for an honest mistake? Yes. Many export and sanctions violations are assessed on a strict-liability basis, meaning you can be liable even without intent to break the law. That is why classification, screening, and documentation matter so much.

What is a deemed export? Releasing controlled technology or technical data to a foreign national inside the United States, which can require a license just like a physical shipment abroad.

Not sure which export rules apply to your product? Reidel Law Firm prepares flat-fee Import/Export Compliance Memos that pin down your item’s classification, the agencies involved, and any licensing you need — with direct access to the trade attorney handling your matter. Get a flat-fee compliance memo →