Exporting Electronics: Export Controls and Licenses

Exporting electronics legally starts with one question: is the item controlled? Most consumer electronics are uncontrolled — designated EAR99 — and ship freely, but anything involving encryption, high-performance computing, sensors, or a possible military use can carry an Export Control Classification Number (ECCN) that requires a license for certain destinations or buyers. The risk is not that electronics are hard to ship; it is that an exporter assumes a part is harmless and ships a controlled item without the license it needed.

This guide walks the compliance path for electronics: classify the item, check where and to whom it is going, decide whether a license applies, and watch the two traps unique to technology — encryption and deemed exports.

Why electronics draw export controls

Electronics are controlled more often than most goods because so many are dual-use — designed for commercial markets but usable in weapons, surveillance, or military systems. U.S. export controls exist to keep sensitive technology away from hostile end users and prohibited destinations. That is why a circuit board, a sensor, or a piece of test equipment can be controlled even though it was built for a commercial customer.

Step 1: Classify the item

Everything downstream depends on classification. Determine the item’s ECCN on the Commerce Control List, or confirm it is EAR99. The ECCN — and the Reason for Control attached to it — is what tells you whether a license might be required for a given destination. Classify based on the item’s technical parameters, not its appearance, and document how you reached the answer. For the full method, see solving common challenges in export classification.

Defense electronics are a separate track. If a component is specially designed for a military application, it may fall under the International Traffic in Arms Regulations (ITAR) on the U.S. Munitions List, administered by the State Department’s Directorate of Defense Trade Controls — not the EAR. The two regimes do not overlap; an item is controlled under one or the other, and getting that threshold wrong is a common and serious error.

Step 2: Check the destination and the parties

A license requirement turns on four things together: the item, the destination, the end user, and the end use. Once you have the ECCN, cross-reference the Commerce Country Chart for the destination to see whether the control reason triggers a license there. Then screen every party — customer, end user, intermediaries — against the U.S. government’s Consolidated Screening List before shipping.

Two prohibitions catch electronics exporters even when the item itself is low-risk:

• End-user prohibitions. Even an EAR99 item needs a license — or cannot ship at all — if the buyer is on a restricted list or the destination is embargoed.
• End-use prohibitions. Items destined for certain military, nuclear, missile, or surveillance end uses require a license regardless of the ordinary classification.

Step 3: License or license exception

If the analysis says a license is required, you apply to BIS before exporting. In some cases a license exception lets you ship a controlled item without an individual license when specific conditions are met — but exceptions are narrow and condition-laden, and using one is a decision to document, not assume. When no license or exception is available for a destination, the item does not ship there.

The encryption trap

Encryption is the control most often missed in electronics. Hardware and software with cryptographic functionality fall under Category 5, Part 2 (Information Security) of the Commerce Control List, and the rules apply even to mass-market products with built-in encryption — phones, networking gear, software, IoT devices. The product being commercially available does not make it uncontrolled. Items with encryption can carry classification, reporting, or self-classification obligations that a general consumer-electronics analysis would miss entirely, so encryption functionality deserves its own check.

The deemed-export trap

An export is not only a shipment across a border. Releasing controlled technology or source code to a foreign national inside the United States — by giving them access to controlled technical data, for instance — is a deemed export to that person’s home country and can require a license just as a physical shipment would. Companies with foreign-national engineers or visitors handling controlled electronics technology have to manage this internally, not just at the loading dock.

Records and penalties

Keep the full transaction record — classification, screening, license determinations, and shipping documents — for five years, as the EAR requires. The reason to be disciplined is the downside: criminal violations under the Export Control Reform Act can reach up to 20 years in prison and $1 million per violation, and civil penalties, adjusted annually for inflation, exceed $370,000 per violation (or twice the transaction value) as of 2025. Building these checks into an export management and compliance program and testing them through compliance audits is how exporters keep the analysis consistent across thousands of shipments.

Frequently asked questions

Are most electronics actually controlled? No. Many consumer electronics are EAR99 and ship without a license. The point of classification is to find the ones that are controlled — especially anything with encryption, sensors, or a possible military use — before you ship.

My product is sold in stores everywhere — can it still need a license? Yes. Commercial availability does not make an item uncontrolled. Mass-market products with encryption fall under Category 5, Part 2 of the Commerce Control List and can carry their own obligations.

What is a deemed export? Releasing controlled technology or source code to a foreign national inside the U.S. counts as an export to that person’s home country and can require a license, even though nothing crossed a border.

EAR or ITAR — how do I know which applies? If the item is specially designed for a military application and appears on the U.S. Munitions List, it is ITAR (State/DDTC). Otherwise, dual-use and commercial electronics fall under the EAR (Commerce/BIS). Confirm the threshold before you classify further.

Exporting electronics and unsure what’s controlled? Reidel Law Firm delivers a flat-fee Import/Export Compliance Memo covering classification, encryption, screening, and licensing — with direct attorney access. Get a flat-fee compliance memo →