EU-2025-ENFORCEMENT-STATS-2024Europäische KommissionEuropäische Union
EU-wide sanctions enforcement statistics 2024
Europe secured 118 enforcement actions in 2024 vs 52 in US. Total European fines EUR 88.5M vs EUR 56.8M US. Germany launched 1,400+ investigations since 2022 with 176+ cases still open. Latvia reported 247 administrative penalties and 600+ criminal investigations. Poland issued 42 financial penalties since 2022.
Zitierte ECNs:Keine spezifische ECN
Wichtige Feststellungen (4)
Europe outpaced US in enforcement actions (118 vs 52) and fines (EUR 88.5M vs 56.8M) - reversing historical US dominance
Germany alone has 1,400+ investigations since 2022 - unprecedented enforcement scale in EU's largest dual-use exporter
Baltic states are enforcement frontlines - Latvia's 600+ criminal investigations reflect proximity to Russia
EU enforcement shifting from administrative to criminal - prison sentences increasingly common
EU-2025-500-SERIES-DELEGATED-ACTEuropäische KommissionEuropäische Union
The EU updated its dual-use control list through Delegated Regulation, adding new entries including 4A506 for quantum computers, expanded controls on additive manufacturing equipment, and additional semiconductor manufacturing controls. The update implements agreed changes from the Wassenaar Arrangement 2024 plenary plus EU-autonomous controls.
4A506 (quantum computers) is an EU-autonomous 500-series control - not based on Wassenaar consensus, demonstrating EU willingness to act unilaterally on emerging technologies
Annual Annex I updates mean exporters must verify classification annually - a product classified as NLR in 2024 may become controlled in 2025
EU-autonomous controls (500-series) may not be mirrored by other Wassenaar members - creates asymmetric control landscape requiring multi-jurisdiction compliance assessment
EU-2025-ANNUAL-REPORT-2024Europäische KommissionEuropäische Union
EU annual report on dual-use export controls 2024
EU Commission annual report on dual-use export controls for 2024. Key statistics: 42,000+ license applications across EU, 1,800+ denials (4.3% denial rate). Top categories: Cat 5 (28%), Cat 3 (19%), Cat 6 (15%), Cat 1 (12%). Russia sanctions drove a 40% increase in license applications. 12 Member States reported catch-all denials under Article 4.
Zitierte ECNs:Keine spezifische ECN
Wichtige Feststellungen (5)
Category 5 (telecommunications/crypto) remains the most licensed category across the EU
Russia-related controls increased total EU license applications by 40% compared to pre-2022 levels
Catch-all denials (Article 4) were reported by 12 Member States, primarily for items destined for Russia, China, and Iran
Intangible technology transfers accounted for 18% of all license applications, up from 8% in 2020
EU-wide denial consultation mechanism prevented 340+ conflicting decisions between Member States
WA-2025-ADDITIVE-MANUFACTURINGEuropäische KommissionEuropäische Union
Additive manufacturing / 3D printing
EU Commission guidance on export control classification of additive manufacturing (3D printing) equipment. Metal 3D printers using powder bed fusion (SLM/DMLS) or directed energy deposition may be controlled under 1B001 or 2B001 depending on the materials they process and the precision they achieve. The metal powders themselves may be controlled under 1C002.
Metal 3D printers processing controlled alloys (titanium, nickel superalloys, maraging steel) require material assessment under 1C002
High-precision metal AM equipment (< 50 µm layer thickness, < 100 µm feature resolution) may meet 2B001 thresholds
1B001 may apply to AM equipment specifically designed for producing items controlled elsewhere in Annex I
Polymer 3D printers are generally NOT controlled unless producing controlled materials (e.g., 1C008 polyimides)
Technology (CAD files, build parameters) for producing controlled items via AM is controlled as 'technology required for production' under the relevant E-entry
EU-2025-ANNUAL-REPORTEuropäische KommissionEuropäische Union
All dual-use categories (statistical report)
European Commission published first annual report under the revised Dual-Use Regulation covering 2022-2023. EU member states authorized 57.3 billion euros in dual-use exports and denied 831 export applications worth 0.98 billion euros. Top categories by value were nuclear equipment (21%), information security/crypto (20%), and industrial machinery (9%).
Zitierte ECNs:Keine spezifische ECN
Wichtige Feststellungen (3)
831 denials worth nearly 1 billion euros demonstrates active EU-wide export control enforcement - denials represent 0.04% of total dual-use trade
Information security and crypto items represent 20% of authorized trade by value - Category 5 Part 2 is the second largest dual-use export category
Top destinations for authorized exports are US (24%), China (19%), UK (7%) - China as second-largest destination despite being primary restriction target reflects volume of non-controlled trade
EU-2025-FIRST-ANNUAL-REPORTEuropäische KommissionEuropäische Union
First EU consolidated dual-use statistics (2022 data)
First annual report under Regulation 2021/821: EUR 57.3 billion in authorized dual-use exports (2% of extra-EU goods exports, up 49% from EUR 38.5B in 2021). 831 denials. Individual and global licenses accounted for 82% of trade value despite EUGEAs being more numerous.
Zitierte ECNs:Keine spezifische ECN
Wichtige Feststellungen (4)
EUR 57.3 billion in dual-use exports - 49% increase over 2021 driven by Russia sanctions forcing more items through licensing
831 denials across EU provides baseline for measuring enforcement consistency across single market
Individual and global licenses account for 82% of trade value - high-value exports require case-by-case review
Dual-use exports represent only 2% of extra-EU trade but disproportionate security significance
WA-2024-PLENARYEuropäische KommissionEuropäische Union
All Wassenaar-controlled items (multilateral update)
The 2024 Wassenaar Arrangement plenary agreed new controls on sub-orbital vehicles, advanced gate-all-around semiconductor technology, additive manufacturing for superalloy components, and updates to information security items. Changes will be transposed into national and EU control lists during 2025 through delegated regulations.
Zitierte ECNs:Keine spezifische ECN
Wichtige Feststellungen (3)
Wassenaar updates occur annually at December plenary - new controls agreed here flow into EU Annex I updates within 6-12 months via delegated acts
Sub-orbital vehicles (space tourism/launch) added as newly controlled items - reflects militarization concerns about commercial space technology
Gate-all-around (GAA) transistor technology controls indicate Wassenaar keeps pace with semiconductor manufacturing evolution - each new process node may trigger new controls
WA-2024-EMERGING-TECHEuropäische KommissionEuropäische Union
Emerging technologies assessment
EU Dual-Use Coordination Group assessment of emerging technologies for potential Annex I inclusion. Technologies under review: advanced semiconductor architectures (chiplets, 3D stacking), neuromorphic computing, advanced materials (metamaterials, 2D materials), synthetic biology tools, and advanced surveillance AI. The assessment follows Article 4(3)-(5) of Regulation 2021/821 allowing autonomous EU controls.
Zitierte ECNs:Keine spezifische ECN
Wichtige Feststellungen (5)
Chiplet/3D-stacking semiconductor architectures may circumvent existing 3A001 die-level controls
Neuromorphic computing chips may require new 4A003 performance metrics (beyond FLOPS)
Metamaterials with electromagnetic properties not found in nature may warrant new Category 1 or 6 entries
Synthetic biology tools (gene synthesis, CRISPR) are being assessed for Category 1 (biological) controls
AI-powered surveillance capabilities (facial recognition, predictive policing) are being assessed for Article 5 cyber-surveillance catch-all
EU-2024-ARTICLE5-DUE-DILIGENCEEuropäische KommissionEuropäische Union
EU published detailed guidelines requiring exporters to conduct human rights due diligence before exporting cyber-surveillance items, including IP interception systems, intrusion software, monitoring centers, and lawful intercept equipment. The guidelines specify that exporters must assess risk of items being used for internal repression, even when items are not listed in Annex I.
Due diligence obligation extends to non-listed items - any technology with surveillance capability requires human rights risk assessment regardless of Annex I classification
Exporters must consider the human rights record of the destination country, the identity and activities of the end-user, and any credible evidence of misuse
Article 5 creates an affirmative obligation - exporters cannot claim ignorance of human rights risks and must actively investigate before exporting
EU-2024-DELEGATED-ACTEuropäische KommissionEuropäische Union
All Annex I items (regulatory update)
Commission Delegated Regulation 2024/2547 updated Annex I of the EU Dual-Use Regulation, implementing changes agreed at the 2023 Wassenaar Arrangement plenary plus EU-autonomous additions. The update added 4A506 for quantum computers and expanded controls on semiconductor manufacturing equipment, entering into force 20 days after Official Journal publication.
Delegated Act mechanism allows Annex I updates without full legislative procedure - faster implementation of Wassenaar changes and autonomous EU decisions
4A506 is a 500-series entry (EU autonomous) - not agreed at Wassenaar, demonstrating EU willingness to impose unilateral technology controls
Exporters have only 20 days from Official Journal publication to implementation - compliance systems must monitor EU legislation proactively to avoid inadvertent violations
EU-2024-CYBER-GUIDELINESEuropäische KommissionEuropäische Union
Cyber-surveillance items (guidelines)
The European Commission published guidelines on export of cyber-surveillance items under Article 5 of Regulation 2021/821, requiring exporters to conduct human rights due diligence before exporting items that could be used for internal repression. The guidelines cover intrusion software (4A005/4D004), telecom interception systems (5A001.f), internet surveillance (5A001.j), and forensic tools (5A004.b).
Article 5 catch-all applies even when items are NOT listed in Annex I - exporters must self-assess human rights risks for any cyber-surveillance capable technology
Specially designed means covert surveillance must have been the main purpose of development - dual-intent tools (vulnerability scanners, DPI) create classification ambiguity
Member states play vital enforcement role - the Commission provides guidelines but national authorities determine licensing decisions and prosecutions
EU-2024-ADDITIVE-MANUFACTURINGEuropäische KommissionEuropäische Union
Metal additive manufacturing (3D printing) equipment
EU member states began applying catch-all controls to advanced metal additive manufacturing equipment capable of producing aerospace and defense components, even when the specific equipment models were not listed in Annex I. The controls targeted powder bed fusion and directed energy deposition systems with precision capabilities exceeding certain thresholds.
Additive manufacturing for metal components is an emerging dual-use concern - equipment not yet in Annex I can still be caught under Article 4 catch-all provisions
Precision thresholds for 3D printing (layer thickness, dimensional accuracy, build volume) are analogous to traditional machine tool controls (2B001) - same logic applies
Catch-all assessment for additive manufacturing considers end-use capability (can it produce missile components, nuclear parts) rather than commercial classification
EU-2024-CLOUD-COMPUTING-GUIDANCEEuropäische KommissionEuropäische Union
Cloud computing and SaaS export control guidance
EU Commission guidance on export control implications of cloud computing. Providing access to high-performance computing (HPC) resources via cloud constitutes a 'technology transfer' when the computing capability exceeds 4A003 thresholds. Cloud-based encryption services may require authorization under Category 5 Part 2.
Granting cloud access to HPC resources exceeding 4A003 APP thresholds to foreign nationals constitutes a controlled technology transfer
The location of the cloud infrastructure matters - providing access from an EU-based server to a non-EU end-user is an 'export'
Cloud-based encryption services (SaaS) are subject to 5D002 controls when the encryption exceeds Note 3 mass-market thresholds
IaaS providers hosting controlled technology must implement access controls to prevent unauthorized deemed exports
The 'deemed export' concept: providing access to controlled technology to a non-EU national within the EU is subject to intra-EU transfer controls
EU-2024-CATCH-ALL-GUIDANCEEuropäische KommissionEuropäische Union
Catch-all mechanism (Articles 4 and 5) guidance
EU Commission published comprehensive guidance on the catch-all mechanism under Articles 4 and 5 of Regulation 2021/821. Key clarification: exporters have an autonomous obligation to assess whether non-listed items might contribute to WMD proliferation (Art 4) or cyber-surveillance repression (Art 5), independent of any government notification.
Zitierte ECNs:Keine spezifische ECN
Wichtige Feststellungen (5)
Article 4 catch-all applies to ANY item (not just Annex I) when the exporter knows or has been informed the item is or may be intended for WMD end-use
Article 5 catch-all specifically targets cyber-surveillance items that could be used for internal repression or human rights violations
Exporters have an autonomous due diligence obligation - they cannot rely solely on the absence of government notification
Red flags triggering catch-all assessment include: unusual destination, military end-user, refusal to state end-use, cash payment, unusual routing
The catch-all mechanism does not apply to items exported to EU001 (Annex IIa) destinations for Article 4 purposes
EU-2024-DIRECTIVE-2024-1226Europäische KommissionEuropäische Union
EU-wide sanctions criminalization directive
EU adopted Directive 2024/1226 establishing minimum criminal offense standards and penalties for EU sanctions violations. Member States must transpose by May 2025. Criminalizes sanctions evasion, circumvention, and facilitation across all 27 Member States. Minimum 5-year maximum imprisonment for most serious offenses.
Zitierte ECNs:Keine spezifische ECN
Wichtige Feststellungen (5)
Mandatory transposition by May 2025 means all 27 EU member states must have criminal sanctions for export control violations
Minimum 5-year maximum imprisonment harmonizes penalties - previously ranged from administrative fines to prison across Member States
Circumvention and facilitation are explicitly criminalized - not just direct violations
Corporate criminal liability required - companies can be prosecuted, not just individuals
Germany transposed January 2026; Italy December 2025 - implementation timelines vary but enforcement convergence accelerating
US-EU-2024-TTC-EXPORTEuropäische KommissionEuropäische Union
All dual-use items (policy coordination)
The US-EU Trade and Technology Council (TTC) Working Group on Export Controls continued coordinating multilateral approaches to emerging technology controls, with focus on quantum computing, advanced semiconductors, and AI-related items. The TTC serves as the primary US-EU coordination mechanism for aligning export control policies outside the Wassenaar Arrangement.
Zitierte ECNs:Keine spezifische ECN
Wichtige Feststellungen (3)
TTC supplements Wassenaar as coordination mechanism - allows bilateral US-EU alignment on technology controls that may not achieve Wassenaar consensus
Coordination on emerging technologies (quantum, AI, biotech) pre-figures future Wassenaar additions - items discussed in TTC often appear in subsequent Wassenaar plenaries
TTC export control coordination directly influenced Netherlands' semiconductor controls and EU's quantum computing classification - demonstrating real policy impact
EU-2024-ANNEX-IV-INTRAEEUEuropäische KommissionEuropäische Union
Most sensitive dual-use items (Annex IV intra-EU controls)
The EU maintained Annex IV controls requiring authorization for intra-EU transfers of the most sensitive dual-use items, including nuclear reactor equipment (0A001), enrichment equipment (0B001), stealth technology, and certain encryption items (5A002.b). Unlike standard Annex I items which move freely within the EU single market, Annex IV items require licenses even between EU member states.
Annex IV is the exception to EU single market free movement - 45 of the most sensitive items require intra-EU transfer authorization
Nuclear and stealth technology make up the majority of Annex IV items - these are considered so sensitive that even EU internal transfers must be monitored
5A002.b (certain non-mass-market encryption) is on Annex IV - meaning intra-EU transfers of bespoke encryption equipment require licensing, unlike mass-market crypto which moves freely
EU-2024-WHITEPAPEREuropäische KommissionEuropäische Union
Export control policy (White Paper)
The European Commission published a White Paper on enhancing EU export control enforcement, proposing stronger coordination between member state authorities, harmonized penalties, improved information sharing, and enhanced end-use monitoring. The paper identified gaps in enforcement of cyber-surveillance controls under Article 5.
Zitierte ECNs:Keine spezifische ECN
Wichtige Feststellungen (3)
Enforcement gaps exist between EU member states - penalties for identical violations vary significantly across jurisdictions
Article 5 cyber-surveillance catch-all has been underutilized since its introduction - member states lack common criteria for applying the provision
Proposed enhanced end-use monitoring would require exporters to conduct post-shipment verification for sensitive destinations - shifting compliance burden from licensing to ongoing monitoring
GUIDE-CAT0-NUCLEAREuropäische KommissionEuropäische Union
Category 0 classification guide: Nuclear materials and equipment
Category 0 controls nuclear materials, facilities, and equipment. Key principle: many Category 0 items are controlled BY DEFINITION - meaning any quantity of the listed material is controlled (e.g., 0C001 depleted uranium, 0C002 thorium). Nuclear-specific equipment (0B001) has detailed sub-entries covering enrichment, reprocessing, and heavy water production.
0C001 controls ALL forms of depleted uranium - metal, alloys, compounds, concentrates. No quantity threshold.
0C002 controls ALL thorium - metal, alloys, thorium oxide. No purity threshold.
0B001 sub-entries cover specific enrichment technologies: gas centrifuge, electromagnetic, gaseous diffusion, laser, chemical exchange
0C004 controls special fissile materials (Pu-239, U-233) in ANY quantity
Category 0 items are almost always NSG (Nuclear Suppliers Group) origin - numbered 0x201-0x299
Technology (0E001) for development/production of Category 0 items is controlled even without the physical item
GUIDE-CAT1-MATERIALSEuropäische KommissionEuropäische Union
Category 1 classification guide: Materials
Category 1 controls special materials including advanced composites, ceramics, metals, alloys, and chemicals. Chemical/biological items (1C350, 1C351) are controlled BY NAME - presence on the list means control regardless of quantity. Advanced materials (1C002, 1C008, 1C010) have specific performance thresholds (tensile strength, glass transition temperature, specific modulus).
1C350 chemicals and 1C351 biological agents are controlled BY NAME - any quantity of listed substances requires authorization
1C002 controls metal alloys (aluminum, titanium, nickel) based on specific tensile strength and elongation thresholds
1C008 controls polymers (polyimides, PEEK) based on glass transition temperature (Tg) thresholds
1C010 controls fibrous and filamentary materials based on specific modulus and specific tensile strength
Carbon fiber is one of the most commonly classified Category 1 items - T700-equivalent and above is generally controlled
CAS numbers in 1C350 entries provide definitive identification - always verify CAS number, not just chemical name
GUIDE-CAT2-MACHININGEuropäische KommissionEuropäische Union
Category 2 classification guide: Machine tools and materials processing
Category 2 controls machine tools and materials processing equipment. The key threshold for CNC machine tools (2B001) is positioning accuracy of rotary axes combined with multi-axis contouring capability. Isostatic presses (2B004), dimensional inspection machines (2B006), and robots (2B007) have separate thresholds.
3A002 ADC thresholds: 10-bit resolution with > 1.0 GSPS sample rate, or 12-bit with > 1.0 GSPS, etc. (resolution-sample rate matrix)
3B001 semiconductor manufacturing equipment: lithography, etching, deposition, ion implantation equipment with specific performance thresholds
Consumer electronics (smartphones, consumer PCs) generally incorporate controlled components BUT the finished product is typically NOT controlled under 3A001
FPGA classification depends on logic gate density, encryption capability, and maximum operating frequency
Russia-specific sanctions add additional controls on 3A991 items below Annex I thresholds
GUIDE-CAT5-CRYPTOEuropäische KommissionEuropäische Union
Category 5 classification guide: Telecom and Information Security
Category 5 has two parts: Part 1 (Telecommunications) and Part 2 (Information Security). Part 2 (5A002/5D002) is the most frequently classified category in the EU. Key: any item with encryption exceeding 56-bit symmetric key length is prima facie controlled under 5A002. The mass-market exemption (Note 3) decontrols most consumer products.
5A002 controls: symmetric encryption > 56 bits, asymmetric encryption based on factoring > 512 bits, elliptic curve > 112 bits
Note 3 (mass market) decontrols items that are: (a) generally available to the public at retail, AND (b) cryptographic functionality cannot easily be changed by the user
5A003 controls non-cryptographic information security: TEMPEST/EMSEC equipment, cable security devices
5A004 controls items designed to defeat information security: cryptanalytic devices, TEMPEST surveillance, jammer devices
5A001.f/j controls lawful intercept and network surveillance equipment - key entries for Article 5 cyber-surveillance catch-all
Open-source encryption software (e.g., OpenSSL) is exempt under the General Technology Note (public domain)
VPNs, HTTPS, TLS in commercial products: almost always decontrolled via Note 3
HSMs, key management systems, and bespoke crypto for government: usually controlled, Note 3 does NOT apply
GUIDE-CAT6-SENSORSEuropäische KommissionEuropäische Union
Category 6 classification guide: Sensors and Lasers
Category 6 controls sensors, lasers, and related equipment. This category has the most complex threshold analysis because sensor performance depends on multiple interrelated parameters (resolution, sensitivity, frame rate, wavelength, cooling type). Thermal cameras (6A003), lasers (6A005), and acoustic sensors (6A001) are the most commonly classified items.
6A003 thermal camera thresholds depend on detector type: cooled detectors have lower (stricter) thresholds than uncooled
6A003 uncooled cameras: NETD < 50 mK OR frame rate > 9 Hz triggers control
6A005 laser thresholds vary by type: CW power, pulse energy, pulse duration, wavelength, and beam quality
6A001 acoustic sensors: operating depth, frequency range, and sensitivity determine control
6A002 optical sensors: focal plane arrays with specific pixel count, NETD, and wavelength range
Consumer thermal cameras (FLIR ONE, Seek Thermal) are typically NOT controlled - NETD and frame rate are below thresholds
Industrial lasers for cutting/welding may exceed power thresholds but application-specific exceptions may apply
GUIDE-CAT7-NAVIGATIONEuropäische KommissionEuropäische Union
Category 7 classification guide: Navigation and Avionics
Category 7 controls navigation and avionics systems. Inertial navigation systems (INS) are the most commonly classified items, with 7A003 setting thresholds based on gyro drift rate, accelerometer bias, and overall navigation accuracy. GPS receivers are generally NOT controlled unless integrated with INS for military-grade accuracy.
7A003 controls INS/IMU with heading accuracy or True North determination below specified thresholds
Gyro drift rate < 0.5 degrees/hour typically triggers 7A003 control
Accelerometer bias stability < 130 micro-g triggers 7A003 control
MEMS-based consumer IMUs (smartphones, consumer drones) are typically NOT controlled - their drift rates are well above thresholds
GPS-aided INS (GPS/INS) must be assessed on the INS performance WITHOUT GPS aiding - GPS masking attack scenario
7A005 controls satellite navigation anti-jam equipment and military GPS receivers
GUIDE-CAT9-AEROSPACEEuropäische KommissionEuropäische Union
Category 9 classification guide: Aerospace and Propulsion
Category 9 controls aerospace and propulsion systems. Gas turbine engines (9A001) are controlled based on thrust-to-weight ratio and specific fuel consumption. UAVs (9A012) are controlled when capable of range exceeding 300 km. Sounding rockets and space launch vehicles (9A004) have separate controls. MTCR-origin entries (9A1xx) have stricter thresholds for missile-capable systems.
9A001 gas turbine engines: thrust-to-weight ratio and specific fuel consumption determine control status
9A012 UAV threshold: 300 km range with autonomous flight capability - most commercial drones are well below this
9A004 controls sounding rockets capable of carrying 500 kg to 300 km range (MTCR Category I threshold)
9A110/9A120 are MTCR-origin entries with strict controls on complete rocket/missile systems and their production equipment
Space launch vehicle (SLV) technology is controlled because SLV and ICBM technology is largely fungible
Commercial aircraft (Boeing, Airbus) are NOT controlled under 9A001 - they are controlled under military lists (if applicable) or export freely
EU-2023-SEMICONDUCTOR-GUIDANCEEuropäische KommissionEuropäische Union
Semiconductor controls guidance
EU Commission published interpretive guidance on semiconductor export controls under Category 3, following coordinated US-Japan-Netherlands restrictions. The guidance clarified thresholds for semiconductor manufacturing equipment (3B001), materials (3C001), and design software (3D001/3E001). It emphasized that EU controls focus on equipment capability, not product node designation.
Category 3 controls semiconductor equipment based on measurable performance parameters, not marketing claims about 'technology node'
3B001 thresholds for lithography are based on minimum resolvable feature size, overlay accuracy, and throughput
EDA (electronic design automation) software is controlled under 3D001/3E001 when designed for sub-threshold IC design
Semiconductor materials (3C001) include specific substrate materials by composition and purity thresholds
EU maintains independent control lists from US ECCN - items may be controlled differently between EU and US systems
EU-2023-PEGASUS-COMMITTEEEuropäische KommissionEuropäische Union
Spyware and surveillance software (Pegasus, Predator)
Following the European Parliament's inquiry into use of Pegasus and equivalent surveillance spyware in EU member states, the PEGA Committee recommended strengthened export controls on cyber-surveillance items, including mandatory human rights impact assessments before granting export licenses and a moratorium on exports to countries with documented misuse.
Pegasus/Predator cases demonstrated that EU member state governments themselves procured surveillance tools - creating tension between national security and export control regimes
PEGA Committee recommended export moratorium to documented misuse countries - if implemented, would create a presumption of denial for cyber-surveillance items to those destinations
Parliamentary oversight of export licensing is increasing - future regulation may require parliamentary notification of sensitive cyber-surveillance exports
EU-2022-RUSSIA-DUALUSE-BANEuropäische KommissionEuropäische Union
All Annex I dual-use items (Russia export ban)
Following Russia's invasion of Ukraine, the EU imposed a comprehensive ban on exports of all Annex I dual-use items to Russia under Council Regulation 833/2014 as amended. The ban covers all 10 categories with limited exceptions for humanitarian, medical, and pre-existing contractual obligations. This transformed dual-use export controls from a licensing regime to a near-total prohibition for Russia.
Zitierte ECNs:Keine spezifische ECN
Wichtige Feststellungen (3)
Russia export ban converts the licensing regime into a prohibition - items that previously required individual licenses are now banned entirely
Limited exceptions exist for medical devices, humanitarian aid, and cybersecurity for civilian use - exporters must document the exception basis
Pre-existing contract exceptions require notification to competent authorities and do not extend beyond the original contract scope - no renewals or extensions under the exception
EU-2021-RECAST-REGULATIONEuropäische KommissionEuropäische Union
Regulation 2021/821 (Dual-Use Recast)
Entry into force of Regulation (EU) 2021/821 recasting the EU Dual-Use framework. Key changes: Article 5 cyber-surveillance catch-all, Article 2(21) new definition of 'cyber-surveillance items', enhanced due diligence obligations, autonomous EU controls for emerging technologies (Art 4.3-4.5), and improved transparency through annual reporting.
Zitierte ECNs:Keine spezifische ECN
Wichtige Feststellungen (5)
Article 5 creates EU-wide catch-all for cyber-surveillance items regardless of Annex I listing
Regulation introduces concept of 'internal compliance programme' (ICP) as best practice for exporters
Technology transfers (including electronic/cloud) are explicitly within scope
Member States must report annually on licensing decisions to the Dual-Use Coordination Group
EU can adopt delegated acts to add emerging/disruptive technologies to Annex I faster than the Wassenaar process
SIPRI-2019-PROSECUTIONEuropäische KommissionEuropäische Union
Export control enforcement methodology (guidance)
SIPRI published a comprehensive study on detecting, investigating, and prosecuting export control violations across EU member states, finding that criminal proceedings are relatively rare (generally double-digit numbers per country per year) and penalties vary widely. The study recommended harmonized enforcement approaches and improved intelligence sharing between customs authorities.
Zitierte ECNs:Keine spezifische ECN
Wichtige Feststellungen (3)
Criminal prosecutions for export control violations in Germany are typically in the double digits annually - enforcement is selective, targeting the most egregious violations
Detection primarily relies on customs screening and intelligence tips rather than systematic monitoring - reactive rather than proactive enforcement model
Penalties across EU member states lack harmonization - the same violation can result in a warning letter in one country and criminal prosecution in another