Reglamento (UE) 2021/821 - Control de exportaciones
158 casos9 fuentes15 jurisdiccións73 ECN
97 decisiones reales de control de exportaciones, documentadas y con fuentes. Sanciones administrativas (BIS, BAFA), procesamientos penales, orientación regulatoria (Comisión UE, ECJU). Cada caso incluye los ECN citados, las multas impuestas y las conclusiones jurídicas clave.
OFAC-UNKNOWN-YEAR-TO-DATE-TOTALSOFAC (Tesoro de EE.UU.)Estados Unidos
Sanctions violation
OFAC enforcement action against Year to date totals:.
ECN citados:Ningún ECN específico
BIS-2026-TELEDYNE-FLIRBureau of Industry and Security (EE.UU.)Estados Unidos
Thermal imaging cameras
Teledyne FLIR self-disclosed 19 violations (2017-2024) involving de minimis miscalculations that undervalued US-origin content in Swedish-made cameras exported to China. In one case, the company negotiated a 'market collaboration fee' with a Chinese drone maker specifically to reduce the apparent US content below the 25% de minimis threshold. $1 million civil penalty imposed.
Manipulating de minimis calculations to artificially reduce US-origin content below 25% is treated as intentional evasion, not a technical classification error
Market collaboration fees or rebates designed to reduce apparent US content percentage are seen through by BIS investigators
Self-disclosure mitigated what could have been a much larger penalty - $1M for 19 violations involving thermal cameras to China is relatively restrained
Suspected Russian GRU agent Viktor Labin arrested in Belgium for operating a procurement network through his Belgian company (Groupe d'Investissement Financier). Labin's registered address links to the GRU academy in Moscow. He supplied military-related dual-use materials (yttrium oxide, explosive propagation detectors) to Russian defense contractors. Son subject to international arrest warrant. Trial commenced February 2026.
Russian intelligence (GRU) officers operating legitimate Belgian businesses as procurement fronts represent a direct national security threat to EU member states
Yttrium oxide and explosive propagation detectors are specifically sought dual-use items for military and nuclear applications
Family-run procurement networks with international arrest warrants spanning multiple countries demonstrate the organized nature of Russian procurement operations
OFAC-2026-AN-INDIVIDUALOFAC (Tesoro de EE.UU.)Estados Unidos
Sanctions violation
OFAC enforcement action against An Individual.
ECN citados:Ningún ECN específico
OFAC-2026-IMG-ACADEMY-LLCOFAC (Tesoro de EE.UU.)Estados Unidos
Sanctions violation
OFAC enforcement action against IMG Academy, LLC.
ECN citados:Ningún ECN específico
DOJ-2026-TFASA-ASWTribunales nacionalesEstados Unidos
DOJ filed forfeiture action against two mobile anti-submarine warfare crew trainers intercepted in transit from South Africa to the PLA. The trainers were designed to train Chinese aviators on ASW techniques against the P-8 Poseidon. Based on US-origin flight simulator software enhanced with Western ASW technical data. Entity List designation of TFASA in June 2023.
Military training simulators incorporating US-origin software are subject to US export controls regardless of where they are manufactured or assembled
Forfeiture actions can intercept controlled items in transit through third countries - no criminal conviction required to seize goods
Anti-submarine warfare training capability is classified as a strategic technology - simulators are controlled equivalently to the weapons systems they replicate
Three Russian students in Finland convicted of purchasing dual-use goods worth approximately EUR 140,000 (drones, laptops, processors, laser rangefinders) and shipping them to Russia. One student fully admitted guilt. Sentences were suspended (1 year 4 months for the main defendant). Case demonstrated recruitment of students as procurement agents.
Europe secured 118 enforcement actions in 2024 vs 52 in US. Total European fines EUR 88.5M vs EUR 56.8M US. Germany launched 1,400+ investigations since 2022 with 176+ cases still open. Latvia reported 247 administrative penalties and 600+ criminal investigations. Poland issued 42 financial penalties since 2022.
ECN citados:Ningún ECN específico
Conclusiones clave (4)
Europe outpaced US in enforcement actions (118 vs 52) and fines (EUR 88.5M vs 56.8M) - reversing historical US dominance
Germany alone has 1,400+ investigations since 2022 - unprecedented enforcement scale in EU's largest dual-use exporter
Baltic states are enforcement frontlines - Latvia's 600+ criminal investigations reflect proximity to Russia
EU enforcement shifting from administrative to criminal - prison sentences increasingly common
Thermal cameras, gas generators, dual-use maritime equipment
Marine Technics Baltia OUe and director Daniil Haitin convicted by Estonian court for exporting thermal cameras and gas generators to Russian Ministry of Defence end-users using false end-user certificates claiming Turkey as destination. Sentenced to 4 years 11 months (suspended) and EUR 160,000 fine.
Thermal cameras (6A002) and gas generators for Russian military end-users represent classic dual-use procurement through Baltic states
False end-user certificates claiming Turkish destination while supplying Russian MoD demonstrates deliberate document falsification
Estonian courts imposing nearly 5 years (suspended) and EUR 173,000+ in fines signals Baltic states actively prosecuting Russia sanctions violations
Maritime equipment companies in Baltic states are particularly vulnerable to Russian procurement networks due to historical trade ties
BIS-2025-LUMINULTRABureau of Industry and Security (EE.UU.)Estados Unidos
PhotonMaster luminometers and aqueous test kits
BIS settled with Luminultra Technologies for exporting three PhotonMaster luminometers and 25 aqueous test kits to Iran. Items were classified EAR99 but required authorization for Iran under Section 746.7(e). Civil penalty of $685,051 and 3-year suspended denial order imposed.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
EAR99 items still require Iran-specific authorization - classification as non-controlled does not mean exportable everywhere
Water quality testing equipment (luminometers) can trigger export violations when shipped to comprehensively sanctioned countries
$685K penalty for 3 luminometers demonstrates disproportionate penalty structure for Iran violations - even low-value exports carry severe consequences
BIS-2025-HALLEWELLBureau of Industry and Security (EE.UU.)Estados Unidos
Controlled technology items
Hallewell Ventures Ltd. entered into a Settlement Agreement with BIS, assessed a civil penalty of $374,474 - the maximum per-violation amount as of January 2025. The case demonstrated BIS's updated penalty guidelines linking penalties to transaction value.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
Maximum per-violation penalty of $374,474 as of January 2025 - this amount is adjusted annually for inflation
BIS updated Administrative Enforcement Guidelines in 2024 link penalty determination directly to transaction value and violation circumstances
Even single-violation cases can result in maximum penalties when aggravating factors (willfulness, strategic destination) are present
The EU updated its dual-use control list through Delegated Regulation, adding new entries including 4A506 for quantum computers, expanded controls on additive manufacturing equipment, and additional semiconductor manufacturing controls. The update implements agreed changes from the Wassenaar Arrangement 2024 plenary plus EU-autonomous controls.
4A506 (quantum computers) is an EU-autonomous 500-series control - not based on Wassenaar consensus, demonstrating EU willingness to act unilaterally on emerging technologies
Annual Annex I updates mean exporters must verify classification annually - a product classified as NLR in 2024 may become controlled in 2025
EU-autonomous controls (500-series) may not be mirrored by other Wassenaar members - creates asymmetric control landscape requiring multi-jurisdiction compliance assessment
EU Commission annual report on dual-use export controls for 2024. Key statistics: 42,000+ license applications across EU, 1,800+ denials (4.3% denial rate). Top categories: Cat 5 (28%), Cat 3 (19%), Cat 6 (15%), Cat 1 (12%). Russia sanctions drove a 40% increase in license applications. 12 Member States reported catch-all denials under Article 4.
ECN citados:Ningún ECN específico
Conclusiones clave (5)
Category 5 (telecommunications/crypto) remains the most licensed category across the EU
Russia-related controls increased total EU license applications by 40% compared to pre-2022 levels
Catch-all denials (Article 4) were reported by 12 Member States, primarily for items destined for Russia, China, and Iran
Intangible technology transfers accounted for 18% of all license applications, up from 8% in 2020
EU-wide denial consultation mechanism prevented 340+ conflicting decisions between Member States
University research collaboration (technology transfer)
Finnish authorities investigated unauthorized technology transfer from a Finnish university to a Chinese military-linked research institute. Encryption research results (5E002) and software (5D002) were shared via academic collaboration without export authorization. The case established that academic freedom does not exempt controlled technology transfers from export control obligations.
Academic research producing controlled technology (5E002) requires export authorization before sharing with non-EU researchers
The 'basic scientific research' exemption (General Technology Note) applies only when results are ordinarily published and made publicly available without restriction
Joint research agreements with military-linked foreign institutions trigger enhanced due diligence obligations
Universities must implement technology transfer screening procedures (ICP) for research involving controlled items
Publishing research findings in peer-reviewed journals generally qualifies for the public domain exemption - but sharing unpublished drafts does not
Latvia reported 247 administrative penalties and 600+ ongoing criminal investigations for Russia/Belarus sanctions violations. Latvia has become one of the EU's most active sanctions enforcement jurisdictions due to geographic proximity to Russia, historical trade ties, and role as transit corridor.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
600+ criminal investigations make Latvia one of most active EU sanctions enforcement jurisdictions per capita
Baltic states are enforcement frontlines - proximity to Russia creates both higher violation risk and stronger enforcement incentive
Latvia's enforcement intensity serves as model for other Member States implementing the 2024 Sanctions Criminalization Directive
DE-2025-SPINNER-CNCTribunales nacionalesAlemania
High-precision CNC machine tools
German prosecutors and 140 customs investigators raided Spinner Werkzeugmaschinenfabrik GmbH in Bavaria. The company is suspected of illegally supplying over 20 high-precision machine tools worth EUR 5.5 million to Russia via falsified export documents listing Uzbekistan as destination, routed through Poland and Belarus to a Russian Spinner affiliate.
Cross-border raids (Germany + Bulgaria) demonstrate coordinated EU enforcement against sanctions evasion for CNC machine tools classified under 2B001
Falsified export documentation listing Uzbekistan while routing through Poland and Belarus is a common evasion pattern
Machine tool manufacturers are under heightened scrutiny - Spinner joins pattern of German CNC manufacturers investigated for Russia circumvention
GPS tracking on newly shipped machines was implemented only after the investigation, indicating industry is moving toward end-use monitoring
DOJ-2025-CADENCEBureau of Industry and Security (EE.UU.)Estados Unidos
EDA semiconductor design tools, hardware, and IP technology
Cadence pled guilty to criminal export control violations for selling EDA tools to China's National University of Defense Technology (NUDT), on the Entity List since 2015 for supercomputer support of nuclear simulation. Combined penalty of $140.6 million ($72M criminal fine + $45M forfeiture + $95M BIS civil penalty, cross-credited) with five years probation.
First major corporate criminal guilty plea for export control violations signals DOJ's willingness to pursue criminal prosecution of companies, not just individuals
Entity List designations from 2015 still actively enforced a decade later - companies cannot assume old designations are forgotten or unenforced
Five-year probation with annual compliance reports creates long-term government oversight extending far beyond the penalty payment
FR-2025-SBDU-ANNUAL-REPORTSBDU (Francia)Francia
Annual enforcement statistics France
SBDU annual report on dual-use export controls in France. Key statistics: 4,200+ individual license applications processed, 127 denials, 340 conditions attached. Top controlled categories: Category 5 (telecom/crypto) 28%, Category 3 (electronics) 22%, Category 6 (sensors/lasers) 18%. Iran, Russia, and China were the top destinations for denials.
ECN citados:Ningún ECN específico
Conclusiones clave (5)
Category 5 (telecommunications and information security) represents the largest share of French dual-use license applications
Iran, Russia, and China account for over 60% of license denials in France
SBDU processes applications within an average of 45 working days - expedited procedure available for EU001 destinations
Post-shipment verification missions increased by 30% following Russia sanctions
Intangible technology transfers (emails, cloud access) now represent 15% of all applications, up from 5% in 2020
Dutch FIOD (Fiscal Intelligence and Investigation Service) dismantled a network shipping controlled semiconductors to Russia through Turkey and Kazakhstan. Over 500 shipments of Intel, AMD, and Xilinx chips were routed through front companies. Total value exceeded EUR 15 million. The investigation demonstrated systematic circumvention of EU sanctions and dual-use controls.
Semiconductor components controlled under 3A001 (and 3A991 for lower-spec items subject to Russia sanctions) are actively circumvented through Central Asian and Turkish intermediaries
Front companies in Turkey, Kazakhstan, and UAE are commonly used to obscure the final Russian destination
Dutch authorities apply both dual-use regulation AND Russia sanctions packages - violations of either carry criminal penalties
Know-Your-Customer (KYC) obligations extend to distributors, not just manufacturers - distributors must verify end-users
Aggregate value of shipments is a factor in sentencing - systematic circumvention receives heavier penalties than isolated incidents
EU Commission guidance on export control classification of additive manufacturing (3D printing) equipment. Metal 3D printers using powder bed fusion (SLM/DMLS) or directed energy deposition may be controlled under 1B001 or 2B001 depending on the materials they process and the precision they achieve. The metal powders themselves may be controlled under 1C002.
Metal 3D printers processing controlled alloys (titanium, nickel superalloys, maraging steel) require material assessment under 1C002
High-precision metal AM equipment (< 50 µm layer thickness, < 100 µm feature resolution) may meet 2B001 thresholds
1B001 may apply to AM equipment specifically designed for producing items controlled elsewhere in Annex I
Polymer 3D printers are generally NOT controlled unless producing controlled materials (e.g., 1C008 polyimides)
Technology (CAD files, build parameters) for producing controlled items via AM is controlled as 'technology required for production' under the relevant E-entry
BIS-2025-APPLIED-MATERIALSBureau of Industry and Security (EE.UU.)Estados Unidos
Ion implantation semiconductor manufacturing equipment
BIS imposed a $252.5 million civil penalty - the second-largest BIS penalty ever - on Applied Materials for shipping 56 ion implanter systems worth $126M to SMIC without licenses between March 2021 and June 2022. SMIC had been on the Entity List since December 2020. Items were partially built in the US, shipped to Korea for completion, then sent to China.
Routing items through third countries (Korea) does not circumvent Entity List requirements - reexport controls apply regardless of where assembly is completed
$252.5M penalty (2x transaction value) demonstrates BIS willingness to impose maximum statutory penalties for semiconductor diversion to Entity List parties
DOJ and SEC investigations were closed without further action due to cooperation with BIS - settling with one agency can foreclose multi-agency prosecution
European Commission published first annual report under the revised Dual-Use Regulation covering 2022-2023. EU member states authorized 57.3 billion euros in dual-use exports and denied 831 export applications worth 0.98 billion euros. Top categories by value were nuclear equipment (21%), information security/crypto (20%), and industrial machinery (9%).
ECN citados:Ningún ECN específico
Conclusiones clave (3)
831 denials worth nearly 1 billion euros demonstrates active EU-wide export control enforcement - denials represent 0.04% of total dual-use trade
Information security and crypto items represent 20% of authorized trade by value - Category 5 Part 2 is the second largest dual-use export category
Top destinations for authorized exports are US (24%), China (19%), UK (7%) - China as second-largest destination despite being primary restriction target reflects volume of non-controlled trade
First EU consolidated dual-use statistics (2022 data)
First annual report under Regulation 2021/821: EUR 57.3 billion in authorized dual-use exports (2% of extra-EU goods exports, up 49% from EUR 38.5B in 2021). 831 denials. Individual and global licenses accounted for 82% of trade value despite EUGEAs being more numerous.
ECN citados:Ningún ECN específico
Conclusiones clave (4)
EUR 57.3 billion in dual-use exports - 49% increase over 2021 driven by Russia sanctions forcing more items through licensing
831 denials across EU provides baseline for measuring enforcement consistency across single market
Individual and global licenses account for 82% of trade value - high-value exports require case-by-case review
Dual-use exports represent only 2% of extra-EU trade but disproportionate security significance
BIS-2025-HAASBureau of Industry and Security (EE.UU.)Estados Unidos
CNC machine parts (gearboxes, magnetic encoder adapters)
BIS and OFAC imposed $2.5 million in combined civil penalties on Haas Automation for 41 violations of the EAR involving sales of CNC machine parts to Entity-Listed defense sector parties in China and Russia, including Beihang University and CETC 14. Parts were classified EAR99 but destined for entities on the Entity List servicing CNC machines potentially classifiable under 2B001.
BAFA published classification guidance for quantum computing components. Quantum computers and their key components (qubits, cryogenic systems, control electronics) may be controlled under 4A005. Quantum key distribution (QKD) systems are controlled under 5A002. Post-quantum cryptography (PQC) algorithms are NOT controlled as they are classical software.
Netherlands announced third tightening of semiconductor export controls (after Sep 2023 and Sep 2024), effective April 1, 2025. Extended to measuring/inspection equipment and specific ASML TWINSCAN NXT:1970i/1980i DUV systems plus ASM International equipment. Case-by-case license assessment, not blanket ban.
Third successive expansion in 18 months shows progressive tightening in response to evolving geopolitical risks
Controls extend beyond lithography to measuring and inspection equipment - entire semiconductor manufacturing ecosystem restricted
Case-by-case assessment preserves flexibility while ensuring government oversight
Dutch unilateral controls under Article 9 serve as model for EU-wide 500-series entries
ASM International equipment now included alongside ASML - expanding scope to broader Dutch semiconductor sector
ECJU-2024-ANNUALECJU (Reino Unido)Reino Unido
All controlled items (enforcement statistics)
In 2024, ECJU processed 15,464 Standard Individual Export Licence applications, completing 60% within 20 working days (up from 52% in 2023). HMRC conducted 266 seizures of controlled goods, received 260 voluntary disclosures, issued 216 warning letters and 9 compound settlement offers, and pursued 15 criminal prosecutions for deliberate evasion.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
15 criminal prosecutions per year for deliberate evasion demonstrates that UK enforcement prioritizes willful violations - inadvertent breaches typically result in warning letters or compound settlements
266 seizures indicates active customs screening at UK borders - physical shipments of controlled goods are being intercepted
60% of licenses processed within 20 working days provides benchmark for exporters' planning - controlled item exports face 4-8 week lead times
BIS-2024-YEARREVIEWBureau of Industry and Security (EE.UU.)Estados Unidos
All controlled items (enforcement statistics)
BIS Export Enforcement 2024 Year in Review reported record enforcement activity including the $300M Seagate settlement, 26 Disruptive Technology Strike Force criminal cases, and expanded use of Temporary Denial Orders against procurement networks. BIS received 80% more Voluntary Self-Disclosures containing serious violations in 2023 than 2022.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
80% increase in voluntary self-disclosures indicates either increased compliance awareness or increased violation rates - likely both as sanctions expanded
Record penalty amounts ($300M Seagate, $51M Boeing) signal deterrence-focused enforcement strategy - penalties now rival antitrust in magnitude
Temporary Denial Orders used increasingly as preventive tool to immediately block suspected procurement networks before criminal proceedings conclude
ECJU processed 15,464 Standard Individual Export Licence applications in 2024, completing 60% within 20 working days - up from 52% in 2023 but below the 70% target. The improvement reflects ECJU's digital modernization through the LITE system launched in September 2024, replacing the legacy SPIRE platform.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
20 working day target means controlled exports face minimum 4-week lead time - exporters must plan licensing into procurement timelines
LITE digital system replacing SPIRE indicates modernization of UK licensing infrastructure - potentially faster processing as the system matures
40% of applications taking longer than 20 working days indicates complex cases (strategic destinations, sensitive technologies) face extended review - some applications may take months
WA-2024-PLENARYComision EuropeaUnion Europea
All Wassenaar-controlled items (multilateral update)
The 2024 Wassenaar Arrangement plenary agreed new controls on sub-orbital vehicles, advanced gate-all-around semiconductor technology, additive manufacturing for superalloy components, and updates to information security items. Changes will be transposed into national and EU control lists during 2025 through delegated regulations.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
Wassenaar updates occur annually at December plenary - new controls agreed here flow into EU Annex I updates within 6-12 months via delegated acts
Sub-orbital vehicles (space tourism/launch) added as newly controlled items - reflects militarization concerns about commercial space technology
Gate-all-around (GAA) transistor technology controls indicate Wassenaar keeps pace with semiconductor manufacturing evolution - each new process node may trigger new controls
BIS-2024-ENTITY-LIST-SEMIBureau of Industry and Security (EE.UU.)Estados Unidos
Semiconductor and AI-related technology
BIS added over 140 entities to the Entity List in 2024, with a pronounced focus on semiconductor manufacturing, artificial intelligence development, and advanced computing entities in China. Additions included Chinese chip design companies, AI research institutes, and fabrication facilities, effectively cutting them off from US-origin technology across all EAR categories.
Entity List is expanding at record pace - over 140 additions in a single year targeting semiconductor and AI ecosystem
Entity List applies to ALL EAR items, not just controlled items - even commercial-grade computers and standard software require license for Entity List parties
Chinese semiconductor ecosystem is the primary target - additions cover the full supply chain from design (fabless) to fabrication (foundry) to equipment suppliers
EU Dual-Use Coordination Group assessment of emerging technologies for potential Annex I inclusion. Technologies under review: advanced semiconductor architectures (chiplets, 3D stacking), neuromorphic computing, advanced materials (metamaterials, 2D materials), synthetic biology tools, and advanced surveillance AI. The assessment follows Article 4(3)-(5) of Regulation 2021/821 allowing autonomous EU controls.
ECN citados:Ningún ECN específico
Conclusiones clave (5)
Chiplet/3D-stacking semiconductor architectures may circumvent existing 3A001 die-level controls
Neuromorphic computing chips may require new 4A003 performance metrics (beyond FLOPS)
Metamaterials with electromagnetic properties not found in nature may warrant new Category 1 or 6 entries
Synthetic biology tools (gene synthesis, CRISPR) are being assessed for Category 1 (biological) controls
AI-powered surveillance capabilities (facial recognition, predictive policing) are being assessed for Article 5 cyber-surveillance catch-all
SBDU guidance on export control classification of AI/ML models. Key determination: AI models themselves are NOT controlled under the current Dual-Use Regulation unless they incorporate controlled encryption (5D002) or are specifically designed for controlled end-uses (military, nuclear, surveillance). General-purpose AI models (LLMs, image recognition) are not dual-use items per se.
General-purpose AI/ML models are NOT controlled under the current EU Dual-Use Regulation
AI software specifically designed for cryptanalysis could be controlled under 5D002
AI models designed for autonomous weapons systems may trigger catch-all provisions (Article 4)
Training data containing controlled technology (e.g., nuclear design data) does NOT make the trained model a controlled item - but the training data transfer itself may require authorization
EU AI Act and Dual-Use Regulation are separate regimes - AI Act compliance does not address export control obligations
Stuttgart Higher Regional Court convicted a 56-year-old German businessman to 7 years imprisonment for selling machine tools to Russian weapons manufacturers in breach of EU sanctions and the German Foreign Trade Act (AWG). He falsified contract dates and used multiple export routes to evade sanctions. Arrested August 2023, convicted November 2024, with full confiscation of profits.
EU published detailed guidelines requiring exporters to conduct human rights due diligence before exporting cyber-surveillance items, including IP interception systems, intrusion software, monitoring centers, and lawful intercept equipment. The guidelines specify that exporters must assess risk of items being used for internal repression, even when items are not listed in Annex I.
Due diligence obligation extends to non-listed items - any technology with surveillance capability requires human rights risk assessment regardless of Annex I classification
Exporters must consider the human rights record of the destination country, the identity and activities of the end-user, and any credible evidence of misuse
Article 5 creates an affirmative obligation - exporters cannot claim ignorance of human rights risks and must actively investigate before exporting
Dutch Ministry of Foreign Affairs published decree introducing licensing requirements for additional dual-use items from semiconductor, quantum computing, and additive manufacturing industries effective October 2024. This expanded the June 2023 controls beyond ASML-specific DUV lithography to cover broader semiconductor equipment ecosystem.
Commission Delegated Regulation 2024/2547 updated Annex I of the EU Dual-Use Regulation, implementing changes agreed at the 2023 Wassenaar Arrangement plenary plus EU-autonomous additions. The update added 4A506 for quantum computers and expanded controls on semiconductor manufacturing equipment, entering into force 20 days after Official Journal publication.
Delegated Act mechanism allows Annex I updates without full legislative procedure - faster implementation of Wassenaar changes and autonomous EU decisions
4A506 is a 500-series entry (EU autonomous) - not agreed at Wassenaar, demonstrating EU willingness to impose unilateral technology controls
Exporters have only 20 days from Official Journal publication to implementation - compliance systems must monitor EU legislation proactively to avoid inadvertent violations
The European Commission published guidelines on export of cyber-surveillance items under Article 5 of Regulation 2021/821, requiring exporters to conduct human rights due diligence before exporting items that could be used for internal repression. The guidelines cover intrusion software (4A005/4D004), telecom interception systems (5A001.f), internet surveillance (5A001.j), and forensic tools (5A004.b).
Article 5 catch-all applies even when items are NOT listed in Annex I - exporters must self-assess human rights risks for any cyber-surveillance capable technology
Specially designed means covert surveillance must have been the main purpose of development - dual-intent tools (vulnerability scanners, DPI) create classification ambiguity
Member states play vital enforcement role - the Commission provides guidelines but national authorities determine licensing decisions and prosecutions
Chemical weapons precursors, nerve agent precursors
Spanish authorities conducted Operation Probirka: Phase 1 (October 2024) arrested four in Barcelona/Girona and seized 13 tonnes of chemical weapons precursors at Barcelona port. Phase 2 (February 2025) arrested five more. Network used front companies in Kyrgyzstan and Armenia to divert chemicals to Moscow end-user.
Metal additive manufacturing (3D printing) equipment
EU member states began applying catch-all controls to advanced metal additive manufacturing equipment capable of producing aerospace and defense components, even when the specific equipment models were not listed in Annex I. The controls targeted powder bed fusion and directed energy deposition systems with precision capabilities exceeding certain thresholds.
Additive manufacturing for metal components is an emerging dual-use concern - equipment not yet in Annex I can still be caught under Article 4 catch-all provisions
Precision thresholds for 3D printing (layer thickness, dimensional accuracy, build volume) are analogous to traditional machine tool controls (2B001) - same logic applies
Catch-all assessment for additive manufacturing considers end-use capability (can it produce missile components, nuclear parts) rather than commercial classification
DOJ-2024-BHAMBHANI-LASERTribunales nacionalesEstados Unidos
Laser welding machines
Massachusetts laser equipment salesman Sam Bhambhani and Russian national Maxim Teslenko indicted for conspiracy (2015-2021) to export laser welding machines to Rosatom's Ural Electromechanical Plant by falsifying export documentation. The equipment was intended for Russia's nuclear weapons program. Maximum 10 years per count.
EU Commission guidance on export control implications of cloud computing. Providing access to high-performance computing (HPC) resources via cloud constitutes a 'technology transfer' when the computing capability exceeds 4A003 thresholds. Cloud-based encryption services may require authorization under Category 5 Part 2.
RTX Corporation (Raytheon) settled 750 AECA/ITAR violations (Aug 2017-Sep 2023) including unauthorized exports of classified defense articles, hand-carry exports to proscribed destinations, and classification failures. $200 million DDTC penalty ($100M suspended for compliance). Separately, Raytheon paid $950M to DOJ/SEC for related FCPA and export control schemes.
750 violations over 6 years indicates systemic compliance failure - even major defense contractors can accumulate massive violation counts
Hand-carry of defense articles to proscribed destinations is actively prosecuted, not just formal shipments through freight channels
Combined DDTC + DOJ/SEC penalties exceeding $1.1B demonstrate that export control and anti-corruption violations are often interlinked
DOJ-2024-PETROVTribunales nacionalesEstados Unidos
Microelectronics with military applications
Russian-German national Arthur Petrov used a Cyprus shell company (Astrafteros Technokosmos) to procure US-sourced microelectronics falsely claiming items were for fire security systems. Components were shipped to Electrocom in Russia, which supplies manufacturers of guided missiles, drones, and electronic warfare equipment recovered on the Ukrainian battlefield.
Cyprus-based shell companies are actively used as fronts for Russian military procurement - Cyprus is an identified transshipment risk jurisdiction
Components recovered from Russian military hardware in Ukraine have been traced back to specific procurement schemes - battlefield forensics drives enforcement
False end-use declarations claiming fire security or commercial use for military-grade microelectronics follow a documented evasion pattern
Electronic components for military manufacturing including drones
A German-Russian couple operating two electronics companies in the Saarland region illegally shipped over 120,000 electronic components to Russian military manufacturers between January 2020 and May 2023. Main defendant received 6 years 9 months imprisonment; wife received 1 year 9 months suspended. Post-invasion sanctions evasion through falsified invoices treated as aggravating.
Over 120,000 components shipped demonstrates industrial-scale procurement network operating within Germany - not isolated transactions
Post-February 2022 sanctions evasion through document falsification treated as aggravating circumstance increasing sentence severity
Spousal involvement prosecuted separately - family-based procurement networks face individual criminal liability for each participant
BAFA-2024-NATIONAL-LISTBAFA (Alemania)Alemania
Emerging technologies (national list expansion)
Germany expanded its national export control list (Ausfuhrliste) to include emerging technologies beyond the EU Annex I harmonized list, adding controls on specific semiconductor manufacturing equipment, advanced materials, and cybersecurity tools. This national expansion supplements the EU dual-use regulation with additional German-specific controls.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
German national list can be stricter than EU Annex I - exporters in Germany must check both EU and national control lists for complete classification
National controls create intra-EU competitive asymmetry - an item controlled in Germany may be freely exportable from France if only EU Annex I applies
BAFA publishes the Ausfuhrliste separately from the EU list - national supplements are found in Teil I Abschnitt A (military) and C (national dual-use additions)
BIS-2024-INDIANA-UNIVBureau of Industry and Security (EE.UU.)Estados Unidos
Genetically modified fruit flies (Drosophila with ricin A transgene)
BIS settled with Indiana University over 42 violations involving export of fruit flies genetically modified to produce a subunit of the controlled ricin toxin (1C351) to 30 institutions in 16 countries without required export licenses, from November 2017 to April 2021. No monetary penalty was imposed due to voluntary self-disclosure and cooperation.
Biological materials containing transgenes of controlled toxins (1C351 - ricin) are controlled items regardless of their host organism - a fruit fly carrying a ricin transgene is an export-controlled item
Academic and research institutions are not exempt from dual-use export controls - stock centers must screen biological material shipments
Voluntary self-disclosure and immediate remediation can result in no monetary penalty - but a suspended denial order and compliance training requirements were imposed
CNC machine tools diverted to Iran nuclear program
Frankfurt court convicted three individuals for systematically procuring German CNC machine tools for Iran's nuclear and missile programs through front companies in UAE and Turkey. The machines, controlled under 2B001 (5-axis precision) and 2B201 (nuclear-specific), were used to manufacture centrifuge components for uranium enrichment.
2B001 and 2B201 machine tools are among the most sensitive items for nuclear proliferation
UAE and Turkey remain primary transshipment points for German machine tools destined for Iran
Front company networks used multi-layer obfuscation: German seller → Dubai trader → Turkish forwarder → Iranian end-user
German prosecutors used financial transaction records and shipping documentation to prove knowledge of final destination
Sentences ranged from 2-5 years imprisonment - reflecting the severity of nuclear proliferation facilitation
DE-2024-PRIMINERTribunales nacionalesAlemania
High-precision CNC machine tools
Investigation revealed that Priminer Machine Tools, a Chinese-German manufacturer, exported hundreds of high-precision CNC machines to Russian military-industrial plants in violation of EU sanctions and dual-use export controls (2B001). The machines were used to produce missile components and aircraft parts for Russia's defense sector.
CNC machine tools (2B001) with positioning accuracy thresholds are among the most enforced dual-use categories - diversion to military end-use in sanctioned countries is a primary enforcement concern
Chinese-German corporate structures create complex jurisdictional challenges for EU export control enforcement
Machine tools capable of producing missile/aircraft components face strict end-use monitoring requirements under both EU Dual-Use Regulation and sanctions frameworks
Dutch customs authorities started 80 export control cases in three years (2022-2024), settling 64 with fines ranging from 500 to 200,000 euros. FIOD conducted 30 more complex investigations in the same period, resulting in 6 convictions with 20 investigations ongoing. Combined, this represents over 100 enforcement actions in 3 years.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
Fine range of 500 to 200,000 euros for customs settlements shows graduated enforcement - most violations receive proportionate administrative penalties
FIOD handles complex/willful cases while customs handles routine violations - dual-track enforcement with different penalty ranges
6 convictions from 30 FIOD cases (20% conviction rate with 67% still ongoing) indicates thorough but slow criminal prosecution process
FR-2024-SBDU-ITTSBDU (Francia)Francia
Intangible technology transfers (guidance)
SBDU clarified that intangible technology transfers - including email transmission of technical data, cloud hosting of controlled software, and verbal disclosure of controlled technology to foreign nationals - require export authorization under the EU Dual-Use Regulation. The guidance specifically addressed deemed exports in research environments and multinational corporate settings.
Emailing a controlled technical document to a colleague in a non-EU country constitutes an export requiring authorization - no physical border crossing needed
Cloud hosting of controlled software (5D/E categories) accessible from non-EU locations creates a continuous export - access controls must match export control requirements
Deemed exports in corporate settings mean hosting a foreign national employee at a facility with controlled technology requires authorization - HR departments must coordinate with compliance
EU Commission published comprehensive guidance on the catch-all mechanism under Articles 4 and 5 of Regulation 2021/821. Key clarification: exporters have an autonomous obligation to assess whether non-listed items might contribute to WMD proliferation (Art 4) or cyber-surveillance repression (Art 5), independent of any government notification.
ECN citados:Ningún ECN específico
Conclusiones clave (5)
Article 4 catch-all applies to ANY item (not just Annex I) when the exporter knows or has been informed the item is or may be intended for WMD end-use
Article 5 catch-all specifically targets cyber-surveillance items that could be used for internal repression or human rights violations
Exporters have an autonomous due diligence obligation - they cannot rely solely on the absence of government notification
Red flags triggering catch-all assessment include: unusual destination, military end-user, refusal to state end-use, cash payment, unusual routing
The catch-all mechanism does not apply to items exported to EU001 (Annex IIa) destinations for Article 4 purposes
Finnish Customs investigated a company from eastern Finland for selling electronic parts and components to Russia valued at approximately EUR 2.7 million. Items included semiconductors, microchips, processors, and connectors controlled under Category 3.
EU adopted Directive 2024/1226 establishing minimum criminal offense standards and penalties for EU sanctions violations. Member States must transpose by May 2025. Criminalizes sanctions evasion, circumvention, and facilitation across all 27 Member States. Minimum 5-year maximum imprisonment for most serious offenses.
ECN citados:Ningún ECN específico
Conclusiones clave (5)
Mandatory transposition by May 2025 means all 27 EU member states must have criminal sanctions for export control violations
Minimum 5-year maximum imprisonment harmonizes penalties - previously ranged from administrative fines to prison across Member States
Circumvention and facilitation are explicitly criminalized - not just direct violations
Corporate criminal liability required - companies can be prosecuted, not just individuals
Germany transposed January 2026; Italy December 2025 - implementation timelines vary but enforcement convergence accelerating
BIS-2024-1760EBureau of Industry and Security (EE.UU.)Estados Unidos
All EAR items (enforcement mechanism)
BIS increasingly uses Section 1760(e) denials to add parties to the Entity List based on evidence of involvement in proliferation activities or sanctions evasion, without requiring a full enforcement proceeding. This administrative mechanism allows rapid blocking of suspected procurement networks before they can acquire additional controlled items.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
Entity List additions under Section 1760(e) do not require proof beyond reasonable doubt - administrative standard of evidence applies, allowing faster action
Entity List placement imposes a license requirement for ALL EAR items (not just controlled items) - even EAR99 goods require a license to Entity List parties
Exporters must screen all transactions against the Entity List in real-time - failure to check is not a defense, and ignorance of a party's Entity List status does not excuse the violation
DOJ-2024-MILLIPORESIGMABureau of Industry and Security (EE.UU.)Estados Unidos
Biochemical products
First-ever DOJ National Security Division declination under the Voluntary Self-Disclosure Program. A MilliporeSigma employee fraudulently ordered controlled biochemicals using a fake university affiliation; co-conspirators repackaged and shipped them to China. The company's rapid self-disclosure and extraordinary cooperation led DOJ to decline prosecution entirely. Individual employees pled guilty.
First DOJ NSD declination demonstrates tangible benefits of voluntary self-disclosure - company avoided all criminal prosecution
Employee fraud schemes exploiting academic discount programs to procure controlled items represent an emerging insider threat vector
Rapid cooperation enabling law enforcement to disrupt active schemes earns maximum mitigation credit - speed of disclosure matters
BAFA-2024-DRONE-GUIDANCEBAFA (Alemania)Alemania
Commercial drone / UAV
BAFA published guidance on classification of commercial drones (UAVs). Key determination: consumer/commercial drones (DJI, Parrot) are generally NOT controlled under 9A012 because they lack autonomous flight beyond visual line of sight capability with a range exceeding 300 km. However, their integrated sensors (thermal cameras, INS) must be independently assessed.
The US-EU Trade and Technology Council (TTC) Working Group on Export Controls continued coordinating multilateral approaches to emerging technology controls, with focus on quantum computing, advanced semiconductors, and AI-related items. The TTC serves as the primary US-EU coordination mechanism for aligning export control policies outside the Wassenaar Arrangement.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
TTC supplements Wassenaar as coordination mechanism - allows bilateral US-EU alignment on technology controls that may not achieve Wassenaar consensus
Coordination on emerging technologies (quantum, AI, biotech) pre-figures future Wassenaar additions - items discussed in TTC often appear in subsequent Wassenaar plenaries
TTC export control coordination directly influenced Netherlands' semiconductor controls and EU's quantum computing classification - demonstrating real policy impact
The UK ECJU introduced new controls on exports of emerging technologies via amendments to the Export Control Order 2008, effective April 1, 2024. New controls cover quantum computing technologies, advanced semiconductor manufacturing equipment, and cryogenic cooling systems with potential dual-use applications.
Quantum computing (4A005 and new UK-specific entries) joins encryption as a Category 4/5 enforcement priority - emerging technology controls expand faster than Wassenaar consensus
UK post-Brexit maintains alignment with EU Annex I but can add national controls unilaterally - exporters must check both EU and UK control lists
Cryogenic cooling systems are newly controlled as enabling technology for quantum computers - the control covers the technology stack, not just the final quantum computing product
UK ECJU published comprehensive classification guidance aligned with Wassenaar 2024 list updates. While UK is no longer EU, ECJU classification methodology remains highly relevant as the UK control list mirrors Annex I. Key areas: semiconductor performance parameters, encryption Note 3 interpretation, and thermal camera thresholds.
UK Strategic Export Control List mirrors EU Annex I for Wassenaar-origin items - classification decisions are largely interchangeable
ECJU Note 3 (mass market encryption) interpretation is consistent with EU practice - consumer devices with standard encryption are decontrolled
UK maintains stricter national controls on certain items not in Wassenaar (e.g., certain types of body armor, riot control equipment)
ECJU openly publishes classification advisories - useful reference for EU exporters classifying the same items
Post-Brexit, UK cannot participate in EU denial consultations but maintains bilateral information sharing
BIS-2024-INTEGRABureau of Industry and Security (EE.UU.)Estados Unidos
Transistors and related semiconductor products
Integra Technologies sold approximately $6.67 million of transistors and related products to Russian end users between February 2023 and October 2023 without the requisite license, admitting to 94 violations of the EAR. BIS agreed to suspend $1.5 million of the penalty due to limited ability to pay.
Most sensitive dual-use items (Annex IV intra-EU controls)
The EU maintained Annex IV controls requiring authorization for intra-EU transfers of the most sensitive dual-use items, including nuclear reactor equipment (0A001), enrichment equipment (0B001), stealth technology, and certain encryption items (5A002.b). Unlike standard Annex I items which move freely within the EU single market, Annex IV items require licenses even between EU member states.
Annex IV is the exception to EU single market free movement - 45 of the most sensitive items require intra-EU transfer authorization
Nuclear and stealth technology make up the majority of Annex IV items - these are considered so sensitive that even EU internal transfers must be monitored
5A002.b (certain non-mass-market encryption) is on Annex IV - meaning intra-EU transfers of bespoke encryption equipment require licensing, unlike mass-market crypto which moves freely
FR-2024-SBDU-GUIDANCE-CRYPTOSBDU (Francia)Francia
Encryption products (general guidance)
SBDU (Service des Biens a Double Usage) published updated guidance on classification of encryption products under Category 5 Part 2. Key clarification: cloud-based encryption services where the cryptographic processing occurs on infrastructure outside France are subject to export control when the encryption technology or software is transferred (even electronically) to a controlled destination.
Cloud-based encryption services constitute 'technology transfer' under the regulation when cryptographic functions are executed on foreign infrastructure
SaaS encryption products require export authorization if the underlying algorithms exceed 5A002 thresholds and Note 3 does not apply
French manufacturers must file déclaration préalable for Category 5 Part 2 items - even when Note 3 decontrol applies, notification is required
Open-source encryption software benefits from the 'public domain' exemption (General Technology Note) only if all source code is genuinely and permanently public
Estonian-French businessman Gabriel Temin convicted in Finland's first-ever sanctions violation case. Temin falsified destination declarations claiming goods were headed to Kazakhstan when actually destined for St. Petersburg, Russia. Though charged with approximately 30 breaches, convicted on 4. US Treasury also designated Temin and his companies (Luminor Oy, Siberica Oy) as SDNs.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
First sanctions conviction in Finnish legal history demonstrates EU member states are progressively building enforcement capacity and willingness to prosecute
Falsifying country of destination on export documentation is prosecutable even when only partially proven - conviction on 4 of 30 charges still meaningful
Parallel US Treasury SDN designation accompanying European criminal prosecution creates layered enforcement making it impossible to continue trading
German Federal Prosecutor charged Waldemar W. and Natalie S. for exporting electronic drone components to Russia on 26 occasions between January 2020 and March 2023 to a company producing military hardware including drones. Co-defendant provided false destination information to suppliers.
Dutch government extended national controls on advanced semiconductor manufacturing equipment. ASML's DUV immersion lithography systems (TWINSCAN NXT:2000 and newer) were added to national export control lists for certain destinations, going beyond the EU common list which primarily targets EUV. This reflects the 'performance capability' approach: even non-EUV systems with advanced overlay and resolution specs can produce chips at controlled technology nodes.
France adopted Export Controls Order 02-2024, effective 1 March 2024, establishing national controls on quantum computers and advanced semiconductor technologies. Quantum controls tiered by qubit count (34 to 2,000 physical qubits) with specified error rates. France is second EU state (after Spain) to impose national quantum computing controls.
France uses Article 9 of EU Regulation 2021/821 for national controls - same legal basis as Netherlands semiconductor controls
Quantum computer controls are parameter-based: tiered from 34 to 2,000 physical qubits with specified error rates per tier
Both semiconductor manufacturing equipment and quantum technologies in a single decree - reflecting technology convergence
SBDU processes license applications - French exporters apply to SBDU, not Ministry of Defence
Anticipates EU-wide 500-series entries adopted in November 2025
BAFA-2024-BIOTECH-AGBAFA (Alemania)Alemania
Biological containment equipment (BSL-3)
BAFA classification guidance on biological containment equipment. BSL-3/4 laboratory equipment, including Class III biological safety cabinets, HEPA filtration systems, and aerosol inhalation chambers, are controlled under 2B352. The biological agents they handle may be independently controlled under 1C351/1C353.
2B352 controls biological containment equipment including Class III safety cabinets, aerosol chambers, and spray drying equipment
Biological agents are controlled by NAME under 1C351 (human pathogens) and 1C353 (genetic elements) - no threshold analysis needed
BSL-3/4 equipment is controlled regardless of the specific pathogen it will handle - the containment capability itself is the controlled characteristic
Standard laboratory equipment (BSL-1/2, laminar flow hoods, standard autoclaves) is generally NOT controlled
DDTC-2024-BOEINGBureau of Industry and Security (EE.UU.)Estados Unidos
Defense articles including aerospace technology
Boeing agreed to pay $51 million (with $24 million suspended for compliance improvements) for unauthorized exports of defense articles to China. The settlement required appointment of a Special Compliance Officer, two independent audits, and strengthened export compliance training programs.
Aerospace technology (Category 9) exports to China face maximum scrutiny - even inadvertent transfers by major defense contractors result in multi-million dollar penalties
Suspended penalty portions incentivize compliance investment - companies can reduce effective penalty by demonstrating improved compliance systems
Special Compliance Officers and independent audits are standard remediation requirements for significant export control violations
Dutch FIOD arrested a 57-year-old man and seized assets of a company suspected of exporting $24 million worth of computer motherboards and graphics cards to Russian customers in breach of EU sanctions. FIOD has conducted 30 export control cases in three years since February 2022, with six convictions and twenty investigations ongoing.
$24 million in consumer electronics (motherboards/GPUs) to Russia demonstrates scale of sanctions evasion through seemingly mundane commercial products
FIOD's 30 cases in 3 years shows Netherlands as one of EU's most active enforcement jurisdictions for dual-use/sanctions violations
Consumer electronics not individually controlled can still violate sanctions regulations - the destination and end-user determine legality, not just classification
Dutch Court of Appeals ruled on a challenge by three NGOs (Oxfam Novib, PAX Nederland, Rights Forum) against the Netherlands' export of F-35 fighter jet components to Israel. The case tested whether continued arms/components exports could proceed given allegations of international humanitarian law violations in the destination country.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
NGO-initiated litigation can challenge government export licensing decisions - civil society plays an active role in EU export control enforcement
Court review of export licenses extends to human rights and IHL compliance assessment - not just technical classification
F-35 component supply chain involves multiple EU member states - a single court ruling can have cascading effects on multinational defense programs
DOJ-2024-DTSFTribunales nacionalesEstados Unidos
Sensitive technologies across multiple categories
The Disruptive Technology Strike Force, a joint DOJ/Commerce initiative, announced 26 criminal cases charging sanctions and export control violations related to transfer of sensitive technology to China, Russia, and Iran. Cases involved smuggling conspiracies, procurement networks, and technology transfer schemes across electronics, encryption, navigation, and aerospace categories.
Strike Force model combining DOJ prosecutors with BIS investigators represents new enforcement paradigm - criminal prosecution is now the default for willful export control violations involving strategic adversaries
26 cases across multiple technology categories shows breadth of enforcement - no single ECN category is immune from criminal prosecution
China, Russia, and Iran are the three primary enforcement targets - exports to these destinations face presumption of denial and enhanced scrutiny
EU-2024-WHITEPAPERComision EuropeaUnion Europea
Export control policy (White Paper)
The European Commission published a White Paper on enhancing EU export control enforcement, proposing stronger coordination between member state authorities, harmonized penalties, improved information sharing, and enhanced end-use monitoring. The paper identified gaps in enforcement of cyber-surveillance controls under Article 5.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
Enforcement gaps exist between EU member states - penalties for identical violations vary significantly across jurisdictions
Article 5 cyber-surveillance catch-all has been underutilized since its introduction - member states lack common criteria for applying the provision
Proposed enhanced end-use monitoring would require exporters to conduct post-shipment verification for sensitive destinations - shifting compliance burden from licensing to ongoing monitoring
BAFA classification guidance on industrial fiber lasers for metal cutting. A 10 kW CW fiber laser at 1070 nm wavelength was assessed under 6A005. While exceeding the power threshold, the laser was determined to be designed and marketed exclusively for material processing, which may qualify for the 'specially designed for material processing' note.
6A005 controls lasers based on output power, wavelength, pulse duration, and beam quality parameters
CW lasers exceeding specified power thresholds are prima facie controlled regardless of intended application
The 'specially designed for' material processing exception requires clear evidence: marketing materials, technical design limitations, beam delivery system not suitable for other applications
High-power industrial lasers (> 1 kW CW) require careful case-by-case analysis - power alone triggers 6A005 but application evidence may provide decontrol
BAFA-2024-ACADEMIABAFA (Alemania)Alemania
Academic research and technology transfer (guidance)
BAFA published updated guidance on export controls and academia, clarifying that fundamental research publications are generally exempt but applied research, technology transfer, and shipment of controlled materials by universities require export authorization. The manual specifically addresses the tension between academic freedom and dual-use technology controls.
Fundamental research exemption (Grundlagenforschung) does not cover applied research or technology with specific commercial/military applications - universities must classify their research outputs
Hosting visiting researchers from sanctioned countries at facilities with controlled technology constitutes deemed export requiring authorization
Shipment of biological materials, chemical samples, and software by university stock centers and laboratories requires the same export screening as commercial shipments - no blanket academic exemption exists
FR-2024-CUSTOMS-CODESBDU (Francia)Francia
All dual-use items (penalty framework)
Under Article 459 of the French Customs Code, export control violations carry penalties of double the transaction value for natural persons and 10 times the transaction value for legal persons. The SBDU (Service des Biens a Double Usage) processes license applications while investigation is conducted by customs agents and prosecution requires referral by the Minister of Economy.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
French penalties scale with transaction value - 10x multiplier for companies creates severe exposure for high-value dual-use exports
Prosecution requires ministerial referral (Minister of Economy) - adding a political filter to enforcement decisions that creates discretion in case selection
Investigation by customs agents followed by police referral creates dual-track enforcement - administrative customs process can escalate to criminal prosecution
BIS-2024-VSD-ENHANCEMENTBureau of Industry and Security (EE.UU.)Estados Unidos
All EAR items (compliance program guidance)
BIS released updated guidelines enhancing the Voluntary Self-Disclosure (VSD) program, providing stronger incentives for companies to report export control violations. Companies making timely, complete VSDs with corrective actions can receive up to 75% reduction in civil penalties, and BIS will generally not pursue criminal referral for self-disclosed violations.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
Up to 75% penalty reduction for voluntary self-disclosure makes VSD the single most important compliance tool - timely disclosure dramatically reduces enforcement exposure
Criminal referral generally waived for self-disclosed violations - creating strong incentive to disclose rather than conceal export control breaches
Corrective action must accompany disclosure - simply reporting a violation without implementing compliance improvements does not qualify for full VSD mitigation
BAFA-2024-AGG40BAFA (Alemania)Alemania
Certain chemicals listed in Annex I
BAFA introduced AGG No. 40 for export of certain chemicals listed in Annex I of the EU Dual-Use Regulation to India, and AGG No. 41 for spare parts up to 25% of main item value to all countries except weapons embargo destinations. These general authorizations were the second package of simplification measures.
Chemical precursors (1C350) can be exported under general authorization to specific countries like India - demonstrating differentiated risk assessment for Category 1 materials
Spare parts general authorization (AGG No. 41) applies a 25% value threshold relative to the main controlled item - partial simplification for aftermarket support
Weapons embargo countries are excluded from all general authorizations - embargoes remain absolute barriers regardless of simplification measures
DE-2024-AWG-PENALTIESBAFA (Alemania)Alemania
All controlled items (penalty framework)
Under Section 18 of the German Foreign Trade Act (AWG), willful violations of export control requirements carry penalties of up to 5 years imprisonment or fines. For violations involving items that could be used for WMD, biological or chemical weapons, penalties increase to up to 15 years imprisonment. Negligent violations carry reduced penalties of up to 3 years.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
15-year maximum imprisonment for WMD-related export violations is among the harshest in the EU - Germany treats proliferation-related exports as near-equivalent to weapons trafficking
Distinction between willful (5 years) and negligent (3 years) violations means compliance programs directly reduce criminal exposure
German prosecutors can seize profits from illegal exports under AWG - creating financial incentive for compliance beyond penalty avoidance
GUIDE-CAT0-NUCLEARComision EuropeaUnion Europea
Category 0 classification guide: Nuclear materials and equipment
Category 0 controls nuclear materials, facilities, and equipment. Key principle: many Category 0 items are controlled BY DEFINITION - meaning any quantity of the listed material is controlled (e.g., 0C001 depleted uranium, 0C002 thorium). Nuclear-specific equipment (0B001) has detailed sub-entries covering enrichment, reprocessing, and heavy water production.
0C001 controls ALL forms of depleted uranium - metal, alloys, compounds, concentrates. No quantity threshold.
0C002 controls ALL thorium - metal, alloys, thorium oxide. No purity threshold.
0B001 sub-entries cover specific enrichment technologies: gas centrifuge, electromagnetic, gaseous diffusion, laser, chemical exchange
0C004 controls special fissile materials (Pu-239, U-233) in ANY quantity
Category 0 items are almost always NSG (Nuclear Suppliers Group) origin - numbered 0x201-0x299
Technology (0E001) for development/production of Category 0 items is controlled even without the physical item
GUIDE-CAT1-MATERIALSComision EuropeaUnion Europea
Category 1 classification guide: Materials
Category 1 controls special materials including advanced composites, ceramics, metals, alloys, and chemicals. Chemical/biological items (1C350, 1C351) are controlled BY NAME - presence on the list means control regardless of quantity. Advanced materials (1C002, 1C008, 1C010) have specific performance thresholds (tensile strength, glass transition temperature, specific modulus).
1C350 chemicals and 1C351 biological agents are controlled BY NAME - any quantity of listed substances requires authorization
1C002 controls metal alloys (aluminum, titanium, nickel) based on specific tensile strength and elongation thresholds
1C008 controls polymers (polyimides, PEEK) based on glass transition temperature (Tg) thresholds
1C010 controls fibrous and filamentary materials based on specific modulus and specific tensile strength
Carbon fiber is one of the most commonly classified Category 1 items - T700-equivalent and above is generally controlled
CAS numbers in 1C350 entries provide definitive identification - always verify CAS number, not just chemical name
GUIDE-CAT2-MACHININGComision EuropeaUnion Europea
Category 2 classification guide: Machine tools and materials processing
Category 2 controls machine tools and materials processing equipment. The key threshold for CNC machine tools (2B001) is positioning accuracy of rotary axes combined with multi-axis contouring capability. Isostatic presses (2B004), dimensional inspection machines (2B006), and robots (2B007) have separate thresholds.
3A002 ADC thresholds: 10-bit resolution with > 1.0 GSPS sample rate, or 12-bit with > 1.0 GSPS, etc. (resolution-sample rate matrix)
3B001 semiconductor manufacturing equipment: lithography, etching, deposition, ion implantation equipment with specific performance thresholds
Consumer electronics (smartphones, consumer PCs) generally incorporate controlled components BUT the finished product is typically NOT controlled under 3A001
FPGA classification depends on logic gate density, encryption capability, and maximum operating frequency
Russia-specific sanctions add additional controls on 3A991 items below Annex I thresholds
GUIDE-CAT5-CRYPTOComision EuropeaUnion Europea
Category 5 classification guide: Telecom and Information Security
Category 5 has two parts: Part 1 (Telecommunications) and Part 2 (Information Security). Part 2 (5A002/5D002) is the most frequently classified category in the EU. Key: any item with encryption exceeding 56-bit symmetric key length is prima facie controlled under 5A002. The mass-market exemption (Note 3) decontrols most consumer products.
5A002 controls: symmetric encryption > 56 bits, asymmetric encryption based on factoring > 512 bits, elliptic curve > 112 bits
Note 3 (mass market) decontrols items that are: (a) generally available to the public at retail, AND (b) cryptographic functionality cannot easily be changed by the user
5A003 controls non-cryptographic information security: TEMPEST/EMSEC equipment, cable security devices
5A004 controls items designed to defeat information security: cryptanalytic devices, TEMPEST surveillance, jammer devices
5A001.f/j controls lawful intercept and network surveillance equipment - key entries for Article 5 cyber-surveillance catch-all
Open-source encryption software (e.g., OpenSSL) is exempt under the General Technology Note (public domain)
VPNs, HTTPS, TLS in commercial products: almost always decontrolled via Note 3
HSMs, key management systems, and bespoke crypto for government: usually controlled, Note 3 does NOT apply
GUIDE-CAT6-SENSORSComision EuropeaUnion Europea
Category 6 classification guide: Sensors and Lasers
Category 6 controls sensors, lasers, and related equipment. This category has the most complex threshold analysis because sensor performance depends on multiple interrelated parameters (resolution, sensitivity, frame rate, wavelength, cooling type). Thermal cameras (6A003), lasers (6A005), and acoustic sensors (6A001) are the most commonly classified items.
Category 7 classification guide: Navigation and Avionics
Category 7 controls navigation and avionics systems. Inertial navigation systems (INS) are the most commonly classified items, with 7A003 setting thresholds based on gyro drift rate, accelerometer bias, and overall navigation accuracy. GPS receivers are generally NOT controlled unless integrated with INS for military-grade accuracy.
7A003 controls INS/IMU with heading accuracy or True North determination below specified thresholds
Gyro drift rate < 0.5 degrees/hour typically triggers 7A003 control
Accelerometer bias stability < 130 micro-g triggers 7A003 control
MEMS-based consumer IMUs (smartphones, consumer drones) are typically NOT controlled - their drift rates are well above thresholds
GPS-aided INS (GPS/INS) must be assessed on the INS performance WITHOUT GPS aiding - GPS masking attack scenario
7A005 controls satellite navigation anti-jam equipment and military GPS receivers
GUIDE-CAT9-AEROSPACEComision EuropeaUnion Europea
Category 9 classification guide: Aerospace and Propulsion
Category 9 controls aerospace and propulsion systems. Gas turbine engines (9A001) are controlled based on thrust-to-weight ratio and specific fuel consumption. UAVs (9A012) are controlled when capable of range exceeding 300 km. Sounding rockets and space launch vehicles (9A004) have separate controls. MTCR-origin entries (9A1xx) have stricter thresholds for missile-capable systems.
9A001 gas turbine engines: thrust-to-weight ratio and specific fuel consumption determine control status
9A012 UAV threshold: 300 km range with autonomous flight capability - most commercial drones are well below this
9A004 controls sounding rockets capable of carrying 500 kg to 300 km range (MTCR Category I threshold)
9A110/9A120 are MTCR-origin entries with strict controls on complete rocket/missile systems and their production equipment
Space launch vehicle (SLV) technology is controlled because SLV and ICBM technology is largely fungible
Commercial aircraft (Boeing, Airbus) are NOT controlled under 9A001 - they are controlled under military lists (if applicable) or export freely
SE-2023-ISP-DENIAL-FDIISP (Suecia)Suecia
Dual-use items (Sweden annual statistics)
Sweden's ISP submitted six denial notifications in 2023 for exports to Saudi Arabia, Taiwan, and Vietnam. Also adopted Foreign Direct Investment screening (effective Dec 2023): 1,000 FDI notifications in first year, 21 screened, 2 prohibited investments.
ECN citados:Ningún ECN específico
Conclusiones clave (4)
Six Swedish denials targeted Saudi Arabia, Taiwan, and Vietnam - diversified beyond Russia/China/Iran pattern
ISP serves dual function as export control authority and FDI screening body - convergence of trade and investment security
Two prohibited FDI transactions demonstrate active blocking of foreign acquisitions of strategic technology companies
80% of FDI notifications resulted in no action - screening is targeted, not broadly restrictive
Munich Regional Court convicted former managers of FinFisher GmbH for unauthorized export of FinSpy surveillance software to Turkey's intelligence agency (MIT) without BAFA authorization. FinSpy is an intrusion software (4A005) capable of remotely accessing smartphones and computers. The software was used by Turkish authorities to monitor political opponents after the 2016 coup attempt.
First conviction in Germany for unauthorized export of surveillance/intrusion software
FinSpy/FinFisher is classified as intrusion software under 4A005/4D004 - not as a telecom interception device
Transfer via internet (electronic export) is subject to the same licensing requirements as physical export
The court found that the defendants knew the software would be used for political surveillance
Penalty: suspended prison sentences and significant fines, plus forfeiture of profits from the unauthorized sales
OFAC-2023-BINANCEBureau of Industry and Security (EE.UU.)Estados Unidos
Virtual currency exchange services
OFAC imposed a $968 million settlement - historic in scale - on Binance for sanctions violations involving Iran, Syria, North Korea, and Russia from August 2017 to October 2022. The Cayman Islands-based exchange knowingly allowed US persons and sanctioned entities to use its platform, with senior management awareness.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
Technology platforms providing access to sanctioned jurisdictions face export control enforcement even for non-physical goods - digital services are exports
Senior management knowledge combined with failure to self-disclose constitutes egregious conduct warranting maximum penalties
$968 million settlement demonstrates enforcement parity between traditional goods exports and digital/financial services in sanctions enforcement
BIS-2023-SEMICONDUCTOR-UPDATEBureau of Industry and Security (EE.UU.)Estados Unidos
Advanced semiconductors and manufacturing equipment
BIS updated export controls on advanced computing and semiconductor manufacturing equipment, expanding restrictions to close loopholes in the October 2022 rules. Updates included lower performance thresholds for controlled chips, expanded equipment controls, and new restrictions on cloud computing access providing controlled computing power to Chinese entities.
Semiconductor controls evolve rapidly - annual updates mean performance thresholds change frequently and exporters must continuously re-classify products
Cloud computing restrictions extend export controls to computing-as-a-service - providing AI training compute to restricted entities is now an export violation
Controls target both the chip (3A001) and the equipment to make it (3B001) - dual-track approach aims to prevent indigenous manufacturing capability development
EU Commission published interpretive guidance on semiconductor export controls under Category 3, following coordinated US-Japan-Netherlands restrictions. The guidance clarified thresholds for semiconductor manufacturing equipment (3B001), materials (3C001), and design software (3D001/3E001). It emphasized that EU controls focus on equipment capability, not product node designation.
Category 3 controls semiconductor equipment based on measurable performance parameters, not marketing claims about 'technology node'
3B001 thresholds for lithography are based on minimum resolvable feature size, overlay accuracy, and throughput
EDA (electronic design automation) software is controlled under 3D001/3E001 when designed for sub-threshold IC design
Semiconductor materials (3C001) include specific substrate materials by composition and purity thresholds
EU maintains independent control lists from US ECCN - items may be controlled differently between EU and US systems
DOJ-2023-IRAN-ELECTRONICSTribunales nacionalesEstados Unidos
Electronic equipment and technology
A dual Iran/US citizen was sentenced to 30 months imprisonment for using UAE front companies to illegally export electronic equipment and technology to Iran, including to Iran's Central Bank. The prosecution demonstrated systematic use of shell companies to circumvent export controls on controlled electronics.
UAE front companies are the most common intermediary structure for Iran procurement networks - exporters must conduct enhanced due diligence for UAE-destination transactions involving sensitive electronics
Exports to Iran's Central Bank trigger both export control and sanctions violations - financial institutions in sanctioned countries are high-priority enforcement targets
30-month prison sentence for individual violators demonstrates criminal enforcement against persons, not just corporate penalties
BAFA confirmed that commercial VPN routers with AES-256 encryption sold through standard retail channels qualify for the Crypto Note 3 (mass market) exemption under Category 5 Part 2. All four criteria must be met: (1) generally available to the public, (2) sold without restriction at retail, (3) cryptographic functionality cannot easily be changed by the user, and (4) design details available to the competent authority upon request.
5A002 controls cryptographic items with key length exceeding 56 bits for symmetric algorithms
Crypto Note 3 (mass market exemption) decontrols items meeting ALL four criteria - partial compliance is insufficient
Consumer routers, smartphones, laptops with standard encryption are typically decontrolled via Note 3
Enterprise-grade crypto devices with user-configurable algorithms or custom key management generally do NOT qualify for Note 3
The exporter bears the burden of demonstrating Note 3 compliance - self-classification with documentation is expected
BAFA-2023-AGG37BAFA (Alemania)Alemania
All Annex I dual-use items (general authorization scope)
BAFA introduced Allgemeine Genehmigung (AGG) No. 37 permitting export of all Annex I items to Argentina, Chile, Korea, Mexico, Singapore, and Uruguay without individual license. This was part of Germany's first package of measures to simplify export procedures for partner countries.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
General authorizations (AGG) can cover ALL Annex I items to specific low-risk destinations - eliminates individual licensing for trusted partner countries
AGG No. 37 demonstrates risk-based approach: trusted destinations get simplified procedures while high-risk countries retain case-by-case assessment
Exporters using general authorizations must still maintain records and comply with end-use monitoring - the authorization simplifies licensing, not compliance obligations
DDTC-2023-VTABureau of Industry and Security (EE.UU.)Estados Unidos
Defense articles and technical data (telecom)
VTA Telecom Corporations received 3-year administrative debarment for unauthorized exports and attempted exports of defense articles and technical data to Vietnam. Violations included willful conduct, false statements on end-use certificates, and were discovered during a DOJ investigation and search warrant execution.
Administrative debarment is the most severe non-criminal penalty - completely bars the company from US defense trade for the debarment period
False statements on end-use certificates are independently prosecutable offenses that trigger aggravating factor treatment in penalty calculations
Search warrant execution indicates criminal investigation threshold was met - civil administrative debarment was chosen as the enforcement tool but criminal prosecution remained available
AT-2023-ROTAX-ENGINETribunales nacionalesAustria
Aircraft engines found in Iranian/Russian drones
Austrian authorities investigated BRP-Rotax after its Rotax 912 aircraft engines were found in Iranian Mohajer-6 and Shahed-series drones used by Russia in Ukraine. While Rotax had not directly exported to Iran, the engines reached Iran through complex supply chains. The case demonstrated the importance of end-use monitoring for aerospace components.
Aircraft engines are controlled under 9A001/9A012 based on thrust, power, and design characteristics
Small aircraft engines (< 400 hp) widely used in general aviation may end up in military UAVs through diversion
The manufacturer has an obligation to implement reasonable due diligence even for items sold through authorized distributors
Austrian authorities work closely with EU sanctions enforcement to trace supply chain diversions
Post-diversion investigations can lead to export license revocations and enhanced end-user screening requirements
DOJ-2023-DES-SOLTECHTribunales nacionalesEstados Unidos
Power amplifiers, cybersecurity software
DES International (Taiwan) and Soltech Industry (Brunei) each received fines and 5-year corporate probation for conspiracy to export power amplifiers and cybersecurity software to Iran in violation of export controls and sanctions. The case demonstrated use of Asian intermediary companies to circumvent Iran export restrictions.
Corporate probation (5 years) for foreign companies demonstrates extraterritorial enforcement of US export controls - non-US companies transacting in US-origin items face US jurisdiction
Power amplifiers (3A001) and cybersecurity software (5A002/5D002) are high-priority enforcement items for Iran - combination of electronic hardware and software in a single case
Asian intermediary companies (Taiwan, Brunei) used as transshipment points - exporters must verify ultimate end-use beyond immediate customer
Netherlands imposed unilateral export controls on ASML's DUV lithography machines, classifying them as dual-use items requiring export licenses for China-bound sales. EUV machines had been restricted since 2019 under US pressure. The Dutch decree specifically targeted immersion DUV systems capable of producing advanced semiconductors below 14nm.
National unilateral controls can restrict items not on the Wassenaar or EU Annex I lists - Netherlands acted independently on semiconductor equipment
ASML's global monopoly on EUV/DUV lithography makes Netherlands the de facto gatekeeper for global semiconductor manufacturing technology
DUV classification as dual-use demonstrates that older technology generations can become controlled when they enable strategic capabilities (advanced chip production for China)
DOJ-2023-IRAN-MISSILETribunales nacionalesEstados Unidos
Technology for ballistic missiles and UAVs
Five individuals from Iran, Turkey, and UAE were charged under the Arms Export Control Act and IEEPA for attempted export of technology for Iran's ballistic missile and UAV programs. The procurement network operated from 2005 to 2013, spanning nearly a decade before detection and prosecution.
Ballistic missile technology (Category 9, MTCR items) is the highest enforcement priority for Iran-related cases - any export supporting missile capability triggers maximum penalties
Procurement networks spanning Iran, Turkey, and UAE represent typical geographic pattern - Turkey and UAE are primary intermediary countries for Iran technology acquisition
8-year investigation timeline (2005-2013) demonstrates that complex procurement network cases require years of intelligence gathering before prosecution
Spyware and surveillance software (Pegasus, Predator)
Following the European Parliament's inquiry into use of Pegasus and equivalent surveillance spyware in EU member states, the PEGA Committee recommended strengthened export controls on cyber-surveillance items, including mandatory human rights impact assessments before granting export licenses and a moratorium on exports to countries with documented misuse.
Pegasus/Predator cases demonstrated that EU member state governments themselves procured surveillance tools - creating tension between national security and export control regimes
PEGA Committee recommended export moratorium to documented misuse countries - if implemented, would create a presumption of denial for cyber-surveillance items to those destinations
Parliamentary oversight of export licensing is increasing - future regulation may require parliamentary notification of sensitive cyber-surveillance exports
BAFA-2023-CNC-5AXISBAFA (Alemania)Alemania
5-axis CNC milling machine
BAFA classification ruling on DMG MORI 5-axis CNC machining centers. The machine had positioning accuracy of 0.002 degrees (below the 0.003 degree threshold in 2B001.b) and simultaneous 5-axis contouring control capability, making it controlled under 2B001.
2B001 controls machine tools with 2+ rotary axes that can be coordinated for contouring control AND have positioning accuracy less (better) than 0.003 degrees
Both conditions must be met simultaneously - a 5-axis machine with 0.005 degree accuracy is NOT controlled under 2B001
Positioning accuracy is measured at the rotary axis, not at the tool tip - manufacturer spec sheets typically provide the correct value
Standard industrial CNC machines (3-axis, or 5-axis with > 0.003 degree accuracy) are generally NOT controlled
BIS-2023-ARATOSBureau of Industry and Security (EE.UU.)Estados Unidos
Critical technologies (procurement network)
BIS issued a Temporary Denial Order (TDO) suspending export privileges of the Aratos Group, a network of defense-related companies in the Netherlands and Greece, for acting as a procurement network for Russian intelligence services. The network procured items across multiple ECN categories for sanctioned end-users.
Temporary Denial Orders can be issued pre-conviction to immediately block export privileges of suspected procurement networks
Procurement networks operating through EU-based companies to acquire US-origin controlled technology for Russian intelligence represent a major enforcement priority
Multi-jurisdictional networks spanning EU member states require coordinated US-EU enforcement response
Munich Public Prosecutor indicted four managers of the FinFisher corporate group for intentionally violating dual-use export licensing requirements by selling FinSpy surveillance software to Turkey's National Intelligence Organization in 2015 without authorization, through a Bulgarian front company. The contract was worth 5.04 million euros. FinFisher subsequently filed for insolvency in March 2022.
Intrusion software (4A005/4D004) requires export authorization to non-EU destinations - Germany has not granted a single license for intrusion software since 2015
Using front companies in other EU member states to circumvent export controls constitutes criminal evasion under German Foreign Trade Act (AWG)
First major EU criminal prosecution for cyber-surveillance export control violations under the Dual-Use Regulation - landmark case for Article 5 enforcement
DOJ-2023-BOGONIKOLOSTribunales nacionalesEstados Unidos
Quantum computing equipment, military antennas, advanced electronics
Greek head of NATO contractor Aratos Group indicted for smuggling US-origin military technologies to Russian intelligence (SVR) and Military Unit 33949 since 2017. Technologies included quantum computing and nuclear testing equipment. He falsified end-use documentation claiming items were for 'recreational maritime vessels.' Arrested in France, extradition proceedings pending.
NATO contractors with security clearances can be exploited as procurement channels for adversary intelligence services - insider threat is real
False end-use statements claiming military items are for recreational use are a classic red flag pattern documented across multiple enforcement cases
Multi-country arrest and extradition proceedings (Greece-France-US) demonstrate international enforcement cooperation across NATO allies
DDTC-2023-ISLAND-PYROBureau of Industry and Security (EE.UU.)Estados Unidos
Ammonium perchlorate (rocket propellant oxidizer)
Island Pyrochemical Industries Corp. paid $850,000 ($425,000 suspended for compliance) for unauthorized brokering of ammonium perchlorate from China to Brazil and making false license statements. A Special Compliance Officer was appointed with independent audit requirements.
Rocket propellant precursors (ammonium perchlorate, 1C111) are controlled under MTCR - brokering from third countries still triggers US jurisdiction if the broker is a US person
Brokering activities (arranging transactions without physical possession) are independently controlled - intermediaries who never touch the goods can still violate export controls
$425,000 suspended portion incentivizes compliance investment - reduction contingent on demonstrated compliance improvements within specified timeframe
OFAC-2023-BATBureau of Industry and Security (EE.UU.)Estados Unidos
Tobacco products, equipment, and services
British American Tobacco paid $508 million to OFAC and $629 million to DOJ for 16 violations of WMD/North Korea sanctions. BAT maintained a 60% stake joint venture enabling a billion-dollar cigarette industry in North Korea with willful conduct, senior management involvement, and active concealment.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
Sanctions violations involving WMD-designated countries (North Korea) carry the highest penalties regardless of product type - tobacco is not dual-use but WMD sanctions apply broadly
Active concealment and senior management involvement are the most severe aggravating factors in sanctions enforcement
Combined DOJ/OFAC penalties can exceed $1 billion - demonstrating that sanctions enforcement now rivals antitrust in penalty magnitude
BIS-2023-SEAGATEBureau of Industry and Security (EE.UU.)Estados Unidos
Hard disk drives
BIS imposed a $300 million civil penalty - the largest standalone BIS penalty ever - on Seagate Technology for 429 violations of the EAR. Seagate continued shipping millions of hard disk drives to Huawei after Huawei was placed on the Entity List, between August 2020 and September 2021.
Spanish court convicted executives of Defex S.A. (state-owned defense exporter) for corruption and illegal arms/dual-use exports through systematic bribery. The case revealed how dual-use items were misclassified as civilian goods to avoid export controls, highlighting the importance of accurate classification.
ECN citados:Ningún ECN específico
Conclusiones clave (4)
Deliberate misclassification of dual-use items as civilian goods to avoid export controls constitutes fraud
State-owned enterprises are not exempt from export control prosecution
Bribery of foreign officials in connection with controlled exports adds separate criminal charges
Spanish export control authority (JIMDDU) increased post-shipment inspections following this case
BIS-OFAC-2023-MICROSOFTBureau of Industry and Security (EE.UU.)Estados Unidos
Software licenses and services
Microsoft paid $3.3 million in combined BIS/OFAC penalties for over 1,300 violations involving provision of software and services to SDNs, blocked persons, and sanctioned jurisdictions through its foreign subsidiaries. The case was characterized as involving reckless disregard despite self-disclosure.
Amsterdam District Court issued judgment on export of machinery from the Netherlands to Crimea in 2016-2017 for construction of the Kerch Bridge connecting Russia to annexed Crimea. The case tested EU sanctions enforcement for infrastructure projects in occupied territories.
Exports to occupied territories (Crimea) fall under EU sanctions regardless of the civilian nature of the goods - construction machinery for infrastructure violates territorial sanctions
Court judgments on Crimea-related exports provide precedent for sanctions enforcement in occupied/annexed territories
End-use in a sanctioned territory overrides any classification-based analysis - even non-dual-use items cannot be exported to Crimea
BAFA classification of high-performance FPGA development boards (Xilinx/AMD Versal, Intel Agilent). The ruling established that FPGAs must be assessed under 3A001 (as electronic components) and their computing capability under 4A003 (APP threshold). FPGAs exceeding 70 Weighted TFLOPS APP are controlled.
FPGAs are classified primarily under 3A001 as electronic components, with 4A003 applying for computing performance
The Adjusted Peak Performance (APP) calculation for FPGAs follows the methodology in Technical Note to 4A003 - DSP blocks count as processing elements
Development boards with evaluation FPGAs may be treated differently from production FPGAs in some cases
FPGA bitstream encryption does NOT trigger 5A002 classification if the encryption protects only the FPGA design (not user data)
BIS-DDTC-2023-3DSYSTEMSBureau of Industry and Security (EE.UU.)Estados Unidos
Aerospace blueprints, military electronics, design documents
3D Systems Corporation was fined $2.7 million by BIS and $20 million by DDTC for multiple violations including illegal shipment of U.S.-origin aerospace blueprints and military electronics to China, and controlled design documents to Germany. The company continued exports after discovering its own violations.
DOJ-2023-DTSF-FORMATIONBureau of Industry and Security (EE.UU.)Estados Unidos
All sensitive technologies (multi-agency enforcement)
DOJ and Commerce formed the Disruptive Technology Strike Force to target illicit acquisition of sensitive US technologies by nation-state adversaries, primarily China, Russia, and Iran. The Strike Force combines FBI agents, BIS investigators, and federal prosecutors into dedicated enforcement teams across 12 US metropolitan areas.
Strike Force model marks shift from reactive to proactive export control enforcement - dedicated teams actively investigate technology transfer networks
12 metropolitan locations correspond to major technology and trade hubs - Silicon Valley, Boston, New York, Houston among priority areas
Criminal prosecution is the preferred enforcement tool for Strike Force cases - civil penalties reserved for less egregious violations, willful technology transfer gets criminal treatment
UK-2023-HMRC-RECORDECJU (Reino Unido)Reino Unido
Military goods (company not publicly identified)
HMRC imposed its largest-ever compound penalty of GBP 2.7 million for unlicensed exports of military goods. The company identity and specific details were not publicly disclosed due to the civil settlement mechanism. This marked a 50x increase from the GBP 54K maximum compound penalties seen in 2021.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
UK compound penalties escalated from GBP 54K in 2021 to GBP 2.7M in 2023 - a dramatic increase signaling serious enforcement intent
Anonymous civil settlement mechanism allows HMRC to impose significant penalties without public prosecution but limits transparency and deterrent effect
Compound penalties can reach up to 3x the value of goods exported - creating substantial financial exposure for unlicensed exports
French customs investigated unauthorized re-export of submarine sonar components to a non-authorized end-user. The components, classified under 8A001 (underwater detection equipment) and 6A001 (acoustic systems), were originally licensed for a NATO partner but diverted through a third country.
8A001 controls underwater detection systems designed to operate at depths exceeding 35 m with specific accuracy requirements
Re-export of controlled items to unauthorized end-users violates the original license conditions even when the re-exporter is in a friendly country
Submarine sonar systems with specific acoustic performance parameters are among the most sensitive dual-use items
End-user certificates must be verified by the exporter - a false certificate does not exonerate the original exporter from due diligence obligations
BAFA-2022-THERMAL-CAMERABAFA (Alemania)Alemania
Thermal imaging camera (uncooled)
BAFA ruled that uncooled thermal cameras (microbolometer-based) with NETD worse than 50 mK and frame rate below 9 Hz are NOT controlled under 6A003. The ruling clarified that low-end thermal cameras for building inspection and HVAC applications do not meet the performance thresholds.
Danish subsidiary of Swedish Alfa Laval was fined 100,000 DKK (EUR 13,400) for attempting to export centrifuge parts to Russia in June-August 2022. Exports were never completed but attempted violation was still prosecuted - one of the earliest EU sanctions enforcement actions post-February 2022.
Centrifuge parts are dual-use items (2B350 for chemical processing) that can serve both civilian and military/WMD applications
Even attempted exports that were never completed can result in prosecution - intent to violate sanctions is sufficient
Multinational subsidiaries must ensure compliance across all EU jurisdictions independently
One of the earliest post-February 2022 enforcement actions, setting precedent for subsequent prosecutions
BIS-2022-QUICKSILVER-3DBureau of Industry and Security (EE.UU.)Estados Unidos
Technical drawings for satellite, rocket, and defense prototypes
Three co-located 3D printing companies (Quicksilver Manufacturing, Rapid Cut, US Prototype) received controlled technical drawings from US customers to print prototypes, then without customer knowledge, sent the drawings to Chinese manufacturers for cheaper production. Items included satellite and rocket component blueprints. BIS issued Temporary Denial Order suspending all export privileges.
Outsourcing manufacturing to China without customer consent or export authorization is a violation even when the physical goods are imported back to the US
3D printing service providers are exporters when they transmit technical data internationally - the data transfer is the controlled export, not the physical part
TDOs can be issued immediately to prevent ongoing harm without waiting for full investigation - instant suspension of export privileges
Following Russia's invasion of Ukraine, the EU imposed a comprehensive ban on exports of all Annex I dual-use items to Russia under Council Regulation 833/2014 as amended. The ban covers all 10 categories with limited exceptions for humanitarian, medical, and pre-existing contractual obligations. This transformed dual-use export controls from a licensing regime to a near-total prohibition for Russia.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
Russia export ban converts the licensing regime into a prohibition - items that previously required individual licenses are now banned entirely
Limited exceptions exist for medical devices, humanitarian aid, and cybersecurity for civilian use - exporters must document the exception basis
Pre-existing contract exceptions require notification to competent authorities and do not extend beyond the original contract scope - no renewals or extensions under the exception
Entry into force of Regulation (EU) 2021/821 recasting the EU Dual-Use framework. Key changes: Article 5 cyber-surveillance catch-all, Article 2(21) new definition of 'cyber-surveillance items', enhanced due diligence obligations, autonomous EU controls for emerging technologies (Art 4.3-4.5), and improved transparency through annual reporting.
ECN citados:Ningún ECN específico
Conclusiones clave (5)
Article 5 creates EU-wide catch-all for cyber-surveillance items regardless of Annex I listing
Regulation introduces concept of 'internal compliance programme' (ICP) as best practice for exporters
Technology transfers (including electronic/cloud) are explicitly within scope
Member States must report annually on licensing decisions to the Dual-Use Coordination Group
EU can adopt delegated acts to add emerging/disruptive technologies to Annex I faster than the Wassenaar process
FR-2021-AMESYS-NEXATribunales nacionalesFrancia
Internet surveillance system (EAGLE/Cerebro)
French Tribunal Judiciaire de Paris indicted Nexa Technologies (formerly Amesys) for complicity in torture in Libya and Egypt. The company sold the EAGLE internet surveillance system to Gaddafi's Libya (2007) and the Cerebro system to al-Sisi's Egypt (2014). Both systems were capable of nationwide internet interception and could identify political dissidents.
Deep packet inspection (DPI) and lawful intercept systems capable of mass surveillance are controlled under 5A001.f and 5A001.j
Sale of surveillance technology to authoritarian regimes can constitute complicity in human rights violations under French criminal law
Article 5 of EU Regulation 2021/821 (cyber-surveillance catch-all) was specifically designed to address cases like Amesys/Nexa
The prosecution established that the exporter knew or should have known the technology would be used for political repression
First criminal prosecution in the EU for export of surveillance technology used for repression
DOJ-2021-THERMAL-RUSSIATribunales nacionalesEstados Unidos
Thermal imaging scopes and night vision goggles
Five individuals were charged in a scheme to illegally export thermal imaging scopes and night vision goggles to Russia in violation of the Arms Export Control Act. The thermal imaging equipment (classifiable under 6A003 or USML) was procured in the US and shipped to Russia through intermediaries.
Thermal imaging equipment (6A003) with military-grade specifications is among the most tightly controlled sensor items - export to Russia triggers both dual-use and ITAR restrictions
Procurement networks using intermediaries and transshipment points are the primary method for evading export controls on sensors - enforcement focuses on the supply chain
Night vision and thermal imaging are treated as equivalent in enforcement priority - both 6A002 (image intensifiers) and 6A003 (thermal) face maximum scrutiny for Russia destinations
DOJ-2021-THERMAL-NV-RUSSIATribunales nacionalesEstados Unidos
Thermal imaging scopes and night vision goggles
Five individuals were charged with conspiracy to illegally export thermal imaging scopes and night vision goggles to Russia in violation of the Arms Export Control Act. The defendants operated a procurement network purchasing equipment in the US for transshipment to Russia through intermediary countries.
Thermal imaging (6A003) and night vision (6A002) equipment are dual-use items that also fall under ITAR when military-grade - exporters must determine if dual-use or military classification applies
Procurement networks for Russia specifically target night vision and thermal sensors - these are among the most actively smuggled dual-use items
Conspiracy charges apply to all participants in the supply chain - purchasers, shippers, and intermediaries all face criminal liability
BIS-2021-PHOTONICSBureau of Industry and Security (EE.UU.)Estados Unidos
RGH-1064-30 picosecond laser systems
Photonics Industries International settled for $350,000 ($300K suspended) for exporting 25+ picosecond laser systems to China without licenses after misclassifying them as EAR99 instead of 6A005.b.6.b. The company also falsified EEI filings listing Hong Kong as the destination when true consignees were in China, including Entity-Listed Sichuan University.
Product misclassification (6A005 vs EAR99) is one of the most common root causes of export violations - self-classification without guidance is high-risk
Listing Hong Kong as destination when China is the true end-use location is a documented red flag that triggers enhanced enforcement scrutiny
Absence of any export control compliance program including no restricted party screening is a significant aggravating factor in penalty determination
DDTC-2021-HONEYWELLBureau of Industry and Security (EE.UU.)Estados Unidos
ITAR-controlled aerospace engineering drawings
Honeywell committed 34 AECA/ITAR violations by exporting engineering drawings to foreign suppliers in Canada, Mexico, Ireland, China, and Taiwan for quote requests without authorization (2011-2015). $13 million penalty ($5M suspended for compliance). Two voluntary disclosures submitted in 2016 and 2018.
Sending engineering drawings to foreign suppliers even for quote or bidding purposes constitutes an export requiring authorization
Request-for-quote processes must be integrated into export compliance workflows - procurement teams need compliance training
Voluntary self-disclosure mitigated but did not eliminate penalties - $13M demonstrates significant consequences even with full cooperation
DOJ-2021-SAPBureau of Industry and Security (EE.UU.)Estados Unidos
Software products and cloud services
SAP admitted to thousands of illegal software exports to Iran over 7 years (2011-2017), including approximately 2,360 Iranian users accessing US-based cloud services. SAP acquired companies with inadequate compliance programs and failed to integrate them. $8 million combined penalty plus $27 million spent on compliance remediation. First Non-Prosecution Agreement under DOJ's revised VSD Policy.
Cloud services accessed by sanctioned-country users constitute exports under EAR - geo-blocking and user screening are mandatory compliance requirements
Acquirers inherit export control liability from acquired companies - pre-acquisition due diligence must include export compliance assessment
First NPA under DOJ's revised VSD Policy demonstrates substantial credit for voluntary disclosure plus $27M remediation investment
BIS-2021-ENC-MASSMARKETBureau of Industry and Security (EE.UU.)Estados Unidos
BIS clarified that hardware and software items meeting Note 3 mass-market criteria are classified as 5A992.c and 5D992.c rather than 5A002/5D002, removing most licensing requirements. Key criteria include: sold at retail without restriction, crypto not user-modifiable, user-installable, and designed for broad consumer market. Items like consumer routers, VPN software, and smartphones typically qualify.
Mass-market crypto items reclassify from 5A002 to 5A992 - this is a classification shift, not an exemption, meaning the item is genuinely not controlled under 5A002
Routers where encryption serves only operations/administration/maintenance (OAM) functions are excluded from 5A002 under a separate decontrol note - OAM crypto is not the same as mass-market
Network infrastructure products, encryption source code, general-purpose crypto toolkits, and cryptanalytic items never qualify for mass-market treatment regardless of retail availability
BIS-2021-PRINCETONBureau of Industry and Security (EE.UU.)Estados Unidos
Animal pathogen strains and recombinants
Princeton University settled 37 violations for exporting controlled pathogen strains (Nov 2013-Mar 2018) to overseas research institutions in 16 countries without required licenses. Items controlled for Chemical and Biological Weapons reasons under 1C351. $54,000 penalty plus audit requirements. Self-disclosed during 2018 compliance training.
Research pathogens controlled under 1C351 require export licenses regardless of the scientific or academic nature of the transfer
Voluntary self-disclosure during internal compliance training demonstrates good faith and significantly mitigates penalties - $54K vs potential millions
Universities must screen biological material shipments against export control lists with the same rigor as commercial entities
DDTC-2020-L3HARRISBureau of Industry and Security (EE.UU.)Estados Unidos
Defense articles and technical data
L3Harris Technologies settled AECA/ITAR violations under a 36-month Consent Agreement requiring external audit and enhanced compliance measures. $13 million penalty for violations involving unauthorized exports of defense articles resulting from classification errors and licensing failures during the L3 Technologies-Harris Corporation merger integration.
Defense industry consolidation through mergers creates compliance integration challenges - acquired product lines may have different classification histories
$13M penalty for a major defense contractor demonstrates DDTC enforces against the largest companies without exception
36-month consent agreements with external audit requirements create extended compliance oversight beyond the initial settlement
SIPRI published a comprehensive study on detecting, investigating, and prosecuting export control violations across EU member states, finding that criminal proceedings are relatively rare (generally double-digit numbers per country per year) and penalties vary widely. The study recommended harmonized enforcement approaches and improved intelligence sharing between customs authorities.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
Criminal prosecutions for export control violations in Germany are typically in the double digits annually - enforcement is selective, targeting the most egregious violations
Detection primarily relies on customs screening and intelligence tips rather than systematic monitoring - reactive rather than proactive enforcement model
Penalties across EU member states lack harmonization - the same violation can result in a warning letter in one country and criminal prosecution in another
DOJ-2019-POURGHANNAD-CARBONTribunales nacionalesEstados Unidos
Carbon fiber (aerospace/weapons grade)
Iranian national Behzad Pourghannad sentenced to 46 months federal prison for conspiracy to procure carbon fiber from the US and divert it to Iran through third countries (2008-2013). Iran planned to use the material for centrifuge rotors and ballistic missile nose cones. Arrested in Germany in 2017, extradited to US.
Carbon fiber (1C010) destined for Iran's missile and nuclear programs is a top enforcement priority - centrifuge rotors and missile nose cones require high-grade fiber
Arrest in Germany and extradition to the US demonstrates transatlantic enforcement cooperation in proliferation cases
46-month sentence for a procurement facilitator reflects the seriousness of WMD-related material diversion
DOJ-2019-OCEANWORKSTribunales nacionalesEstados Unidos
Navy submarine rescue diving recompression system technical data
Canadian Navy contractor OceanWorks International and president Glen Omer Viau pled guilty to concealing transfer of US Navy submarine rescue technical data to China's PLA. $84,000 company fine plus $25,000 individual fine. OceanWorks held the contract for the Navy's SRDRS submarine rescue system and misrepresented data transfers to Commerce.
Navy contractors with access to submarine technology have unique knowledge that adversaries actively seek to acquire through legitimate business channels
Concealing the nature of technology transfers from the Commerce Department constitutes a separate criminal offense beyond the underlying export violation
Canadian companies operating as US government contractors are fully subject to US export controls - no foreign company exemption for defense contracts
NL-2019-ASML-EUVTribunales nacionalesPaises Bajos
EUV lithography systems (TWINSCAN NXE series)
The US government convinced the Dutch government not to renew ASML's export license for EUV lithography machines to China before the expiry date of June 30, 2019. This occurred before ASML had exported a single EUV machine to China, effectively preventing any EUV technology transfer to Chinese chipmakers. EUV is on the Wassenaar Arrangement list.
EUV lithography is explicitly listed on the Wassenaar Arrangement dual-use list (3B001) - unlike DUV which required national controls, EUV control is internationally agreed
Diplomatic pressure can effectively block exports even without formal legal proceedings - the license simply was not renewed
Pre-emptive export denial before any shipment occurs demonstrates that export controls can operate as strategic technology denial tools, not just after-the-fact enforcement
Belgian court convicted AAE Chemie trading company for illegally exporting 168 tonnes of isopropanol to Syria between 2014-2016, knowing the chemical could be used as a precursor for sarin nerve agent. The company used false end-user certificates and routed shipments through Lebanon.
Chemical precursors listed in 1C350 are controlled regardless of the stated civilian end-use when the destination raises WMD concerns
Isopropanol is a dual-use chemical - legitimate industrial solvent but also precursor for sarin and other chemical weapons
False end-user certificates constitute a criminal offense independent of the underlying export control violation
Belgian courts can impose both criminal penalties (imprisonment) and civil forfeiture for export control violations
The prosecution successfully proved 'knowledge or reasonable suspicion' of military end-use based on destination (Syria during chemical weapons attacks) and volume
77-year-old Bristol pensioner Alexander George convicted at the Old Bailey for trafficking fighter jet parts to Iran through companies in BVI, Netherlands, and Malaysia. When questioned at Heathrow, claimed he dealt in wheelbarrows and goggles. HMRC estimated profits of GBP 5 million. 2.5 years prison plus GBP 700K confiscation.
Multi-hop transshipment routes (US to UK to Netherlands to Malaysia to Iran) are a classic evasion pattern for arms embargo circumvention
Lies to customs officers at airports are independently prosecutable and demonstrate consciousness of guilt - always an aggravating factor
HMRC's GBP 700K confiscation under Proceeds of Crime Act demonstrates that profits from illegal exports will be systematically recovered
DDTC-2018-FLIRBureau of Industry and Security (EE.UU.)Estados Unidos
Infrared cameras and thermal imaging defense articles
FLIR Systems committed 347 ITAR violations including 219 counts of unauthorized deemed exports to dual-national employees from Iran, Iraq, Lebanon, and Cuba, plus 106 license management failures and 20 counts of failing to disclose payments. $30 million penalty ($15M suspended for compliance remediation). One of the largest deemed export enforcement cases in history.
219 deemed export violations from sharing ITAR data with foreign-national employees shows the systemic risk when access controls are not nationality-based
Deemed export rules apply to sharing controlled technical data with foreign nationals working in the US - no physical border crossing needed
Companies must screen employees' nationalities against sanctioned and embargoed countries before granting access to controlled technical data
Swedish ISP (Inspektionen for Strategiska Produkter) investigated Ericsson for unauthorized supply of telecommunications equipment to sanctioned entities. While Ericsson cooperated and settlements were reached, the case highlighted that standard telecom infrastructure (base stations, switches) can be controlled under 5A001 when destined for embargoed countries or military end-users.
Standard telecommunications infrastructure (base stations, core network equipment) can be controlled under 5A001
5A001 controls are triggered by specific performance parameters, not merely by being telecom equipment
Telecom equipment exported to embargoed countries requires specific authorization even if the equipment itself is below Annex I thresholds (catch-all provisions apply)
Corporate compliance programs are considered as mitigating factors in enforcement proceedings
Encryption hardware and software (general guidance)
ECJU published authoritative guidance on the Cryptography Note (Note 3 to Category 5 Part 2) clarifying the four criteria for mass-market decontrol of encryption items. Items that would otherwise be classified 5A002 or 5D002 are decontrolled if they meet ALL four criteria: available at retail without restriction, crypto not user-modifiable, user-installable without substantial support, and details available to competent authority.
Consumer smartphones, general-purpose operating systems, home routers with standard encryption, and game consoles typically qualify for Note 3 decontrol
Products requiring specialist installation, with user-modifiable crypto algorithms, or sold only to specialized professional groups do NOT qualify
WiFi chips, Zigbee chips for IoT, and GSM modems qualify under Note 3b as components for mass-market items - information security must not be their primary function
DOJ-2017-SUN-CARBON-FIBERTribunales nacionalesEstados Unidos
High-grade carbon fiber
Chinese national Fuyi Sun sentenced to 3 years federal prison for violating IEEPA by attempting to illegally export high-grade carbon fiber to China without a license. The carbon fiber has primary applications in aerospace and military sectors including missile and aircraft construction.
Chinese nationals operating within the US who attempt to procure controlled materials face significant prison sentences - 3 years for attempted export
Carbon fiber remains one of the most frequently intercepted controlled materials in export enforcement - high demand from adversary countries
Attempted export carries the same criminal penalties as completed export - interception before shipment does not reduce sentencing
DOJ-2017-ZTEBureau of Industry and Security (EE.UU.)Estados Unidos
Telecommunications equipment and components
ZTE illegally shipped US-origin telecom equipment to Iran and North Korea, then obstructed justice by lying to investigators and failing to discipline employees involved. The $1.19 billion combined penalty (DOJ + BIS + OFAC) was the largest ever for export control violations at the time. A $300M suspended portion was later activated in 2018 when ZTE violated settlement terms by lying about employee discipline.
$1.19B was the largest export control penalty in history - setting a new benchmark for enforcement severity that stood until Seagate
Obstruction of investigation and failure to discipline responsible employees triggered activation of the $300M suspended penalty
Settlement agreement violations (lying about employee discipline) prove that post-settlement compliance is actively monitored and penalties can escalate
IT-2015-HACKINGTEAMTribunales nacionalesItalia
Intrusion software (RCS/Galileo)
Italian authorities investigated Hacking Team (now Memento Labs) for selling its Remote Control System (RCS/Galileo) intrusion software to Sudan, Ethiopia, and other countries with poor human rights records. The software, classified as intrusion software under 4A005/4D004, was exported without proper authorization. The 2015 WikiLeaks disclosure of Hacking Team's internal emails revealed the scope of unauthorized exports.
Intrusion software (4A005/4D004) is controlled as a dual-use item under the Wassenaar Arrangement and EU Regulation
Remote access trojans (RATs) designed for covert surveillance are controlled regardless of whether they are marketed as 'lawful intercept' tools
Italy's MISE (Ministry of Economic Development) is the competent authority for dual-use export licenses - export without license is a criminal offense
The Wassenaar Arrangement added intrusion software controls in 2013 - the EU transposed them in 2014
Article 5 of Regulation 2021/821 (cyber-surveillance catch-all) was partly inspired by the Hacking Team case
OFAC-2014-EPSILONBureau of Industry and Security (EE.UU.)Estados Unidos
Auto audio equipment (Power Acoustik, Soundstream brands)
Epsilon Electronics sold $3.5 million in car audio equipment to Iran through a Dubai-based distributor (Asra International). The D.C. Circuit Court remanded the case in 2017, questioning OFAC's broad interpretation of transshipment prohibitions. OFAC rescinded the original penalty and entered a reduced $1.5 million settlement. Landmark case testing the boundaries of 'reason to know' in sanctions enforcement.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
Landmark judicial challenge to OFAC - D.C. Circuit scrutinized OFAC's broad interpretation of transshipment, establishing limits on 'reason to know' standard
Even consumer electronics like car audio are subject to the comprehensive Iran embargo - there is no de minimis exception for non-technical goods
Dubai-based distributors create presumptive Iran transshipment risk - exporters must conduct enhanced due diligence for UAE-destination transactions
DOJ-2014-LI-FANGWEITribunales nacionalesEstados Unidos
Li Fangwei operated a vast network of front companies in eastern China through LIMMT Economic and Trade Company to procure materials for Iran's ballistic missile program. OFAC designated LIMMT in 2006 and Li personally in 2009. The US offered a $5 million reward for information leading to arrest. Indictment carries maximum 175 years imprisonment for charges including bank fraud and sanctions violations.
Procurement networks using dozens of front companies can operate for years before detection - persistent shell company creation is the primary evasion technique
$5M bounty demonstrates the severity with which the US treats WMD proliferation procurement - equivalent to terrorism rewards
Chinese-based proliferation networks servicing Iran's missile program remain a top enforcement priority two decades after initial designation
DOJ-2013-GROMACKI-CARBONTribunales nacionalesEstados Unidos
T-700 high-grade carbon fiber
US citizen Peter Gromacki sentenced to 3 months federal prison for systematically transshipping US-made T-700 carbon fiber to China over six years (2006-2012). T-700 carbon fiber has aerospace and nuclear engineering applications. Despite the long duration, the relatively light sentence reflected cooperation with investigators.
T-700 carbon fiber is controlled for national security due to aerospace, nuclear, and missile applications - one of the most restricted composite materials
Six-year duration of systematic illegal exports demonstrates the difficulty of detecting transshipment schemes without intelligence tips
Cooperation with investigators significantly reduced the sentence - 3 months for 6 years of violations reflects maximum mitigation credit
German court convicted four men for supplying Iran with over 1,000 valves for its Arak heavy water reactor. Sentences: 4 years, 3 years, 2 years 9 months, and 18 months (suspended). Valves shipped from Germany to Iran via Turkey; second order of 856 valves sourced from Indian manufacturer via Turkey.
Nuclear-grade valves for Iran's Arak reactor were procured through Germany despite US warnings since 2009
Routing through Turkey and sourcing from India demonstrates multi-country procurement chains for nuclear components
BAFA initially licensed the export - later enforcement exposed failure of initial licensing review for WMD proliferation risk
The Arak reactor case became a landmark in German export control enforcement and led to tightened BAFA procedures
CJEU-C-372-05-COMMISSION-V-GERMANYTribunal de Justicia de la UE (TJUE)Union Europea
Dual-use regulation scope
Commission v Germany (C-372/05). The CJEU ruled that Germany's national catch-all provisions for dual-use items were compatible with the EU Dual-Use Regulation, confirming that Member States may maintain stricter national controls beyond the EU common list.
ECN citados:Ningún ECN específico
Conclusiones clave (4)
Member States may maintain national catch-all provisions that go beyond the EU Dual-Use Regulation's common list
National controls must be notified to the Commission and other Member States
The EU Dual-Use Regulation establishes minimum harmonization, not maximum harmonization - stricter national rules are permitted
This principle remains valid under the current Regulation 2021/821 (recast)
DOJ-2009-HANSON-DRONESTribunales nacionalesEstados Unidos
Drone autopilots
Married couple Yaming Nina Qi Hanson and Harold Dewitt Hanson indicted for conspiracy to illegally export 20 drone autopilots ($90,340) to China. Nina physically hand-carried autopilots in a suitcase through Germany to an associate who transported them to Xi'an, China. 105 days jail plus 15-year export ban for both defendants.
Physical hand-carry of controlled items through third countries in personal luggage is a documented smuggling technique requiring customs vigilance
Drone/UAV autopilots (7A003) are among the most sensitive dual-use items due to direct military applications in autonomous weapons systems
Family-based export networks using husband-wife teams are a documented pattern enabling division of procurement and smuggling roles
DOJ-2008-ROTH-UNIVERSITYTribunales nacionalesEstados Unidos
Plasma actuator technology for drone wings
Retired University of Tennessee professor John Reece Roth convicted on 18 counts for sharing ITAR-controlled plasma technology (designed for Air Force drone wings) with Chinese and Iranian graduate students without authorization. First major deemed export prosecution of a university professor. At age 72, sentenced to 4 years federal prison. Supreme Court declined review.
Landmark deemed export prosecution - sharing controlled defense technology with foreign students in a US lab constitutes an illegal export
University researchers bear personal criminal liability for deemed export violations - the institution's oversight failure does not shield the individual
Age and academic status provide no immunity from prosecution - a 72-year-old professor received 4 years in federal prison
Bolton-based company director Jason Teal jailed for 2 years for unlicensed export of $6 million worth of military body armour to the Middle East and Iraq through his company Armor Products International. HMRC found computer evidence showing Teal and colleague Glynn Jones knew they were breaking the law to secure commercial orders. GBP 30,000 costs plus GBP 9,000 confiscation.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
Body armour is controlled for export under UK military list - even protective equipment marketed as defensive requires export authorization
Digital evidence showing knowledge of illegality eliminates any defense of inadvertence - computer forensics is standard in export control investigations
$6 million in unlicensed military exports from a relatively small UK company shows that SMEs can generate significant export control exposure
BIS-2007-NALCOBureau of Industry and Security (EE.UU.)Estados Unidos
Water hardness testing kits containing triethanolamine
Nalco Company fined $115,000 for 13 unlicensed exports of water testing kits containing triethanolamine, a chemical weapons precursor classified under ECCN 1C395 (mixtures containing 30%+ of 1C350 precursors). Exports went to non-CWC member countries (Bahamas, Dominican Republic, Angola).
Chemical weapons precursors embedded in otherwise benign products like testing kits remain controlled - the peaceful purpose does not eliminate the license requirement
Non-Chemical Weapons Convention member countries require individual licenses for 1C395 items even for purely industrial applications
Classification nuances between 1C350 (pure precursors) and 1C395 (mixtures above 30%) can trap companies that do not analyze mixture thresholds
BIS-2007-UMASSBureau of Industry and Security (EE.UU.)Estados Unidos
Atmospheric sensing device, antennae, and cables
University of Massachusetts at Lowell exported an atmospheric testing device ($191,870) and antennae/cables ($12,480) to SUPARCO, Pakistan's space agency which was on the Entity List due to missile proliferation concerns. Both items were classified EAR99 but required licenses because of the Entity-Listed end user. $100,000 suspended penalty.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
EAR99 items still require licenses when the end user is on the Entity List - classification alone never determines export legality
Pakistan's SUPARCO is Entity-Listed due to missile proliferation concerns - all exports to SUPARCO require individual BIS licenses
University space science partnerships can inadvertently support missile programs - academic cooperation with listed entities requires export compliance review
BIS-2001-SIGMA-ALDRICHBureau of Industry and Security (EE.UU.)Estados Unidos
Biological toxins
Sigma-Aldrich paid $1.76 million for illegal exports of biological toxins after acquiring Research Biochemicals Limited Partnership in 1997 and continuing its unlicensed exports for over a year. One of the largest biological toxin export penalties ever imposed. BIS established successor liability precedent.
Successor liability applies - acquirers of companies with ongoing export violations inherit the liability and must immediately remediate upon discovery
Biological toxin exports (1C351) carry enhanced penalties due to biological weapons concerns even when no military end-use is proven
Post-acquisition compliance due diligence must include immediate review of export activities - a one-year delay in discovering violations is inexcusable
CJEU-C-70-94-WERNERTribunal de Justicia de la UE (TJUE)Union Europea
Dual-use goods (general)
Werner v Germany (C-70/94). The CJEU ruled that EU Member States may restrict exports of dual-use goods on grounds of public security under Art 36 TFEU, even where no EU-wide harmonization exists. This foundational case established that export control of dual-use goods falls within the shared competence of the EU and Member States.
ECN citados:Ningún ECN específico
Conclusiones clave (4)
Export controls on dual-use goods are a legitimate public security measure under EU law
Member States retain residual competence for items not covered by EU common lists
Public security grounds can justify restrictions on free movement of goods within the single market for dual-use items
This case predates the EU Dual-Use Regulation but established core principles still applied today
CJEU-C-83-94-LEIFERTribunal de Justicia de la UE (TJUE)Union Europea
Chemical precursors
Leifer and Others (C-83/94). German criminal case on export of chemical precursors (thiodiglycol, thionyl chloride) to Iraq via Jordan. The CJEU ruled that national export control measures must comply with the principle of proportionality and cannot go beyond what is necessary to protect public security.
Chemical precursors on the dual-use list (now 1C350) are legitimately subject to export controls
Criminal sanctions for unauthorized export are proportionate when applied to listed chemicals
Transit through third countries does not remove the export control obligation - the final destination determines the control status
Thiodiglycol (CAS 111-48-8) and thionyl chloride (CAS 7719-09-7) are definitively controlled under chemical weapons precursor lists
CJEU-C-367-89-RICHARDTTribunal de Justicia de la UE (TJUE)Union Europea
Strategic goods transit
Richardt (C-367/89). The CJEU established that transit of strategic goods through EU territory can be subject to national licensing requirements on public security grounds. Even goods in transit through a Member State can be seized if they lack proper export authorization.
ECN citados:Ningún ECN específico
Conclusiones clave (3)
Transit of dual-use goods through EU territory requires authorization if the goods are controlled
Member States can seize goods in transit that lack proper export licenses
The free movement of goods does not apply to strategic/dual-use items that threaten public security
INTL-1987-TOSHIBA-KONGSBERGTribunales nacionalesEstados Unidos
Computer-guided propeller milling machines
Toshiba Machine (Japan) supplied eight computer-guided milling machines to the Soviet Union, combined with Kongsberg Vaapenfabrikk (Norway) numerical controls, enabling the Soviets to machine dramatically quieter submarine propellers. This violated CoCom restrictions. Two senior executives were arrested and prosecuted. The scandal led to US import sanctions on Toshiba products and directly catalyzed reform of multilateral export controls.
Landmark case that transformed export control enforcement - directly led to strengthening of CoCom and eventually the creation of the Wassenaar Arrangement
Submarine quieting technology via precision milling demonstrates how seemingly mundane machine tools (2B001) can provide decisive military advantage
US import sanctions on the parent company's products created economic pressure far exceeding any direct fines - affecting Toshiba's entire US business