EntryUpdated 2026/10/25

If You Do Not Operate in America, Why Do Its Export Controls Still Reach You?

Export controls are about who gains access to a capability as much as which country a thing is sold to. Besides the item and its destination, the test turns on end use and end user, and the exporter often cannot see either.

Four instruments, four different hooks

Instrument	What it hooks onto	Who gets caught	What a company must actually do
Entity listHooks the counterparty	Named organisations, which cannot obtain controlled technology without a licence.	Far more than those named. Suppliers avoiding their own exposure cut off anyone “possibly connected”, and the radius of that over-compliance cannot be read off the text.	Track the list continuously and anticipate how suppliers, banks, and insurers will read it.
End-use and end-user controlsHooks the purpose	Whether the same product is controlled also depends on what it is ultimately used for and by whom. For dual-use technology, this test often decides the matter.	Every exporter, though many can see only their first-tier customers, not the end use.	Compliance shifts from classification to customer due diligence: the first is a lookup, the second is never fully settled.
Extraterritorial rules (technology content)Hooks the origin of the technology	If a product contains controlled technology, it can fall under the rules even when design, manufacture, and sale all happen abroad. The origin of the software and equipment used to make it is a further hook.	Firms with no presence at all in the controlling state. This is how Dutch and Japanese equipment makers were drawn into US–China disputes.	Define the perimeter by where the technology and the money come from, not by where the offices are. “We do not sell there” is not a defence.
Outbound investment screeningHooks the capital	Domestic capital flowing into designated sectors abroad. The question moves from whether you may use their services to whether your money may help upgrade their industry.	Investors, joint-venture partners, and both sides of licensing deals. Scope varies by country and is still widening.	Deals are not necessarily blocked, but filing costs, review timelines, and board-level risk all rise.

Reading export controls as “you may not sell to country X” misses three of the four instruments. Each hooks onto something different (the counterparty, the purpose, the technology content, the capital), and any one of them is enough to bring you inside the perimeter. That is why the perimeter follows the origin of the technology and the money, not the address of the office.Source: Impactful Creative, compiled from the glossary entries on export controls, entity lists, dual-use technology, and extraterritorial jurisdiction

How do export controls differ from tariffs and embargoes?

Tariffs change prices and embargoes cut off trade, while export controls change who is eligible to obtain something. The same chip may be lawful to sell to one company and unlawful to sell to another; what differs is the counterparty, not the product.

That difference shapes the compliance work. For tariffs, compliance is a matter of classification and duty rates; for export controls, it is customer due diligence: who ultimately receives the goods, what they will do with them, and whether they will be passed on.

This is why controls rarely take the form of “do not export to country X”. More often they consist of a continuously updated list plus a set of tests.

Why does “dual use” make the judgement so hard?

Dual use means the same technology serves both civilian and military purposes. Whether a given chip, algorithm, or design file is controlled depends on its specifications, and also on the end use and the end user.

The difficulty is that the exporter usually cannot see either. You sell to a distributor, who sells to a systems integrator. And who are the integrator’s customers? Many firms can see only one tier down.

So the compliance burden shifts from product classification to customer due diligence. The first is a lookup; the second is continuous, has to be kept up to date, and is never fully settled.

Why do export controls reach firms that do not operate in the United States?

The jurisdictional hook is not where you operate but where the technology, the software, or the production equipment comes from. If a product contains controlled technology, it can fall under the rules even when design, manufacture, and sale all happen abroad.

This is extraterritorial jurisdiction. For a company, it means that “we do not sell in that market” is no defence: the compliance perimeter follows the origin of the technology and the money, not the address of the office.

That is why Dutch and Japanese chip-equipment makers get drawn into US–China disputes over controls: the reach runs along the technology chain, not along borders.

Why does an entity list reach further than the names on it?

An organisation on the Entity List cannot obtain controlled technology without a licence. But the larger effect falls on companies that were never listed.

Suppliers, wanting no exposure of their own, adopt internal standards stricter than the rule and cut off anyone “possibly connected”, “hard to verify”, or “awkward to explain”. The reach of that over-compliance cannot be read off the legal text.

So assessing a new list starts with who is on it; the next questions are how suppliers will interpret it and whether banks, insurers, and logistics providers will tighten in step.

One listing reaches five rings; only the top one is written in the rule

The named organisationsWritten in the rule
They cannot obtain controlled technology or products without a licence. This is the only ring readable directly from the published text, and the only one with a definite edge.
Obvious affiliatesWidened by suppliers
Same group, shared ownership, same address. Most suppliers extend the treatment automatically. The rule does not always demand it, but almost nobody risks doing otherwise.
Counterparties that cannot be verifiedWidened by suppliers
Ownership that cannot be traced, an end user that cannot be established, diligence that will not close. Faced with uncertainty, a compliance function defaults to no: declining costs the sales side, while a breach costs the compliance side.
Counterparties that would be awkward to explainNobody decides it explicitly
Verifiable, lawful, and requiring a paragraph of explanation if anyone ever asks. This ring appears in no document, and it is where over-compliance actually ends.
Banks, insurers, and logistics tightening in turnNobody decides it explicitly
Each party tightens to its own risk appetite. Nobody decides to stop the transaction, yet the letter of credit is not issued, the cover is not written, the carrier declines, and the trade fails all the same.

The scope the rule actually statesWidened by suppliers protecting themselvesDecided by nobody; the outcome is the same

The listed organisations are the verifiable ring, and the only one with a definite edge. Most of the effect comes from the four below it: suppliers avoiding their own exposure apply standards stricter than the rule, and in the bottom two rings no decision is taken at all. Nobody says to stop the trade; the trade simply does not close.

That is why the reach of over-compliance cannot be read off the text: what would have to be estimated is not the regulation but the risk appetite of several hundred suppliers, banks, and insurers. Who is on a new list is therefore only the starting point; the next question is how suppliers will read it.

Source: Impactful Creative, compiled from the entity-list mechanics and supplier over-compliance described on this page

Why does where the line sits matter more than whether there is one?

Which technology generation the line falls on determines the industrial outcome. Draw it too far forward and the restricted side still buys what it needs; draw it too far back and the restricting side’s own firms lose the market first.

Control lists keep being revised because technology advances: yesterday’s leading edge is today’s mature node. A control is a line that has to keep moving, not a wall built once.

For companies, that means compliance is not a project with an end date. Every time the line moves, your products, customers, and suppliers may all be reclassified.

Sources

U.S. Department of Commerce, Bureau of Industry and Security (eCFR), § 736.2 General prohibitions and determination of applicability., 5 Dec 2024
U.S. Department of the Treasury (Federal Register), Provisions Pertaining to U.S. Investments in Certain National Security Technologies and Products in Countries of Concern, 2 Jan 2025
European Parliament and Council of the European Union, Regulation (EU) 2021/821 of the European Parliament and of the Council of 20 May 2021 setting up a Union regime for the control of exports, brokering, technical assistance, transit and transfer of dual-use items (recast), 20 May 2021
U.S. Department of Commerce, Bureau of Industry and Security (eCFR), § 734.3 Items subject to the EAR., 18 Jul 2024
U.S. Department of Commerce, Bureau of Industry and Security (Federal Register), Foreign-Produced Direct Product Rule Additions, and Refinements to Controls for Advanced Computing and Semiconductor Manufacturing Items, 2 Dec 2024
U.S. Department of Commerce, Bureau of Industry and Security (eCFR), Supplement No. 4 to Part 744—Entity List, 24 Aug 2026
U.S. Department of Commerce, Bureau of Industry and Security (Federal Register), One Year Suspension of Expansion of End-User Controls for Affiliates of Certain Listed Entities, 10 Nov 2025

Terms used here

Export Controls — Legal instruments restricting the transfer of specified technology, products, or services to specified recipients on national security grounds. The defining feature of modern export controls is extraterritorial reach: if a product contains controlled technology, the rules may bind even when manufacture and sale occur entirely outside the controlling state. Every control list update therefore becomes a compliance event that multinationals must track line by line, not a regulatory matter for a single market.
Entity List — A list of organisations that may not obtain controlled technology or products without a licence. Its effect extends well beyond those named: wary of breaching the rules themselves, suppliers often apply internal standards stricter than the law requires and cut off anyone with a plausible connection. How far that over-compliance spreads is hard to infer from the legal text alone.
Dual-use — Technology, products, or know-how with both civilian and military applications. That dual character makes export control decisions difficult: whether a given chip, algorithm, or design drawing is controlled depends on its end use and end user, and the exporter usually cannot see either. The compliance burden therefore shifts from product classification to customer due diligence.
Extraterritorial Jurisdiction — A state applying its law to conduct abroad. The usual hooks are settlement in its currency, the presence of its technology in a product, and the use of its financial and information infrastructure. For companies, staying out of a country’s market is therefore no defence against its law: compliance scope has to follow the origin of the technology and the money, not the location of operations.