Turn legal complexity into a simple screening workflow
Screen any name against every major restricted-party list at once.
Why the Legal Foundation Matters
Every export control rule a compliance team encounters — an Entity List addition, a new ECCN control, a sanctions designation — ultimately traces back to a specific statute that grants the issuing agency its authority. Understanding that foundation matters because it explains why rules can change quickly, why some obligations are enforced criminally while others are civil, and why a rule issued by executive action can be amended or revoked with comparatively little process.
The US Statutory Framework
- Export Control Reform Act of 2018 (ECRA): The current statutory basis for the EAR, replacing the long-lapsed Export Administration Act of 1979. ECRA gives BIS its authority to control dual-use exports and maintain the Commerce Control List and Entity List.
- International Emergency Economic Powers Act (IEEPA): Grants the President sweeping authority to regulate or block transactions in response to a declared national emergency. IEEPA is the legal basis for most OFAC sanctions programs and has also been invoked for standalone export restrictions.
- Arms Export Control Act (AECA): Authorizes ITAR and the President's control over defense article exports, administered day-to-day by the State Department's DDTC.
Because ECRA, IEEPA, and the AECA each operate through executive rulemaking rather than requiring new legislation for every change, BIS, OFAC, and DDTC can issue, amend, or rescind rules on short notice — which is part of why the pace of change is so difficult to track manually.
The EU and UK Legal Basis
The EU's export control authority sits in Regulation (EU) 2021/821 — a regulation, not a directive, meaning it applies directly and uniformly across all 27 member states without requiring separate national transposition. Member states retain control over licensing decisions and enforcement, which is why practical experience can still vary by country even under a single shared law. See our EU dual-use guide for how this plays out in practice.
Post-Brexit, the UK operates its own parallel legal framework rather than relying on EU regulation directly — see our UK export control guidefor the ECJU's independent statutory basis.
Export Control Law vs. Trade Law
It's worth distinguishing export control law from the broader body of international trade law. Tariffs, antidumping duties, and trade agreements govern the economic terms under which goods cross borders — they answer "how much does this cost to import or export." Export control law answers a different question entirely: "is this transaction permitted at all," based on national security or foreign policy concerns rather than economics. The two regimes frequently apply to the same shipment but pursue entirely different policy objectives, and satisfying one does not satisfy the other.
Extraterritorial Reach
One of the most legally distinctive features of the US regime is its extraterritorial reach. Through the Foreign Direct Product Rule and the EAR's controls on US-origin content and US persons, US law can govern transactions between two non-US companies, involving no US territory, based solely on a sufficient nexus to US-origin technology, software, or personnel. This legal architecture is what allows the US to regulate semiconductor manufacturing happening entirely overseas — see our FDPR explainer for the mechanics, and our China export controls guidefor how it's applied in practice.
Related Reading
- US export control rests on three statutes — ECRA (EAR), IEEPA (sanctions), and the AECA (ITAR) — each enabling executive rulemaking without new legislation per change.
- The EU's Regulation 2021/821 applies directly across all 27 member states, while the UK now operates its own independent post-Brexit framework.
- Export control law and trade law answer different questions — permissibility vs. cost — and compliance with one does not satisfy the other.
- US export control law can reach transactions between two non-US parties with no US territory involved, via the Foreign Direct Product Rule and US-person/US-origin nexus tests.
- Because most rules issue via executive action rather than legislation, they can change with comparatively little process — a key reason manual tracking falls behind.