The Foreign Direct Product Rule (FDPR) is one of the most misunderstood—and most consequential—provisions in US export control law. At its core, it extends US jurisdiction over goods manufactured outside the United States using US technology, software, or equipment. For compliance teams managing semiconductor supply chains, software vendors, and equipment manufacturers, this means that the FDPR can impose US sanctions obligations on foreign actors who have never touched US soil.
This post explains how the FDPR actually works, where it applies, how to identify when you're caught by it, and what compliance teams should be doing right now to manage this risk.
What the FDPR Is and Why It Exists
The FDPR is codified in the Export Administration Regulations (EAR) at 15 CFR § 734.3(b). In plain language, it says this: if a foreign-made product is the direct product of US technology, software, or equipment subject to the EAR, then that foreign product is also subject to the EAR—even though it was never exported from the United States.
The rule emerged from a practical reality: controlling exports is not enough. If a foreign manufacturer can legally obtain controlled US manufacturing technology and use it to produce chips, software, or machinery without restriction, then US competitors lose market protection, and US foreign policy becomes easy to circumvent. The FDPR closes that gap.
The Three-Part Test
An item triggers FDPR coverage if it is the direct product of:
- US technology subject to the EAR (including technical data, software, or know-how classified under an ECCN on the Commerce Control List), or
- US-origin equipment subject to the EAR, or
- Any items produced by the above technology or equipment
The keyword is direct. The FDPR does not apply to goods produced using non-US inputs, even if those inputs were themselves produced using US technology. This distinction—direct vs. indirect—is central to compliance and is often the subject of debate.
When the FDPR Applies
Country-Specific Triggers
The FDPR does not apply uniformly everywhere. Its scope is defined by country-specific rules embedded in the EAR:
- China and Russia: The FDPR applies very broadly. Items produced entirely outside the US using US technology, equipment, or software are controlled if they are used, intended for use, or made by nationals of China or Russia.
- Crimea: The FDPR applies to any foreign direct product of US technology or equipment made in, or by nationals of, Crimea.
- Iran: Broad FDPR coverage applies to items made by Iranian nationals or in Iran using US-origin inputs.
- Venezuela, Cuba, Syria, North Korea: Country-specific FDPR rules vary but are generally expansive.
- All other countries: The FDPR applies only in very narrow cases—primarily when the foreign direct product is subject to a multilateral export control regime (like the Missile Technology Control Regime or Nuclear Suppliers Group) and is destined for a specific list of countries.
This means that a semiconductor fab in Taiwan, Singapore, or South Korea is generally not caught by the FDPR when manufacturing chips using US equipment—unless those chips are destined for China, Russia, or another specified end-use (like nuclear proliferation).
The "Deemed Export" Analogy
Compliance teams often confuse the FDPR with deemed exports (covered in 15 CFR § 734.2). Both rules extend US jurisdiction beyond physical borders, but they work differently:
- A deemed export occurs when you disclose controlled technology or source code to a foreign national on US soil. The disclosure itself is treated as an export.
- The FDPR applies to goods manufactured abroad using controlled inputs, regardless of where the manufacturing facility is located.
If you release controlled technical data to a foreign engineer in your Boston office, that is a deemed export subject to EAR licensing. If a Japanese fab uses that same technical data to produce chips, those chips may be subject to the FDPR—but only if the rule's country-specific conditions are met.
The Direct Product Analysis: Where Compliance Teams Get Stuck
The hardest part of FDPR compliance is determining whether a foreign-made item is a direct product of controlled US inputs.
Practical Scenarios
Scenario 1: Integrated Circuit Manufacturing
A US equipment manufacturer (Company A) sells a semiconductor deposition tool to a fab in Taiwan. The tool is controlled under ECCN 3B001. The fab uses the tool to produce 5nm chips. Are those chips "direct products" of the US equipment and thus subject to the FDPR?
Answer: No, unless those chips are destined for China, Russia, or another specified country under the country-specific FDPR rules. A chip produced in Taiwan is a direct product of US equipment, but because Taiwan is not on the list of countries where the FDPR applies broadly, the rule does not reach the chips—unless the end-use or end-user falls into a restricted category.
However: If the same fab sells those chips to a Chinese distributor, the question of FDPR control shifts to the transaction. Exporting those chips to China may require a license (for other reasons), and the FDPR analysis becomes relevant to determining whether a license exception (like ENC or TSR) is available.
Scenario 2: Software and Algorithmic Control
A US software vendor licenses design automation software (EDA tool) to a South Korean semiconductor company. The software is controlled under ECCN 3D001. The South Korean company uses the software to design chips, which it then manufactures in-house and sells globally. Are those chips direct products?
Answer: Probably not. The software enabled the design of the chips, but the chips themselves are manufactured using tools, materials, and processes of various origins. The software is an input to design, not a manufacturing input. The direct product rule focuses on items produced by controlled equipment or technology, not items designed with controlled software.
However: If the software produces a tangible output file (like a mask or design specification) that physically controls the production process, and if that output is not separable from the manufacturing process, a court or agency might find that the manufactured item is a direct product. This is a frontier issue in FDPR interpretation.
Scenario 3: Components and Subassemblies
A US equipment manufacturer sells laser systems (ECCN 3A001) to a German optics company. The German company uses the laser to produce optical components, which it sells to a Japanese camera manufacturer, which incorporates them into cameras sold worldwide. Are the cameras direct products of the US laser?
Answer: No. The optical components are direct products of the US laser. But the cameras incorporate optical components along with many other inputs. The camera is an indirect product of the US laser—not a direct product. The FDPR does not reach it.
The Directness Boundary
The directness boundary is often tested at the component level. If a foreign manufacturer uses US equipment to produce Component X, Component X is a direct product. If another manufacturer uses Component X (along with other inputs) to make Product Y, Product Y is not a direct product of the original US equipment—it is an indirect product, and the FDPR does not apply.
However, there are exceptions: If Product Y consists entirely or primarily of the direct product (e.g., a rack of chips where 95% of the value is the US-equipment-produced semiconductors), the argument that Product Y is a direct product becomes stronger. BIS has not issued definitive guidance on the percentage threshold.
Compliance Steps: Screening and Documentation
1. Identify Controlled Inputs
Start by auditing your supply chain to identify:
- US-origin equipment in foreign manufacturing facilities you control or supply to
- US-origin software or technical data provided to foreign partners under license or agreement
- US-origin components incorporated into foreign-manufactured products
Create an inventory of each, recorded with: - The specific ECCN of the controlled input - The foreign location where it is used or integrated - The date of transfer or license grant - The products or outputs created using that input
2. Map the Production Chain
For each controlled input, document the full production chain:
- What is the direct output of that input?
- What is done with that output before it reaches an end-user?
- Is the output integrated into a larger product, or sold as a standalone item?
- Does the output remain physically identifiable in the final product?
This mapping helps you determine whether downstream products are direct products or only indirect products.
3. Apply Country-Specific Rules
Once you have identified direct products, check the country-specific FDPR rules for each:
- Is the direct product destined for use, transshipment through, or intended for the nationals of China, Russia, or a sanctioned jurisdiction?
- Is the direct product intended for a controlled end-use (nuclear, missile, chemical/biological weapons)?
- Does the product fall under a multilateral export control regime (MTCR, NSG, Australia Group)?
If the answer to any of these is yes, the direct product is subject to the EAR and may require a license.
4. License Determination
If the direct product is subject to the FDPR and export control is triggered:
- Determine the appropriate license requirement using the Commerce Control List and the relevant `FR` (Foreign Availability) and `NP` (No License Required) entries.
- Evaluate whether a license exception applies (e.g., ENC for encryption items, TSR for technology/software under specified conditions).
- If a license is required, file an application with BIS using form BIS-748P or the e-licensing system.
5. Ongoing Compliance and Record Retention
- Maintain records of all FDPR determinations, including the basis for concluding that an item is or is not a direct product. Retention period: 5 years from the date of the determination.
- Update determinations if the use, destination, or end-user of the direct product changes. A chip produced without FDPR concern may become subject to the rule if it is later sold to China.
- Monitor changes to the Commerce Control List and country-specific FDPR rules. BIS regularly updates these.
Cross-Border Complexity: The Supply Chain View
One underappreciated aspect of FDPR compliance is that the rule creates obligations for foreign companies, not just US exporters.
If a foreign subsidiary or affiliate uses US-controlled equipment or technology to manufacture products, that foreign entity is itself subject to the EAR. It cannot sell, transfer, or reexport those direct products without complying with EAR restrictions—even if no US company is involved in the transaction.
This has several practical implications:
- Foreign subsidiaries of US companies must implement FDPR compliance even if the parent company does not actively manage the production facility.
- Foreign JV partners must be contractually obligated to comply with FDPR restrictions on items produced using US-controlled inputs.
- Diligence on M&A must include assessment of whether the target company manufactures direct products and, if so, whether those products are subject to FDPR restrictions that could affect operations post-acquisition.
Recent BIS Guidance and Open Questions
BIS has provided limited recent guidance on FDPR application, but several issues remain contested:
- Software-enabled manufacturing: BIS has not definitively ruled on whether items manufactured according to software controls (but not using software-driven equipment) are direct products.
- Commingled inputs: If a product incorporates both controlled and uncontrolled inputs at the final assembly stage, is it a direct product?
- Modifications and improvements: If a foreign manufacturer improves or modifies a direct product using non-US inputs and methods, does it remain a direct product?
Compliance teams should document their interpretation of these questions and be prepared to explain their reasoning to BIS, particularly during audits or pre-license consultations.
For compliance teams: Do not wait for a license application to audit your FDPR exposure. Map your supply chain now, identify controlled inputs, determine which foreign-manufactured items are direct products, and establish a process for staying compliant as destinations and end-uses change. FDPR violations carry civil penalties of up to $300,000 per violation and can trigger criminal liability. The time to build this compliance infrastructure is before you need it.