AuditXYZ

Compliance Framework

Export Administration Regulations (15 CFR 730-774)

The EAR control exports of dual-use items, software, and technology from the United States. This guide covers ECCN classification, license requirements, screening obligations, and compliance for technology companies.

$30,000–$300,0003–9 monthsContinuously updated (2024 latest amendments)
Issuing BodyUnited States Department of Commerce / Bureau of Industry and Security (BIS)
First Published1979-01-01
Latest VersionContinuously updated (2024 latest amendments)
Typical Cost$30,000–$300,000
Typical Timeline3–9 months
Audit RequiredNo
Audit FrequencyNo mandatory audit. BIS conducts end-use checks and investigations. Companies are expected to maintain internal compliance programs.
Geographyunited-states, global

EAR: Export Administration Regulations Guide

The Export Administration Regulations (EAR) govern the export, reexport, and transfer of commercial and dual-use items, technology, and software from the United States. Administered by the Bureau of Industry and Security (BIS), the EAR cover a far broader range of items than ITAR, including advanced semiconductors, encryption software, cybersecurity tools, telecommunications equipment, and many commercial technologies that could have military or intelligence applications.

What the EAR Covers

The EAR apply to items on the Commerce Control List (CCL), identified by Export Control Classification Numbers (ECCNs), and to items designated as EAR99 (commercial items subject to basic EAR requirements). Control reasons include national security, missile technology, nuclear nonproliferation, chemical and biological weapons, regional stability, crime control, anti-terrorism, and UN sanctions.

Key EAR concepts include the "deemed export" rule (sharing controlled technology with foreign nationals in the US requires authorization), the Entity List (organizations subject to specific licensing requirements), and the de minimis rule (foreign-made items incorporating US-origin controlled content may be subject to EAR jurisdiction).

Who Needs EAR Compliance

The EAR applies to all US persons and companies exporting, reexporting, or transferring controlled items. Technology companies are particularly affected due to controls on advanced computing, semiconductor manufacturing equipment, cybersecurity tools, and encryption technology. Recent BIS actions have tightened controls on AI chips and semiconductor technology, affecting major US technology companies' global sales. Cloud service providers may also have EAR obligations when providing computing services to restricted entities.

Implementation Approach

Classify your products and technology against the CCL to determine applicable ECCNs. Implement automated screening against BIS restricted party lists (Entity List, Denied Persons List, Unverified List). Develop license management procedures for controlled exports. Train sales, engineering, and shipping staff on export compliance. Implement deemed export controls for foreign national employees accessing controlled technology. Maintain records for the required five-year retention period.

Cost Considerations

EAR compliance costs range from $30,000 for companies with limited controlled items to $300,000 for technology companies with complex product portfolios and global sales. Key cost drivers include classification analysis, screening software, license management systems, training, and legal advisory. BIS penalties include fines up to $300,000 per violation or twice the transaction value, and criminal penalties up to $1 million and 20 years imprisonment.

Get the EAR starter pack

By submitting, you agree to our privacy policy.

Framework Mappings

Related frameworks

Get matched with a EAR auditor in 24 hours

Free, no-obligation — just tell us your email and we'll do the rest.

By submitting, you agree to our privacy policy.

Recommended Tools