Definition
The BIS Entity List is a list maintained by the U.S. Department of Commerce's Bureau of Industry and Security (BIS) identifying foreign parties — individuals, companies, research institutions, and government organizations — subject to specific additional license requirements for the export, re-export, or in-country transfer of items subject to the Export Administration Regulations (EAR). Parties are added when BIS determines they pose a risk to U.S. national security or foreign policy interests.
What Being on the Entity List Means for Exporters
Unlike the OFAC SDN List — where transactions are generally prohibited outright — the Entity List imposes a "license required" policy with a general "presumption of denial." In practice, this means that while exporting to an Entity List party is technically possible with a license, most license applications are denied. The result for most practical purposes is the same as an outright prohibition.
The Entity List applies to all items subject to the EAR, including hardware, software, and technology. This means providing software access, technical data, or technical assistance to an Entity List party — including deemed exports to foreign nationals in the United States — may trigger license requirements. High-profile Entity List additions include Huawei (2019), SMIC, and dozens of Chinese semiconductor and military-civil fusion companies added in 2022–2023.
How Parties Are Added to the Entity List
Entities are added through an interagency review process involving the Departments of Commerce, Defense, State, and Energy. Each addition is published as a Final Rule in the Federal Register, with a cited basis for the listing. Common grounds include diversion of U.S. exports to prohibited end uses, support for weapons of mass destruction programs, military end use, and transactions contrary to U.S. national security or foreign policy interests.
The Entity List is updated on a rolling basis, with additions occurring approximately monthly or more frequently in response to geopolitical developments.
Consequences of Unlicensed Exports to Entity List Parties
Exporting items subject to the EAR to an Entity List party without the required license is a serious violation with significant legal consequences:
- Civil penalties: up to $300,000 per violation or twice the value of the transaction, whichever is greater
- Criminal penalties: up to $1 million per violation and up to 20 years imprisonment
- Denial of export privileges: BIS can revoke export privileges entirely, added to the Denied Persons List
- Reputational consequences: BIS publishes administrative enforcement orders publicly
Entity List vs. Denied Persons List
Both are BIS lists, but they carry different legal consequences. The Entity List identifies foreign parties subject to additional license requirements — where the license is presumptively denied. The Denied Persons List (DPL) identifies U.S. and foreign persons who have lost their export privileges entirely as a result of prior violations. Transactions with DPL parties are prohibited without specific BIS authorization. A comprehensive screening program must check both.
How TradeLasso Helps
TradeLasso includes the BIS Entity List in every screening search through the U.S. Consolidated Screening List, checking each query against the current Entity List alongside 12 other government watchlists simultaneously.
Frequently Asked Questions
Does the Entity List only apply to hardware exports?
No. The Entity List applies to all items subject to the EAR — hardware, software, and technology. This includes providing software access, technical data, or technical assistance to an Entity List party. Deemed exports (sharing controlled technology with a foreign national in the United States) may also trigger Entity List license requirements.
How often is the BIS Entity List updated?
BIS updates the Entity List through Federal Register rulemakings, which occur approximately monthly but can happen more frequently in response to geopolitical events. Major additions — such as waves of Chinese semiconductor companies in 2022–2023 — were made through emergency rulemaking. Exporters cannot rely on periodic manual downloads; they need a system that tracks current list data.
Can a company be removed from the BIS Entity List?
Yes, through a formal delisting petition process. Companies can petition BIS for removal by demonstrating that the concerns leading to their listing no longer apply. Successful delistings occur but are uncommon. BIS can also modify existing entries — updating names due to corporate restructuring, adding subsidiaries, or adjusting the scope of license requirements.
What should an exporter do when a customer appears on the Entity List?
Stop the transaction immediately and consult your export compliance officer or legal counsel. Do not assume you can proceed without a license — the presumption of denial means most applications are rejected. Document your review and decision regardless of the outcome. This documentation is critical if your compliance program is ever reviewed by BIS.