UAE Export Control Regulations
Anything caught by the UAE's dual-use control list needs the Committee's licence before it is exported, and a permit of its own even when the country is only a transit point.
Controlled goods leave the UAE only under a licence from the Committee created by Federal Law No. 13 of 2007. Covered here: classification against the UAE Control List for Dual-Use Items, the catch-all provision that reaches unlisted goods, what a licence file must establish about end-user and end-use, transit permits, and the five-year record requirement.
Reviewed by Mohamed Noureldin, Founder, Managing Partner & Senior Legal Consultant
Related Services: Explore our tax and regulatory consultancy and real estate law advisory services for practical legal support in related areas.
A supplier in Dubai agrees to sell a batch of industrial sensors to a buyer in a third country. The goods are ordinary commercial stock, the buyer pays on time, and nobody involved has any interest in anything military. Whether that shipment is lawful still turns on questions the sales contract does not ask: what the sensors are, under the UAE's control list; who is actually going to use them and for what; and whether the goods are leaving the country, entering it, or merely passing through. Getting those answers in the wrong order — or after the container has sailed — is how compliant businesses end up in enforcement files.
Federal Law No. 13 of 2007 and the Committee
The controlling instrument is Federal Law No. 13 of 2007 concerning Commodities Subject to Control of Import and Export, together with its implementing regulations. The law created the Committee for Commodities Subject to Control of Import and Export, which decides what is controlled and issues the licences and permits that allow controlled items to move.
The Committee's composition tells you something about how applications are read. It is a multi-agency body drawing in representatives of the Ministry of Defence, the Ministry of Interior and other state security bodies. An application is therefore not assessed the way a customs declaration is. It is assessed as a security question, by people whose starting point is the risk that the goods end up somewhere other than where the paperwork says. That framing explains most of what follows, including why an exporter's own commercial good faith is not, by itself, an answer to anything.
Step one: is the item controlled?
Classification comes first because everything else is conditional on it, and because a misclassification discovered late is not a clerical problem — it is an unlicensed export that has already happened.
The Control List
The reference point is the UAE Control List for Dual-Use Items, which is aligned with the principal international regimes: the Wassenaar Arrangement, the Missile Technology Control Regime, the Nuclear Suppliers Group and the Australia Group. Practically, this means an exporter familiar with control classifications in another jurisdiction will recognise the structure of the list, though that familiarity is a starting point and not a substitute for classifying against the UAE text.
Controlled commodities fall into two broad divisions. Military items are the category most people expect. Dual-use goods are the category that catches businesses out: items with entirely legitimate commercial applications that can also serve military or strategic ends. High-performance computers, advanced sensors and specialised alloys are the standard illustrations, and each of them is sold every day by companies that do not think of themselves as being in the defence trade at all.
Where a product's classification is genuinely uncertain — a common position for equipment that sits near a performance threshold — the answer is to seek a formal classification ruling from the Committee rather than to record an internal view and proceed on it. An internal determination protects nobody if it turns out to be wrong.
The catch-all provision
A list-based system has an obvious weakness: it can only control what has been listed. The regulations close that gap with a catch-all provision, which brings unlisted items under control where there is reason to believe they may be used in connection with weapons of mass destruction, or for military end-uses in a country subject to an arms embargo.
The consequence is that "not on the list" is not the end of the classification exercise. It is the end of only half of it. The catch-all turns on knowledge and suspicion, which means it engages what the exporter knew, or had reason to suspect, about the destination and the use. An enquiry that arrives with unusual specifications, or a buyer whose stated business does not explain what it is ordering, is exactly the fact pattern the provision exists to reach — and an exporter who noticed nothing because it had no process for noticing is in a weaker position, not a stronger one.
Step two: the licence file
Exporting a controlled commodity requires a licence from the Committee. The application is a dossier rather than a form: it has to set out the goods in technical detail, identify the end-user, state the declared end-use, and describe the supply chain logistics by which the goods will actually travel. Contracts and technical specifications are supporting material, and information about every party in the transaction is expected, not merely the party paying the invoice.
Licences come in more than one form. An individual licence covers a specific shipment. General licences are available for certain pre-approved destinations and goods and offer a lighter path for exporters whose trade fits within them — a meaningful operational difference for a business shipping regularly to the same established customers. In either case the Committee may come back for further information, and it may impose conditions on the licence, including post-shipment verification. Those conditions are part of the licence; treating them as advisory is a breach of it.
The vetting behind the decision is intelligence-led and layered, and it is directed at destinations and end-users rather than at exporters. This is why a technically accurate application can still be refused, and why the exporter's job is to make the end-use verifiable rather than merely to assert it.
Step three: proving the end-user and the end-use
The heart of the regime is not the licence document but what the licence document is based on. Exporters are required to conduct due diligence on their customers and to obtain end-user certificates: binding declarations identifying the ultimate destination of the goods and the use to which they will be put. The purpose is narrow and specific — to make diversion, after delivery and out of the exporter's sight, something the exporter has taken real steps to prevent.
Due diligence here means more than confirming that a company exists. It means understanding the customer's business, its reputation and its network well enough to notice when something does not fit. The recognised warning signs are unremarkable individually and telling in combination: a customer reluctant to provide information about the end-use, a shipping route that makes no commercial sense for the goods, a payment method out of keeping with the size and nature of the deal. Staff in sales and logistics see these signals before compliance does, which is why the ability to recognise and escalate them has to be trained rather than assumed.
End-use commitments are also monitored after the event, and a suspicion of diversion will be investigated. An exporter whose file shows a documented enquiry, a satisfactory answer and a decision to proceed is in a very different position from one whose file shows only the invoice.
Step four: goods that are only passing through
The UAE is a logistics hub, and a widespread assumption among traders is that goods which merely transit the country are somebody else's regulatory problem. They are not. Controlled goods moving through the UAE require a transit permit from the Committee in their own right, and the application is subject to the same rigour as an export licence.
The rationale is straightforward. A trans-shipment hub is precisely where the origin and destination of a sensitive consignment can be obscured, so control extends to controlled goods within UAE territory whether they are being imported, exported or moved onward. Failure to obtain the permit is a serious violation, and seizure of the goods is among the consequences — a commercially fatal outcome for a freight forwarder or trader whose margin never contemplated losing the cargo.
Where the obligations bite
| Obligation | What it requires | When it arises | Exposure if missed |
|---|---|---|---|
| Classification | Identify the goods against the UAE Control List, and against the catch-all where the list does not reach them. | Before the export declaration | Licence refusal, financial penalties |
| Export licensing | A complete dossier covering goods, end-user, end-use and logistics. | Four to eight weeks before shipment | Seizure of goods, severe fines, imprisonment |
| End-user vetting | Due diligence on the customer and a signed end-user certificate. | Before the contract is concluded | Licence revocation, blacklisting, criminal investigation |
| Transit and trans-shipment | A transit permit and full declaration of every transit point. | Before the goods enter UAE territory | Seizure, diversion of cargo, sanctions exposure |
| Record keeping | A complete transactional archive kept for five years. | After the export, for five years | Fines, audits, suspension of operations |
Step five: the five years after the shipment
The obligation that outlives the transaction is the record. A complete archive of each controlled transaction must be kept for five years, and it is the material an audit or an investigation will be conducted on. Its practical value is defensive: where questions are asked about a shipment made years earlier, the exporter's own contemporaneous file — the classification reasoning, the end-user certificate, the due diligence, the licence and its conditions — is the evidence that the decision was made properly at the time. A business that cannot produce it is left arguing from memory about a consignment nobody now remembers.
Building the programme that makes this workable
None of these obligations can be met transaction by transaction by a sales team under deadline pressure. The answer is an internal compliance programme, and the components that make one function are well settled: genuine commitment from senior management, a risk assessment tailored to the company's actual products and markets rather than a generic template, regular training for the staff who encounter the warning signs first, and periodic independent audits that test whether the programme works in practice as well as on paper.
The consequences of getting this wrong are not confined to a fine. Penalties under the regime extend to substantial financial sanctions, imprisonment and the loss of trading privileges, and the reputational damage with banks, insurers and counterparties tends to outlast the legal exposure. Businesses trading in dual-use goods UAE markets, or handling strategic goods UAE consignments in transit, are best served by treating classification and end-use verification as part of the sales process rather than as a clearance step at the end of it. Export control UAE obligations are, on the whole, satisfiable — but only by a business that knows what it is shipping and to whom before it agrees to ship it.
Internal Links
- Commercial law practice
- Engage a business lawyer in Dubai
- UAE WTO obligations and trade law
- Corporate structuring and governance
- Resolving disputes through arbitration in the UAE
Additional Resources
Explore more of our insights on related topics:
