Bureau of Industry and Security (US Commerce)

The Bureau of Industry and Security (BIS) is the bureau of the US Department of Commerce that administers and enforces American controls on dual-use and certain other goods, software and technology. Its instruments include the Export Administration Regulations, the Entity List and foreign direct product rules. These authorities can convert defined US technological dependencies into licensing leverage, but their reach depends on the item, destination, end user, end use and regulatory test involved.

Role

BIS maintains the Commerce Control List, classifies items by Export Control Classification Number, and licenses or denies exports, re-exports and in-country transfers. Its screening lists attach specified consequences to named parties. Foreign direct product rules can bring defined foreign-made items within the Export Administration Regulations when their product scope and destination, end-user or end-use tests are satisfied. They do not make all foreign products or firms subject to BIS licensing. This is one form of the chokepoint effect in the semiconductor supply chain.

History

The bureau's lineage runs through Cold War strategic-trade machinery associated with CoCom. Its immediate predecessor, the Bureau of Export Administration, was renamed in 2002. The Export Control Reform Act of 2018 gave its principal export-control authorities a permanent statutory basis. Major later actions included the Huawei campaign and the advanced-computing and semiconductor controls issued from October 2022. The January 2025 AI diffusion rule remained codified as at 30 July 2026. Commerce had announced non-enforcement and planned rescission in May 2025, but GAO's May 2026 review did not identify a completed removal. BIS guidance of 31 May 2026 also clarified that specified pre-existing advanced-computing licence requirements for entities headquartered in Country Group D:5 or Macau remained enforced. Codification, non-enforcement, planned rescission and retained pre-existing controls are distinct legal and policy states.

Capabilities and limits

BIS couples global regulatory reach with a comparatively small institution. Commerce budget documents report actual budget authority of about USD 190.1 million in FY2025 and an enacted USD 235 million for FY2026. The adequacy of that resourcing is contested because BIS regulates global semiconductor, aerospace and AI supply chains. Enforcement runs through the Office of Export Enforcement and, since 2023, the joint Disruptive Technology Strike Force with the Department of Justice. Effectiveness depends on allied alignment and is eroded by transhipment, smuggling and target-country indigenisation.

Significance

BIS demonstrates how supply-chain position can create licensing leverage, while target response and strategic effect remain empirical questions. Statutes authorise, BIS administers and enforces the Export Administration Regulations, interagency processes shape some policy decisions, courts and GAO review defined issues, and private firms make compliance decisions. The bureau's authority should not be conflated with every export-control outcome or with the independent conduct of regulated firms. Licence applications, exceptions, advisory guidance and enforcement actions are also distinct outputs and should be dated separately.

See also

Entity List (15 CFR Part 744) · Foreign Direct Product Rule · Export Control Reform Act (2018) · Export control as strategic instrument · United States Entity List and foreign direct product rule campaign against Huawei (2019-present) · United States advanced-computing and semiconductor controls on China (2022-present) · US-Japan-Netherlands semiconductor control coalition · Disruptive Technology Strike Force · CoCom · Semiconductor chokepoint · Chokepoint effect · Economic statecraft

Sources

• United States Congress, *Export Control Reform Act of 2018*.
• US Bureau of Industry and Security, About BIS.
• US Bureau of Industry and Security, Export Administration Regulations Part 744.
• US Government Accountability Office, B-337935, AI diffusion rule review (12 May 2026).
• US Bureau of Industry and Security, advanced-computing enforcement guidance (31 May 2026).
• US Department of Commerce, *FY2027 BIS Congressional Budget Submission*.