Export Control Investigation Lawyer: Strategic Defense for BIS and DOJ Enforcement Actions

An export control investigation lawyer represents companies and individuals under review by the Bureau of Industry and Security (BIS) Office of Export Enforcement or facing criminal prosecution by the U.S. Department of Justice for alleged violations of Export Administration Regulations (EAR) or International Emergency Economic Powers Act (IEEPA). We handle privileged internal investigations, regulatory responses, voluntary self-disclosures, and litigation—both administrative enforcement actions and criminal proceedings.

Export control investigation – a civil or criminal enforcement proceeding initiated by the Bureau of Industry and Security Office of Export Enforcement or U.S. Department of Justice examining alleged violations of Export Administration Regulations, including unlicensed exports of dual-use goods, technology transfers to restricted end-users, or bulk data transactions prohibited under 28 CFR Part 202 (effective April 8, 2025).

Key Takeaways

• BIS civil penalties: $364,992 per violation with no statutory cap; criminal IEEPA penalties reach $1 million and 20 years imprisonment for willful violations
• 28 CFR Part 202 (effective April 8, 2025) expands DOJ jurisdiction over bulk data transfers involving U.S. sensitive personal data and government-related data—a major shift from traditional goods-only enforcement
• Voluntary self-disclosure to Office of Export Enforcement before investigation launch cuts civil penalties by 50% but does not shield you from criminal referral
• Administrative investigations typically run 6–24 months; criminal cases may stretch years from grand jury subpoena to indictment
• A denial order bars you from all export transactions for 10–20 years, disrupting supply chains and freezing vendor relationships instantly

What Is an Export Control Investigation and Why Would You Need a Lawyer?

Export control enforcement splits into two tracks. The Bureau of Industry and Security Office of Export Enforcement handles administrative civil proceedings for regulatory violations of Export Administration Regulations. The U.S. Department of Justice pursues criminal investigations when conduct involves willful International Emergency Economic Powers Act violations or knowing false statements regarding dual-use goods or technology transfers.

The BIS usually opens administrative cases after compliance audits, tips from intelligence agencies, or red flags in export licensing applications. Criminal investigations start differently: they begin when conduct suggests intent to evade controls, typically triggered by intelligence sharing between the U.S. Department of Commerce, DOJ, and agencies like Homeland Security Investigations or Interpol in transnational cases.

Executive Order 14117 (February 28, 2024) introduced a critical new enforcement pathway. Under 28 CFR Part 202, the DOJ now investigates transfers of U.S. sensitive personal data and government-related data to countries of concern. This means export control now reaches data brokerage, cloud services, and technology platform operations—not just traditional dual-use goods. If your business touches sensitive data and international transactions, this regulation may apply to you regardless of whether you thought you were in the export business.

What Triggers an Export Control Investigation?

Office of Export Enforcement scrutiny starts with specific red flags: shipments to known diversion hubs, inconsistencies in end-user certificates, payment routed through middlemen, or sudden product specification changes suggesting military use. False statements on BIS-748P licensing applications or Shipper’s Export Declarations create immediate exposure.

Intelligence fusion between BIS, Homeland Security Investigations, and foreign customs authorities identifies patterns across multiple shipments. One unlicensed transaction to a sanctioned entity can prompt a comprehensive compliance review spanning three years of your entire export history. The European Court of Human Rights has established due process standards for transnational enforcement cooperation, meaning evidence gathering must meet procedural fairness requirements even across borders. Practically speaking: if you’ve shipped anywhere internationally in the past three years, this matters.

What’s the Difference Between a Civil and Criminal Export Violation?

Civil administrative enforcement addresses compliance failures: negligent classification errors, inadvertent license violations, or weak internal controls. The Office of Export Enforcement assesses monetary penalties, issues warning letters, or demands remedial compliance without criminal referral when willfulness is absent.

Criminal investigations require proof of knowing and willful conduct under IEEPA: deliberate shipment of controlled items without authorization, schemes to disguise end-users, or conspiracy to violate restrictions. DOJ prosecutions result in felony convictions, prison time, and permanent export privilege denial. Here’s the complication: parallel proceedings often run simultaneously. While BIS pursues civil penalties, Justice Department investigators present evidence to a grand jury for potential indictment. Your defense strategy must manage both tracks at once.

How Does the Export Control Investigation Process Work?

Initial contact varies. Administrative investigations typically announce through Office of Export Enforcement document requests, scheduling letters for witness interviews, or notice of compliance audits referencing specific shipments. Criminal investigations arrive differently: grand jury subpoenas, search warrant execution, or Justice Department target letters that explicitly warn you of parallel proceedings and your Fifth Amendment rights.

BIS civil investigations follow a predictable arc: initial inquiry and document collection (60–180 days), witness interviews and technical expert review (90–240 days), proposed charging letter (30–60 days), then settlement negotiations or hearing. Total time: 6–24 months depending on complexity and how much you cooperate. If you’re still shipping during this period, every transaction is exposed to additional scrutiny.

Criminal export control investigations take far longer. DOJ prosecutors coordinate with FBI or Homeland Security Investigations on evidence gathering, often requiring international mutual legal assistance treaty requests, forensic analysis of shipping records, and expert testimony on commodity classification. From initial subpoena to indictment typically takes 18–36 months. Cases proceed to trial when plea terms don’t work.

What Happens During a BIS Office of Export Enforcement Audit?

Office of Export Enforcement compliance audits demand three years of export transactions, licensing records, and compliance procedures. Investigators request shipping documentation, export classification worksheets, restricted party screening logs, and customer correspondence. You must produce ECCN determinations, license application histories, and compliance training records.

Witness interviews dig into decision-making: who authorized shipments, how classification determinations were made, what due diligence checked end-users. BIS evaluators assess your compliance program against Framework for OFAC Compliance Commitments standards adapted to export controls. Voluntary self-disclosure prior to audit discovery changes the penalty calculation significantly and influences denial order recommendations.

Can an Export Control Investigation Lead to Criminal Charges?

BIS maintains formal referral protocols with the U.S. Department of Justice. When administrative investigation uncovers willful violations—deliberate false statements, conspiracy to evade controls, or substantial national security harm—the Office of Export Enforcement submits a criminal referral package to DOJ Export Control Enforcement units.

Parallel proceedings create a tactical minefield. Statements made during BIS civil cooperation become criminal trial evidence. Fifth Amendment protections shield individual witnesses but not corporate entities. Your defense strategy requires coordinating privilege assertions across both tracks while preserving voluntary self-disclosure benefits in the administrative matter without creating criminal exposure. When foreign subsidiaries are involved, Interpol cooperation facilitates cross-border evidence collection, though European Court of Human Rights due process standards constrain certain investigative methods in member states.

What Are the Potential Penalties and Consequences of Export Violations?

Civil penalties under Export Administration Regulations reach $364,992 per violation (2024 adjusted), with no statutory cap when violations span multiple shipments. BIS compounds penalties: each item in a multi-item shipment counts as a separate violation; continuing license failures generate per-day violations. A single shipment of ten components without a license is ten violations, not one.

Criminal penalties under IEEPA impose fines up to $1 million per violation and up to 20 years imprisonment for willful violations. Conspiracy statutes (18 U.S.C. § 371), false statements laws (18 U.S.C. § 1001), and money laundering provisions add exposure when financial transactions touch export proceeds. Convictions mean supervised release, restitution orders, and permanent loss of export privileges.

Collateral consequences often exceed the direct penalties. Denial orders from BIS prohibit you from any export transaction—including domestic transfers of export-controlled items—for 10–20 years. This isn’t just you; it’s your company, your subsidiaries, your authorized agents. Federal contractor debarment follows criminal convictions or certain civil violations. Public companies face securities litigation when violations trigger disclosure obligations or misrepresentation claims. Customers, vendors, and banks all implement enhanced due diligence; relationships fracture.

What Is a Denied Persons List and How Does It Affect My Business?

BIS denial orders add individuals and entities to the Denied Persons List, prohibiting all participation in export transactions under Export Administration Regulations. Denial extends to domestic transfers within the U.S. when items remain EAR-controlled. Denied persons cannot receive, purchase, or transfer export-controlled items; facilitate such transactions; or order, buy, or obtain services supporting exports.

When vendors screen for restricted parties, they must refuse sales to anyone on denial lists. Banks close accounts or reject wire transfers when counterparties appear in these databases. Export Management System software catches flagged individuals automatically, blocking transactions instantly. First-time civil violations typically mean a 10-year denial; criminal convictions or aggravated matters extend that to 20 years. Here’s the practical consequence: if you’re denied today, you’re essentially locked out of export activity until 2034 or 2044. Removal requires filing a formal petition to the Office of Export Enforcement and proving rehabilitation—a process that rarely succeeds before your denial term naturally expires.

Can Export Violations Affect My Professional License or Security Clearance?

Export violations trigger consequences far beyond the investigation itself. Criminal convictions can cost you your professional license in customs brokerage, freight forwarding, or compliance work. State licensing boards treat export felonies as crimes of moral turpitude—a classification that makes license restoration difficult even years later.

Security clearances face similar jeopardy. The Defense Security Service and other adjudicating agencies view export violations as potential foreign preference concerns (Guideline C) when conduct benefits foreign governments, or personal conduct problems (Guideline E) when dishonesty is involved. Even civil administrative actions—without criminal charges—can jeopardize clearances if the underlying conduct shows poor judgment or susceptibility to foreign influence. If you work for a cleared contractor, you carry individual exposure alongside your company’s corporate liability.

Client Case Profiles: Export Control Investigation Defense Outcomes

Representative matters demonstrate defense strategy application across enforcement scenarios. Client identities remain confidential; matter descriptions illustrate approach and results without disclosing privileged information.

Technology company – unauthorized China shipment: Bureau of Industry and Security Office of Export Enforcement investigated unlicensed exports of encryption software to Chinese entity. We filed voluntary self-disclosure within 30 days of internal discovery and implemented remedial compliance: enhanced restricted party screening, technical training for engineers on deemed export rules, automated licensing requirement checks in order management systems. Settlement outcome: $180,000 civil penalty (60% reduction from base calculation), no denial order. The entire matter—from self-disclosure to final settlement—took 14 months.

Manufacturing executive – criminal false statements: U.S. Department of Justice indicted an executive for false statements on license applications regarding end-use. Our defense established lack of willfulness: the client relied on customer representations, implemented reasonable due diligence procedures, and corrected errors upon discovery. We negotiated a plea to negligent violation under Export Administration Regulations civil provisions, avoiding criminal conviction. Result: civil penalty and probation term without imprisonment or permanent export ban.

Data broker – 28 CFR Part 202 inquiry: Justice Department issued civil investigative demand regarding bulk data sales potentially providing Chinese customers access to U.S. sensitive personal data. We conducted a privileged internal investigation identifying problematic contracts. Through negotiation, we achieved voluntary remediation: terminated covered transactions, implemented customer due diligence procedures, and established contractual restrictions on data access for retained customers. Matter closed without enforcement action; the client continues operations under enhanced compliance program.

Aerospace supplier – parallel civil and criminal: Simultaneous Bureau of Industry and Security administrative proceeding and Justice Department grand jury investigation of unlicensed shipments to embargoed destination. We coordinated Fifth Amendment assertions for individual witnesses while facilitating corporate cooperation in the civil matter. Civil settlement: $400,000 penalty, 10-year denial order suspended contingent on compliance monitor. Criminal investigation: no indictment after demonstrating lack of individual willfulness.

These outcomes reflect case-specific facts; results vary based on violation severity, cooperation level, compliance history, and enforcement priorities. No outcome guarantee applies to any investigation.

Voluntary Self-Disclosure: Strategic Timing and Procedure

Voluntary self-disclosure to Office of Export Enforcement provides the most substantial penalty mitigation available under Export Administration Regulations. Disclosures filed before Office of Export Enforcement inquiry or independent discovery substantially reduce base penalty calculations—often by 50% or more. Additional credit applies when disclosure includes thorough internal investigation, identification of root causes, and corrective action implementation before submission.

Timing is everything. Maximum benefit requires submission before Bureau of Industry and Security makes contact or discovers the violation independently. The moment you identify potential violations through internal audits, compliance reviews, or transaction monitoring—submit. Delayed disclosure after agency inquiry provides minimal benefit; late disclosure after investigation launch provides none. Think of the window as days or weeks, not months.

Disclosure content must be comprehensive. Describe specific transactions involved, Export Administration Regulations provisions violated, commodities or technology exported, countries and parties involved, and total transaction values. Attach supporting documentation: shipping records, license applications, end-user certificates, and classification worksheets. Explain your internal investigation methodology, findings regarding how violations occurred, responsible personnel, and whether violations were isolated incidents or systemic compliance failures.

Remedial measures strengthen disclosure impact substantially. Implement corrective actions before submission: enhanced compliance procedures, personnel changes where negligence occurred, and technology controls preventing recurrence. Engage independent compliance auditors to validate corrective action adequacy. Describe ongoing monitoring and testing to ensure sustained compliance improvement.

What Are the Risks of Voluntary Self-Disclosure?

Self-disclosure creates certain enforcement risks you should understand upfront. Submission confirms violations occurred and provides Bureau of Industry and Security detailed evidence for administrative proceedings. Information disclosed becomes the basis for penalty calculations and may support criminal referral when conduct demonstrates willfulness beyond negligence.

Criminal exposure demands careful evaluation before disclosure. Voluntary self-disclosure won’t stop criminal prosecution if your violations cross Justice Department thresholds—that’s the hard reality. Before you submit anything, talk to counsel who handles both administrative and criminal export control work. Structure your internal investigation under attorney-client privilege so interview notes, analyses, and early findings stay protected. Your disclosure submission needs enough detail to satisfy the Office of Export Enforcement without handing prosecutors a roadmap.

Sometimes alternative remediation makes more sense. In high-risk scenarios—particularly knowing shipments to embargoed destinations or deliberate concealment schemes—you might skip formal self-disclosure and focus purely on prospective compliance improvements instead. You’ll lose civil penalty mitigation. But you won’t create a detailed enforcement document for prosecutors to build their case.

Export Control Compliance Programs: Building Effective Systems

Strong compliance programs stop investigations before they start and reduce penalties when violations happen anyway. The Bureau of Industry and Security evaluates your compliance program’s strength in every enforcement matter—and that strength directly determines settlement terms and whether they impose a denial order.

Start with written policies. You need clear procedures for export classification, license requirement determination, restricted party screening, and recordkeeping. Put specific compliance responsibilities on named people with real authority and budget. Build escalation procedures for when potential violations arise or compliance questions exceed what your staff can handle.

Technical controls stop violations at the moment of transaction. Automate restricted party screening into your order management and shipping systems. Screen against the Bureau of Industry and Security Denied Persons List, Entity List, Unverified List, and Treasury Department Specially Designated Nationals List at order entry and right before shipment. Use export management software to flag license requirements based on ECCN, destination, and end-user profiles. Require compliance sign-off before anyone ships anything.

Train people across every function involved in exports. Sales teams, logistics, engineering, finance—all of them need training on regulatory requirements, red flag recognition, and what to escalate. Refresh annually and whenever regulations shift. Document who completed training. Test what they actually absorbed through assessments.

Auditing validates that everything actually works. Conduct internal audits sampling export transactions for licensing compliance, screening accuracy, and classification correctness. Test automated controls to confirm they function as designed. Bring in external auditors for independent validation. Document what you find and what you fixed. Regular auditing signals genuine commitment to compliance and catches problems before government investigators do.

How Often Should Companies Conduct Export Compliance Audits?

Audit frequency depends on your export volume and complexity. Daily transactions with broad product lines? Quarterly internal audits, annual external audits. Weekly shipments? Semi-annual internal, biennial external reviews. Even low-volume exporters should run annual internal checks on every transaction for the year.

Certain events demand immediate focused audits: mergers, acquisitions, new product lines, regulatory changes targeting emerging technologies, sanctions program shifts, or near-misses like customs holds. After a violation occurs, audit beyond just that specific failure—dig into whether systemic issues made it possible.

This article is published by an independent law firm for informational purposes only and does not represent or claim affiliation with any government body, international organization, or official authority.

Frequently Asked Questions