Veldhoven: The regulation that governs Europe’s export controls enters a formal evaluation window on 10 September, and the Commission has until 10 September 2028 to report what it finds. That two-year runway is unusually long, and it signals that officials expect the answer to be complicated rather than technical.
Regulation 2021/821 sets the rules for exporting dual-use items, meaning goods and software with both civilian and military applications. Lithography equipment, certain semiconductors, quantum sensors and advanced machine tools all sit inside its scope. Licensing itself stays national: member states issue the permits, apply their own risk appetite, and the Commission coordinates rather than decides. Exporters have complained for years that the same shipment clears in one capital and stalls in another.
A targeted consultation runs to 15 October, and the questions it puts to industry reveal where the pressure sits. One asks whether the annual list update arrives fast enough for technologies that change within a product cycle. Another probes whether national licensing divergence distorts the internal market. A third raises coordination with partners outside the multilateral regimes that traditionally set the lists.
That last point already changed practice. In November 2025 the EU adopted Delegated Regulation 2025/2003, which added a set of emerging-technology entries the multilateral regimes had not agreed. Officials grouped them as a 500 series on the control list, and the move mattered more than its drafting suggests. For the first time the Union controlled items on its own authority rather than transcribing a consensus reached elsewhere. Companies now track two sources of obligation instead of one.
Exporters read the review as an opening to argue for centralisation. A single European licence, or at least binding mutual recognition, would cut the compliance burden for firms shipping from several sites. Governments resist, because export licensing touches foreign policy and national security, and few capitals want a Brussels body second-guessing a refusal to a sensitive destination.
The counterargument deserves weight. Divergence is not only a cost; it is also a safety valve. A member state that reads a destination as high risk can refuse where others would approve, and the denial-notification system spreads that judgement across the Union. Centralise the decision and you replace twenty-seven risk assessments with one, which is efficient until it is wrong.
Enforcement is the quieter problem. Controls bind only if customs authorities can identify a controlled item in a container, and national customs services vary widely in the technical expertise they bring to that task. Firms report that intangible transfers, meaning software and technology sent by email or cloud, remain the hardest category to police and the easiest to route through a third country.
Two years is long enough for the technology landscape to shift again. Whatever the evaluation concludes about the 2021 rules, it will be describing a system that has already moved on. The Commission’s own guidance for exporters keeps expanding to cover the gap. The review’s value lies less in grading the past than in deciding whether the Union wants export controls it can change in months rather than years.
