Canada — Export Controls

Canada's export-control regime is established under the Export and Import Permits Act (EIPA), R.S.C. 1985, c. E-19, which governs the export and transfer of controlled goods and technology, the brokering of controlled items, and the import of goods on prescribed lists. The EIPA has been amended multiple times, most significantly in 2018 (S.C. 2018, c. 26) to implement Canada's accession to the Arms Trade Treaty, which expanded the regulatory framework to include brokering activities and risk-assessment criteria for military exports.

2026 legislative amendment — economic security controls authority. On March 22, 2026, the Budget 2025 Implementation Act (Bill C-15) received Royal Assent, amending the EIPA to authorize the Governor in Council and the Minister of Foreign Affairs to impose export and import controls for "economic security or public safety" reasons in addition to traditional foreign and defence policy grounds. As of June 2026, no specific economic-security controls have been imposed, but the legislative authority granting such powers is now in place. Practitioners should continue to monitor the Canada Gazette and Global Affairs Canada for related regulations or orders made under these new powers.

Core prohibition. Section 13 of the EIPA establishes the permit requirement: "No person shall export or transfer, or attempt to export or transfer, any goods or technology included in an Export Control List or any goods or technology to any country included in an Area Control List except under the authority of and in accordance with an export permit issued under this Act." The prohibition applies to physical exports as well as intangible transfers of technology—including by email, cloud storage, or oral disclosure—from a place in Canada to a place outside Canada.

The Export Control List (ECL). The Governor in Council establishes the ECL by regulation under section 3 of the EIPA. The current ECL is codified at SOR/89-202. The ECL is organized into nine Groups reflecting Canada's multilateral and bilateral export-control commitments:

• Group 1: Dual-Use List (Wassenaar Arrangement controls on strategic goods and technology)
• Group 2: Munitions List (Wassenaar Arrangement munitions list + Inter-American Convention Against Illicit Manufacturing and Trafficking in Firearms, plus firearms at item 2-1.e)
• Group 3: Nuclear Non-Proliferation List (Treaty on the Non-Proliferation of Nuclear Weapons and Nuclear Suppliers Group trigger list)
• Group 4: Nuclear-Related Dual-Use List (Nuclear Suppliers Group dual-use guidelines, INFCIRC/254/Rev.10/Part 2)
• Group 5: Miscellaneous Goods and Technology (including softwood lumber, logs, sugar-containing products, red cedar, and U.S.-origin goods and technology under item 5400)
• Group 6: Missile Technology Control Regime List (MTCR annex)
• Group 7: Chemical and Biological Weapons Non-Proliferation List (Australia Group + Chemical Weapons Convention)
• Group 8: (reserved for future use)
• Group 9: Arms Trade Treaty items (battle tanks, armoured combat vehicles, large-calibre artillery, combat aircraft, attack helicopters, warships, missiles, and small arms and light weapons, as defined in the ATT)

Except where the ECL specifies "All destinations," most items in Groups 1–4, 6, and 7 are controlled for export to all destinations except the United States. However, Group 2 (Munitions) items and certain Defence Production Act–controlled goods require permits even to the United States in specified circumstances. Group 5, item 5400 controls all U.S.-origin goods and technology, regardless of nature or destination (including re-export from Canada to third countries).

The Area Control List (ACL). Under section 4 of the EIPA, the Governor in Council may designate countries to which export or transfer of any goods or technology requires a permit. The ACL is codified at SOR/81-543. As of the regulation's most recent substantive amendment (June 20, 2017), the ACL includes North Korea (Democratic People's Republic of Korea). Exports or transfers to ACL countries require a permit irrespective of whether the goods or technology appear on the ECL.

Administering authority. The EIPA designates a member of the Queen's Privy Council for Canada as the "Minister for the purposes of this Act" (EIPA, s. 2(1), definition of "Minister"). Responsibility is currently vested in the Minister of Foreign Affairs (Global Affairs Canada, GAC). Within GAC, the Strategic Export Controls Bureau issues export permits, brokering permits, and related authorizations. The Bureau publishes the Export and Brokering Controls Handbook, the Guide to Canada's Export Control List, general export permits, and notices to exporters on its website (www.international.gc.ca/controls-controles). Applications are submitted electronically through the New Export Controls Online (NEXCOL) system or its successor electronic platforms.

The Canada Border Services Agency (CBSA) assists GAC with administration at the border under section 25 of the EIPA, which grants CBSA officers the same powers with respect to controlled goods and technology as they have under the Customs Act for imports and exports. CBSA officers receive and verify export permits at the time of export, as prescribed in the Reporting of Exported Goods Regulations.

Deemed export and technology transfer. Under section 2(1) of the EIPA, "technology" includes "technical data, technical assistance and information necessary for the development, production or use of an article included in an Export Control List." "Transfer" means "to dispose of it or disclose its content in any manner from a place in Canada to a place outside Canada." Consequently, sending controlled technical data by email, storing it on a foreign-accessible cloud server, or orally disclosing controlled information to a foreign national outside Canada constitutes a transfer requiring a permit—even if the physical item remains in Canada. Section 2(1.1) clarifies that a transaction relating to the movement of technology "includes a transaction that relates to the disclosure of its contents."

Annual reporting. Section 27 of the EIPA requires the Minister to table in Parliament, by May 31 each year, two reports: (1) an annual report on the administration of the EIPA, and (2) a report on the export of military goods and technology. The military goods report, published continuously since 1990 and made mandatory effective September 1, 2019, discloses permit utilization by destination, ECL item, and value, though exports of most Group 2 items to the United States are not captured because permits are not required for those transactions.

Source: Export and Import Permits Act, R.S.C. 1985, c. E-19 Source: Export Control List, SOR/89-202 Source: Area Control List, SOR/81-543 Source: Annual Report to Parliament on the Administration of the Export and Import Permits Act — 2026, Global Affairs Canada Source: Budget 2025 Implementation Act, S.C. 2026, c. 8 (EIPA amendment, economic security controls) Source: Export and Brokering Controls Handbook, Global Affairs Canada

Under the Export and Import Permits Act, the Minister of Foreign Affairs may issue General Export Permits (GEPs) that authorize all residents of Canada to export specified controlled goods or technology to designated destinations without applying for an individual export permit. GEPs are intended to facilitate trade in defined circumstances while reducing administrative burden, provided exporters comply with all applicable terms and conditions. Section 7(1.1) of the EIPA grants the Minister authority to issue general permits, and section 10(1) authorizes the Minister to prescribe the terms and conditions.

Mechanics of using a GEP. An exporter relying on a GEP does not submit an individual permit application to Global Affairs Canada. Instead, the exporter must determine whether the goods, technology, and destination fall within the scope of a published GEP, satisfy themselves that all terms and conditions are met, and cite the applicable GEP number (e.g., "GEP-12" or "LGE-12") in the appropriate field on the Canada Border Services Agency export reporting form (typically the B13A Export Declaration) when the goods are tendered for export. CBSA officers verify compliance at the time of export. Some GEPs impose additional obligations—such as annual notification to the Export Controls Operations Division before first use in a calendar year, or semi-annual reporting on actual shipments—detailed in each permit's text.

Key General Export Permits currently in force include:

• GEP No. 12 — United States Origin Goods (SOR/97-107). Section 1 authorizes export of all U.S.-origin goods and technology described in ECL item 5400 to any destination, subject to section 2's exclusions. Section 2 prohibits use of GEP-12 for exports to any country listed in the Area Control List or to Cuba, Iran, North Korea, and Syria. (As of June 20, 2017, the Area Control List includes only North Korea.) Exports of U.S.-origin goods to the excluded countries require individual permits. Section 3 requires exporters to insert "GEP-12" or "LGE-12" in the appropriate field on the export declaration required under the Customs Act.

• GEP No. 41 — Dual-Use Goods and Technology to Certain Destinations (SOR/2015-200, as amended September 1, 2023). Section 2 authorizes export or transfer of most items in ECL Group 1 (Dual-Use List) and ECL item 5504 to 32 designated eligible destinations that are members of multiple multilateral export-control regimes and maintain effective export-control systems. The 32 eligible destinations (as of the September 1, 2023 amendment) are: Australia, Austria, Belgium, the Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Japan, Latvia, Lithuania, Luxembourg, the Netherlands, New Zealand, Norway, Poland, Portugal, the Republic of Korea (South Korea), the Slovak Republic, Slovenia, Spain, Sweden, Switzerland, Türkiye, the United Kingdom, and the United States.

Exclusions from GEP-41. Section 3 prohibits use of GEP-41 for goods or technology: (a) subject to an order or regulation under the Special Economic Measures Act or section 2 of the United Nations Act (i.e., sanctions regimes such as Russia, Belarus, Iran); (b) for which an individual export permit has been refused in the past five years; (c) referred to in ECL items excluded from GEP-41 scope (notably Group 2 Munitions List items, Group 6 MTCR items, Group 7 chemical/biological items, Group 9 ATT items, and specified subcategories of Group 1); (d) referred to in Export Permits Regulations sections 3(3)(c)(i) to (iii) (specific munitions/ITAR-related items); or (e) as of the September 1, 2023 amendment, goods or technology intended for the development, production, or use of rocket systems or unmanned aerial vehicles with a range of 300 km or greater. Section 4(a) requires exporters, before making their first export or transfer under GEP-41 in a calendar year, to provide written notification to the Export Controls Division containing name, address, telephone number, email, and (if a corporation) business number and contact person. Section 4(b) requires semi-annual reports within 30 days after each six-month period ending January 31 or July 31, detailing consignee information, goods description, ECL item, quantity, value, and country. Section 5 requires retention of records for six years.

• GEP No. 47 — Export of Arms Trade Treaty Items to the United States (SOR/2019-230). Effective September 1, 2019 (coinciding with the creation of ECL Group 9), section 2 authorizes export of all Group 9 items and certain items in ECL items 2-1 and 2-3 (munitions) to the United States, subject to terms and conditions. Section 3 excludes prohibited ammunition, prohibited devices, prohibited firearms, and prohibited weapons as defined in subsection 84(1) of the Criminal Code from GEP-47's scope; those require individual permits even to the United States. Section 5(1)(a) requires exporters to provide written notification to the Export Controls Operations Division before making their first export under GEP-47 in a calendar year (name, address, contact information). Section 5(1)(b) requires semi-annual reports within 30 days after each six-month period ending June 30 and December 31, stating whether goods were exported under GEP-47 during that period, and if so, providing a description of the goods (including ECL provision and Guide item number), quantity, and value in Canadian dollars. Section 6 requires retention of records for six years.

• GEP No. 43 — Nuclear Goods and Technology to Certain Destinations (SOR/2012-89). Authorizes export of certain ECL Group 3 items to specified destinations.

• GEP No. 44 — Nuclear-Related Dual-Use Goods and Technology to Certain Destinations (SOR/2012-90). Authorizes export of certain ECL Group 4 items to specified destinations.

• GEP No. 45 — Cryptography for the Development or Production of a Product (SOR/2012-160). Authorizes export of cryptographic goods and technology in specified ECL items when used for development or production.

• GEP No. 46 — Cryptography for Use by Certain Consignees (SOR/2013-1). Authorizes export of cryptographic goods and technology in specified ECL items to certain consignees.

• GEP No. 37 — Toxic Chemicals and Precursors to the United States (SOR/98-264) and GEP No. 38 — CWC Toxic Chemical and Precursor Mixtures (SOR/98-265) cover Chemical Weapons Convention-related items.

GEPs 43, 44, 45, and 46 require exporters to inform the Export Controls Division in writing on an annual basis of their intention to utilize the GEP. Cryptographic goods and technology do not require permits for export to the United States.

Compliance and record-keeping. Exporters using GEPs remain subject to the same end-use, end-user, and diversion-control obligations that apply to individual permits. The exporter must retain documentation sufficient to demonstrate that the goods and destination fell within the GEP's scope, that no exclusions applied, and that all notification and reporting obligations were met. Exporting or transferring controlled goods except in accordance with the terms and conditions of a GEP can result in prosecution under the EIPA; penalties for non-compliance are the same as for violations of individual permits.

Source: Export and Import Permits Act, R.S.C. 1985, c. E-19, ss. 7(1.1), 10(1) Source: General Export Permit No. 12 — United States Origin Goods, SOR/97-107 Source: General Export Permit No. 41 — Dual-use Goods and Technology to Certain Destinations, SOR/2015-200 Source: General Export Permit No. 47 — Export of Arms Trade Treaty Items to the United States, SOR/2019-230 Source: Export and Brokering Controls Handbook, Global Affairs Canada Source: CBSA Memorandum D19-10-3, Administration of the Export and Import Permits Act (Exportations)

Exporters of goods or technology on the Export Control List or destined to a country on the Area Control List who cannot rely on a General Export Permit must apply for an individual export permit issued by the Minister of Foreign Affairs. The application, decision, and issuance process is governed by the Export and Import Permits Act (EIPA) and the Export Permits Regulations, SOR/97-204.

Statutory authority. Section 7 of the EIPA provides that "the Minister may issue to any resident of Canada applying for a permit to export or transfer any goods or technology included in an Export Control List or to export or transfer any goods or technology to any country included in an Area Control List a permit to export or transfer those goods or technology." The permit is discretionary; the Minister may issue, refuse to issue, or return an application without decision. Section 10(1) authorizes the Minister to prescribe by regulation the terms and conditions of export permits. Section 12(a) and (b) authorize the Governor in Council to make regulations prescribing the information to be furnished by permit applicants and the procedures governing the issuance and use of permits.

Required information under the Export Permits Regulations. Section 3 of the Export Permits Regulations (SOR/97-204) prescribes the information that an applicant must submit. Subsection 3(2) requires a duly completed and signed application form, provided by the Minister, containing:

• The date of the application;
• The applicant's name, address, telephone number, email address, facsimile number, and any identifier number assigned by the Minister; if the applicant is a corporation, the name and telephone number of a contact person familiar with the application;
• If applying on behalf of another person or corporation who will export the goods or technology, the name, address, contact details, and identifier number of that exporter;
• The name, address, telephone number, email address, facsimile number of each consignee, and the name and telephone number of a contact person associated with the consignee;
• The country in which the goods or technology are to be used or the country of final destination;
• For each type of separately identifiable goods or technology: (i) country of origin and, if any portion is of U.S. origin and included in ECL item 5400, the proportion to the total cost; (ii) a detailed description, including the ECL Group and item number; (iii) quantity and total value in Canadian dollars; (iv) the Export Control List item number and the item number assigned by the Guide to Canada's Export Control List; (v) the expected date of export or transfer; (vi) the Harmonized Commodity Description and Coding System number; (vii) the expected mode of transport; (viii) the name and address of the person from whom the applicant or exporter acquired the goods or technology; (ix) the intended end-use by the consignee; (x) the intended end-use location, if different from the consignee's location; (xi) an import permit issued by the destination government (or an indication whether such a permit is required);
• An indication of the means by which the permit should be sent to the applicant or exporter;
• Information to establish that the export or transfer is consistent with the purpose for which the goods or technology are controlled.

Subsection 3(3) requires the applicant to provide:

• (a) A declaration that, to the best of the applicant's knowledge, the goods or technology will enter into the economy of the identified destination country and will not be transshipped or diverted;
• (b) For goods or technology in ECL Group 2, Group 6, or item 5504 of Group 5, proof of registration or exemption from registration under the Defence Production Act and the Controlled Goods Regulations, or (if the applicant is applying on behalf of a person exempt from the Controlled Goods Regulations under the Canada–United States Defence Production Sharing Agreement) a U.S. export authorization;
• (c) For goods or technology in ECL Group 2 or item 5504 of Group 5, where an individual export permit has been refused for the same goods or technology and same destination in the previous five years, an explanation of why the permit should be issued;
• (d) For goods or technology in ECL item 2-1, 2-2, or 2-20, a statement of whether the applicant has an arrangement with the Department of National Defence under the Defence Production Act, or is providing goods or technology under such an arrangement;
• (e) For goods or technology of U.S. origin included in ECL item 5400, a U.S. export authorization (if required by the United States).

The regulations provide that the Minister may require additional information to clarify the application or the description of the goods or technology.

Operational procedures (Global Affairs Canada guidance). Global Affairs Canada's Export and Brokering Controls Handbook states that exporters must register for an EIPA file number (an identifier assigned by the Export Controls Division) before submitting a first application. Applications are submitted electronically through the New Export Controls Online (NEXCOL) system. The Handbook also details supporting documentation that the Export Controls Division typically requires beyond the application form itself, including technical specifications, end-user undertakings or end-use certificates, import authorization from the destination government (where applicable), and proof of Controlled Goods Program registration (for applicable items). The Handbook describes these as operational practices for assisting in the Minister's assessment under the EIPA and the Regulations.

Processing timelines and service standards. Global Affairs Canada publishes service standards for individual permit applications:

• 10 business days for applications for permits to export controlled strategic goods from eligible exporters who have provided all required supporting documentation, where consultations outside the Trade Controls Bureau are not required (the Handbook notes these are typically exports to "Open Policy Countries" — allied states with effective export-control systems);
• 40 business days where inter-departmental or inter-agency consultation is required (the Handbook notes these are typically exports to "Non-Open Policy Countries");
• 3 business days for permit amendment requests;
• 8 weeks for multi-destination permits for cryptographic items;
• No service standard for destinations subject to Canadian economic sanctions under the Special Economic Measures Act or the United Nations Act; applications for these destinations are examined in detail and may be referred to the Minister of Foreign Affairs for decision.

The Handbook advises exporters to apply at least 6 weeks in advance of the expected shipment date for military and strategic items to non-Open Policy Countries, and notes that firearms permit applications can take up to 12 weeks. These published service standards are internal targets, not statutory timelines binding the Minister. Incomplete applications or applications requiring clarification will be held until additional information is received.

Permit validity period. Permits specify their validity period on their face. The Handbook states that for quota-controlled goods (certain agricultural products, softwood lumber), permits are normally issued with a validity period of 30 days around the specified date of shipment (5 days prior and 24 days after). For strategic goods, validity periods vary depending on the nature of the goods and the transaction; multi-destination permits for established exporters often have 12- to 24-month validity periods. Section 7 of the Export Permits Regulations permits a permit holder to request an amendment in writing before the permit's expiry, stating the terms or conditions to be amended and the reasons for the amendment.

Presentation at export. Section 5 of the Export Permits Regulations requires that, at the time of exportation (including goods containing controlled technology), the exporter must provide the permit to a Canada Border Services Agency (CBSA) officer at the customs office, within the reporting timeframes specified in the Reporting of Exported Goods Regulations. Section 6 requires the CBSA officer to verify that the permit is valid and to compare the information in the permit with the information in the prescribed export declaration form under the Customs Act. Exportation or attempted exportation without a valid export permit issued under the EIPA is an offence under section 19 of the EIPA, subject to a fine or imprisonment for a term not exceeding 10 years, or both.

Ministerial discretion and policy considerations. The EIPA does not prescribe substantive decision criteria for individual permit applications; the Minister's discretion is broad. The Export and Brokering Controls Handbook states that Global Affairs Canada assesses applications to ensure that exports from Canada will not be diverted to end-uses or end-users contrary to Canada's foreign and defence policy goals or that could lead to embarrassment or liability for the exporter, and that permit applications are examined with attention to the destination country, the purpose and intended use of the goods or technology, and the consignees and end-users.

Source: Export and Import Permits Act, R.S.C. 1985, c. E-19 Source: Export Permits Regulations, SOR/97-204 Source: Export and Brokering Controls Handbook, Global Affairs Canada Source: Service standards for export permit applications, Global Affairs Canada

Canada's Export and Import Permits Act imposes criminal penalties for violations of the Act or its regulations, with significantly higher exposure for indictable offences than for summary conviction offences. Section 19 of the EIPA establishes the penalty framework, and section 20 extends liability to corporate officers and directors.

Criminal offence and dual-procedure structure. Section 19(1) provides that every person or organization that contravenes any provision of the EIPA or the regulations is guilty of an offence prosecutable in two ways:

• (a) Summary conviction: a fine not exceeding $250,000 or imprisonment for a term not exceeding 12 months, or both; or
• (b) Indictable offence: a fine in the discretion of the court (no statutory maximum) or imprisonment for a term not exceeding ten years, or both.

The Crown's choice between summary and indictable proceedings is discretionary and typically reflects the gravity of the contravention. Indictable proceedings permit unlimited fines and substantially longer imprisonment terms. Section 19(2) imposes a three-year limitation period for summary-conviction prosecutions; prosecutions must be instituted within three years after the subject-matter of the complaint arose. No limitation period applies to indictable prosecutions.

Contraventions covered. Section 19 applies to "any provision of this Act or of the regulations." The most common contraventions prosecuted include:

• Export or transfer of goods or technology on the Export Control List without a valid export permit, contrary to section 13 of the EIPA;
• Export or transfer of any goods or technology to a country on the Area Control List without a valid export permit, contrary to section 13;
• Export of goods in excess of the quantity authorized by a permit, in violation of the permit's terms and conditions;
• Misrepresentation of goods in a permit application (for example, misdescribing the ECL item number, the consignee, the end-use, or the destination country);
• Use of a General Export Permit in circumstances where one or more of the GEP's exclusions apply (for example, exporting Group 1 dual-use items to a sanctioned destination under GEP-41 when section 3(a) of GEP-41 prohibits use of the permit for goods subject to an order under the Special Economic Measures Act).

The EIPA does not distinguish between inadvertent and intentional violations in the penalty section. Mens rea (criminal intent) may be relevant to sentencing but is not a statutory element of the offence under section 19.

Sentencing factors. Section 19(3) directs the court, when imposing a sentence on or discharging an offender convicted under the EIPA, to consider "the nature and value of the exported or transferred goods or technology, or the imported goods, that are the subject-matter of the offence" in addition to any other relevant factors. Courts may consider the degree of controlled-goods sensitivity (for example, Group 2 munitions versus Group 5 agricultural products), the destination country (particularly whether the destination is subject to Canadian sanctions or is on the Area Control List), and the dollar value of the unauthorized shipment.

Corporate officer and director liability. Section 20 of the EIPA provides that if an organization commits an offence under the Act, "any officer or director of the organization that directed, authorized, assented to, acquiesced in or participated in the commission of the offence is a party to and guilty of the offence and is liable on conviction to the punishment provided for the offence whether or not the organization has been prosecuted or convicted." This provision establishes personal criminal liability for officers and directors whose involvement in the offence meets the statutory threshold. A director who merely held the title but did not direct, authorize, assent to, acquiesce in, or participate in the contravention is not captured. Conversely, a director who approved an export strategy that resulted in a permit-less shipment, or who was informed of a non-compliant transaction and took no corrective action (acquiescence), can be prosecuted individually under section 20 and is subject to the same fines and imprisonment terms as the organization.

Enforcement authorities. Section 25 of the EIPA delegates responsibility for enforcement to "all officers as defined in subsection 2(1) of the Customs Act." In practice, Global Affairs Canada entrusts enforcement to the Canada Border Services Agency (CBSA) and the Royal Canadian Mounted Police (RCMP). CBSA officers verify export permits at the border under the Reporting of Exported Goods Regulations and may detain shipments or refuse export when a required permit is missing, expired, or inconsistent with the goods presented. The CBSA may refer suspected violations to Global Affairs Canada for a control-status assessment, and Global Affairs Canada may in turn refer matters to the RCMP for criminal investigation.

Voluntary disclosure program. Global Affairs Canada encourages exporters and importers who discover inadvertent non-compliance to voluntarily disclose the violation to the Export Controls Division as soon as possible. GAC's published guidance states that if, after considering the information provided, GAC is satisfied that the exporter has fully cooperated, no further action may be warranted. However, depending on the gravity or overall circumstances of the case, GAC may nonetheless refer the disclosure to CBSA or RCMP for further review. In recent years, GAC has received between 20 and 41 voluntary disclosures annually from Canadian exporters regarding strategic and military goods and technology. Voluntary disclosure does not guarantee immunity from prosecution, but GAC treats cooperation as a mitigating factor in deciding whether to recommend prosecution.

Prosecution venue and procedure. Section 22(1) of the EIPA permits proceedings in respect of an offence to be instituted, tried, or determined at the place in Canada where the offence was committed or at the place where the accused is, resides, or has an office or place of business at the time the proceedings are instituted. Section 22(2) permits an information (the formal charging document) to include more than one offence committed by the same person or organization, allows all offences in the information to be tried concurrently, and permits one conviction for any or all offences so included. This provision facilitates prosecution of repeat or multiple violations in a single proceeding.

Administrative monetary penalties — not available. The CBSA's Administrative Monetary Penalty System (AMPS), which applies to certain contraventions of the Customs Act and the Customs Tariff, does not apply to violations of the EIPA. CBSA guidance (Memorandum D19-10-3) confirms that AMPS authorizes monetary penalties only for non-compliance with the Customs Act, the Customs Tariff, and regulations under those Acts. EIPA violations are subject exclusively to criminal prosecution under section 19; there is no civil penalty regime, no administrative fine schedule, and no settlement authority short of the Crown's discretion not to prosecute or to accept a guilty plea to a lesser charge.

Record-keeping and inspection powers. Section 10.1 of the EIPA authorizes the Minister of Foreign Affairs to designate inspectors. Section 10.2 grants inspectors the power, at all reasonable times, to inspect, audit, or examine the records of any person who has applied for or holds a permit or authorization under the EIPA. Failure to maintain adequate records or to cooperate with an inspection does not itself constitute a distinct offence under section 19, but the absence of documentation may constitute evidence of non-compliance with permit terms and conditions, which is an offence under section 19(1).

Source: Export and Import Permits Act, R.S.C. 1985, c. E-19, ss. 19, 20, 22, 25 Source: Annual Report to Parliament on the Administration of the Export and Import Permits Act — 2024, Global Affairs Canada Source: CBSA Memorandum D19-10-3, Administration of the Export and Import Permits Act (Exportations)

Determining whether goods or technology are controlled under the Export Control List is the threshold compliance question for every Canadian exporter. The ECL itself (SOR/89-202) does not spell out the technical specifications of controlled items; instead, section 1 incorporates by reference A Guide to Canada's Export Control List, published by Global Affairs Canada "as amended from time to time." The Guide contains the detailed technical descriptions, parameters, notes, and defined terms that exporters must compare against their goods and technology.

Structure of the Guide. The current Guide (May 2025 edition, 387 pages) is organized by the nine ECL Groups described in section 1 of the existing guide. Within each Group, items are designated by a hierarchical numbering scheme: for example, item 1-1.A.4.d. refers to Group 1 (Dual-Use List), Category 1, subcategory A (equipment, assemblies and components), entry 4, sub-entry d. The Guide includes extensive Technical Notes, Notes, and a Definitions annex that specifies the meaning of terms in quotation marks (for example, "technology," "required," "development," "production," "use," "in the public domain," "basic scientific research"). These defined terms and technical notes are binding interpretive tools. Section 2 of the ECL regulation states that goods and technology "as described in Group [X] of the Guide" are subject to export control, so classification against the Guide's exact wording determines permit requirements.

Parameter-based classification. Most ECL items are defined by quantitative or qualitative technical parameters rather than by product names or HS tariff headings. For example, Group 1, Category 1 controls certain composite materials only if they meet specified thresholds for "specific tensile strength" or "specific modulus," calculated according to ISO 10618 (2004) or national equivalents and tested under prescribed conditions. The exporter must obtain or generate test data, engineering specifications, or technical data sheets that demonstrate whether the good meets or exceeds the controlled parameter. The Guide's Technical Notes prescribe the measurement methods—such as ASTM D-257 for bulk electrical conductivity or NIJ 0101.06 for body-armour threat-level standards—so classification is repeatable and verifiable.

"Specially designed" and "required" technology. Many items in Groups 1, 2, 6, 7, and 9 control components, software, or technology that are "specially designed" for a controlled end-item or "required" for the "development," "production," or "use" of controlled goods. The Guide's Definitions annex defines "specially designed" (also written "designed or modified") to mean designed, developed, or configured to perform a specific function for a controlled item, with certain exclusions for items used in civil industries or for multiple applications. "Technology" is defined as "specific information necessary for the 'development', 'production' or 'use' of a product," including technical data, technical assistance, and know-how. The General Technology Note in each Group (for example, Group 1's note states that "'technology' which is 'required' for the 'development', 'production' or 'use' of items controlled in the Dual-Use List is controlled according to the provisions in each Category") applies a catch to transfer of intangible technology even when the physical item is not itself controlled or is exempted. However, technology "in the public domain" and "basic scientific research" are excluded from controls.

Exporter self-assessment and due diligence. The EIPA does not require an exporter to obtain pre-clearance or pre-classification from Global Affairs Canada before exporting. Section 2(1) of the EIPA establishes the exporter's obligation: "It is the individual's responsibility to conduct the due diligence required to confirm whether any intervening regulatory changes are applicable to their export or transfer." In practice, exporters conduct self-assessment by reviewing the Guide, comparing their goods' technical specifications to the ECL item parameters, and consulting the Guide's defined terms and notes. If the exporter concludes that the goods or technology are not on the ECL, or fall within a U.S.-destination exemption or a General Export Permit's scope, no individual permit application is required. Conversely, if the exporter's assessment indicates ECL control, an individual permit application (or reliance on a GEP, if available) is mandatory under section 13 of the EIPA.

Advisory Opinions (AO) — non-binding technical assessment. To obtain greater certainty regarding the control status of a particular good or technology, an exporter may request an Advisory Opinion from Global Affairs Canada's Export Controls Division. The AO process is described in the Export and Brokering Controls Handbook and on the GAC website. The AO is not a legislated requirement and does not bind the Minister's discretion under the EIPA; it is a courtesy tool to assist exporters in learning to navigate the ECL and understanding the commodity-assessment process. An AO application submitted through the NEXCOL system should include: (1) a detailed technical description of the item, including engineering specifications, configuration control nomenclature, model/variant numbers, and technical data sheets; (2) if the item is of U.S. origin, the DoC ECCN and CCATS ruling or DoS licence details; (3) if the item is of EU origin, the EU licence and Control List commodity code; (4) a compliance spreadsheet or matrix comparing the item's technical capabilities and characteristics to the technical criteria in the ECL items that may apply; and (5) details of any previous technical assessment (AO, export permit, CBSA detention, or other Canadian government ruling) for the same or similar item.

The Export Controls Division issues an AO letter stating whether, in GAC's view, the described item is controlled under a specific ECL item or is not controlled. Limitations and disclaimers. The Handbook warns that: (a) the AO is based on the ECL in force at the time of the assessment; regulatory amendments (published in the Canada Gazette and on the GAC website) may change the control status, and the exporter remains responsible for monitoring ECL updates; (b) any modifications to the uniquely identified commodity assessed under the AO require a re-evaluation; (c) the AO does not address whether a permit will be issued (policy considerations, end-use, end-user, and destination risk are separate from technical classification); (d) the AO does not address sanctions obligations under the Special Economic Measures Act or the United Nations Act, or ECL item 5505 catch-all controls for certain end-uses and end-users; and (e) other government departments (for example, the Controlled Goods Program under the Defence Production Act, or the Canadian Nuclear Safety Commission) may impose additional authorizations. An AO is not a permit; if the AO confirms that the item is controlled, the exporter must still apply for and obtain an export permit (or rely on a GEP) before export.

ECL item 5505 — catch-all for goods to certain end-uses. Beyond the technical-parameter-based controls in Groups 1–4, 6, 7, and 9, ECL item 5505 controls the export of goods and technology not controlled elsewhere on the ECL to certain countries of concern when the exporter knows, or has been informed by GAC, that the items are or may be intended for use in connection with the development, production, handling, operation, maintenance, storage, detection, identification, or dissemination of chemical, biological, or nuclear weapons or other nuclear explosive devices, or the development, production, maintenance, or storage of missiles capable of delivering such weapons. Item 5505 imposes a knowledge-based obligation on the exporter; goods that would otherwise be uncontrolled become controlled if the end-use triggers the catch-all. Goods controlled under item 5505 may not be exported under a General Export Permit and require an individual permit application. Notice to Exporters SER-176 provides additional detail on item 5505. An AO assesses only whether an item falls within a specific ECL technical description; it does not confirm or rule out item 5505 applicability, which depends on transaction-specific end-use and end-user information.

Amendments to the ECL and the Guide. A June 3, 2021 regulatory amendment changed the incorporation-by-reference mechanism for the Guide. Before 2021, each amendment to the Guide required a separate regulatory amendment to the ECL. Since 2021, section 1 of the ECL defines "Guide" as the GAC-published document "as amended from time to time," and amendments to the Guide that align with existing multilateral export-control regimes (Wassenaar Arrangement, Nuclear Suppliers Group, Missile Technology Control Regime, Australia Group, Arms Trade Treaty) enter into force 30 days after publication of the updated Guide by GAC, without a regulatory amendment. Amendments for any other reason—including unilateral Canadian controls—still require a formal regulatory amendment published in the Canada Gazette. GAC publishes backgrounders and Notices to Exporters when new versions of the Guide are released. Exporters must therefore monitor both the GAC Export Controls website for new Guide editions and the Canada Gazette for ECL regulatory amendments.

Source: Export Control List, SOR/89-202, s. 1 (definition of "Guide") Source: A Guide to Canada's Export Control List – May 2025, Global Affairs Canada Source: Export and Brokering Controls Handbook, Global Affairs Canada — Section on Advisory Opinions Source: About Advisory Opinions, Global Affairs Canada Source: Backgrounder: Amendment to A Guide to Canada's Export Control List (incorporation by reference), Global Affairs Canada, May 22, 2025

Canada’s export-control regime applies not only to goods and technology explicitly listed in Groups 1–9 of the Export Control List (ECL), but also extends to “catch-all” controls under ECL item 5505. This provision requires Canadian exporters to apply for an individual export permit when they know, or have been informed by Global Affairs Canada (GAC), that goods or technology (not otherwise listed on the ECL) are intended for use, or may be intended for use, in connection with the development, production, handling, operation, maintenance, storage, detection, identification, or dissemination of chemical, biological, or nuclear weapons or their delivery systems, or related activities.

Statutory basis and scope. ECL item 5505 is issued under the authority of the Export and Import Permits Act (EIPA) and is codified at SOR/89-202, Schedule, Group 5. The text captures both specific knowledge (“knows”) and situations where the exporter is placed on notice by GAC (“has been informed”). Coverage includes the export or transfer of goods and technology that are not otherwise controlled on the ECL—so-called “catch-all” items—in circumstances giving rise to proliferation, WMD, or missile concerns. It is jurisdiction-neutral: item 5505 applies to all destinations except the United States.

Exporter’s obligations — end-use and end-user due diligence. Exporters must exercise due diligence to screen transactions for WMD or missile risks, sanctioned end-users, and “red flag” end-uses even where their product is not on the ECL. This includes:

• Reviewing end-use statements, contracts, and communications;
• Checking for diversion risk (e.g., intermediary hubs, sanctioned destinations, or odd routing);
• Screening consignees and end-users against Canadian and UN sanctions lists;
• Assessing whether the stated use plausibly matches the good’s characteristics.

GAC guidance notes that exporters who become aware of a potential end-use concern must halt the export and seek an Advisory Opinion or file a permit application. Exporters may also receive written notice from GAC indicating a specific transaction or customer poses WMD/end-use risk, thereby triggering mandatory permitting under item 5505.

Practical exclusions. Some exports are already subject to other controls, such as goods listed elsewhere in the ECL or exports to the United States. Item 5505 does not create a blanket reporting or pre-clearance obligation for uncontrolled goods, but it does create a regulatory obligation if the knowledge or notification condition is satisfied. Exporters found negligent in screening, or who fail to seek guidance when red flags arise, may be prosecuted under the EIPA for exporting without a required permit.

Guidance and notices. GAC has issued Notices to Exporters (notably SER-176) clarifying the application of item 5505, scenarios posing proliferation risk, and suggested due diligence measures.

Source: Export Control List, SOR/89-202, Group 5, item 5505 Source: Export and Brokering Controls Handbook – End-use/End-user Controls Source: Notice to Exporters SER-176, Group 5 (5505) of the Export Control List

Canada's brokering controls were enacted in 2019 by amendments to the Export and Import Permits Act (EIPA), ss. 7.1–7.6, and implementing regulations SOR/2019-229 (Brokering Control List, BCL) and SOR/2019-230 (Brokering Permit Regulations). The brokering regime applies to:

• Canadian citizens, permanent residents, and Canadian-incorporated entities—regardless of where the brokering activity occurs; and
• Any person or organization physically present in Canada, regardless of nationality or place of incorporation (EIPA s. 7.1(3)).

Definition of brokering and scope of control. “Brokering” is defined in EIPA s. 7.1(1) as “arranging or negotiating a transaction that relates to the movement of goods or technology included in a Brokering Control List from a foreign country to another foreign country.” The BCL, established by SOR/2019-229, identifies goods and technology subject to brokering controls. The BCL is modelled on the ECL but focuses on the highest-risk categories: Group 2 (Munitions List), Group 6 (Missile Technology Control Regime), Group 7 (CBW Non-Proliferation), Group 9 (ATT items), and certain US-origin items under item 5506. The BCL items are specified by reference to the ECL groups and to the ATT and other multilateral obligations. The BCL came into force on 1 September 2019.

Permit requirement and extraterritorial application. EIPA s. 7.1(2): persons subject to Canadian law must obtain a brokering permit from the Minister of Foreign Affairs before brokering controlled goods or technology unless an exemption applies. The requirement captures activities entirely outside Canada by Canadians or Canadian companies (EIPA s. 7.1(3)). Brokering a BCL movement without a permit constitutes an offence under EIPA s. 19 and may trigger liability for both individuals and corporate officers under s. 20.

Exemptions. Certain activities are excluded from brokering controls by regulation. SOR/2019-230, s. 2 excludes the provision of routine financial, insurance, or general advertising services, so long as the person does not also arrange or negotiate the actual movement. Transactions solely involving exports from Canada fall under standard export permit rules (not brokering controls).

Application and compliance. The process for brokering permits closely tracks individual export permit procedure (see 'Individual export permit application process'). Applicants must provide details on the broker, goods/technology, counterparties, and end-use. The Minister may grant, refuse, or attach conditions to any permit (EIPA s. 7.2). Non-compliance is subject to EIPA s. 19–20, which authorizes criminal prosecution and personal liability for officers and directors who direct or acquiesce in the breach.

As of June 2026, these requirements and permit process remain as described in the referenced statutes and regulations.

Source: Export and Import Permits Act, R.S.C. 1985, c. E-19, ss. 7.1–7.6 Source: Brokering Control List, SOR/2019-229 Source: Brokering Permit Regulations, SOR/2019-230 Source: Export and Brokering Controls Handbook (Brokering section), Global Affairs Canada

Canada exercises robust controls over re-export of U.S.-origin goods and technology under the Export Control List (ECL), Group 5, item 5400. As codified in SOR/89-202, item 5400 covers “all goods and technology that are of United States origin, unless they are included elsewhere in this List or in the Area Control List.” This means that, if a good or technology (including tangible items and intangible transfers) is of U.S. origin and not captured or excluded elsewhere by the ECL or Area Control List, its export or transfer from Canada to any destination other than the United States requires Canadian authorization.

Key compliance points for exporters:

• The scope of item 5400 is broad: it applies to all types of goods and technology of United States origin—regardless of the nature or sensitivity—unless specifically described or excluded elsewhere in the ECL. If the only basis for control is U.S. origin, exporters must reference item 5400 and not another ECL category. (SOR/89-202, Group 5, item 5400)
• Permit requirement: Re-exports from Canada of U.S.-origin goods or technology to destinations outside the United States require a Canadian export permit, unless a General Export Permit (GEP) provides an exemption. The requirement covers both physical exports and intangible transfers such as email, cloud storage, or oral disclosures, as clarified in EIPA s. 2(1) and the Export and Brokering Controls Handbook. (EIPA s. 2(1); Handbook, Group 5 guidance)
• Exports or transfers to the United States are outside the scope of 5400 (“unless they are included elsewhere... or in the Area Control List”)—Canadian law does not require a permit for returns or re-exports to the U.S., though U.S. law may still apply. (SOR/89-202, Group 5, item 5400)
• General Export Permit No. 12 (GEP-12): This provides the main permit-free pathway for most U.S.-origin goods or technology, but with specific country exclusions. As of June 2026, GEP-12 excludes North Korea (the only country on the Area Control List), Cuba, Iran, and Syria (“Section 2 prohibits use of GEP-12 for exports to any country listed in the Area Control List or to Cuba, Iran, North Korea, and Syria.” SOR/97-107, s. 2). For these destinations, individual permits are always required. (SOR/97-107, s. 2)
• Canadian controls apply in addition to any U.S. re-export requirements. Canadian law operates in parallel to—rather than being determined by—U.S. export control law. Exporters must confirm compliance with both regimes when handling U.S.-origin content destined for a third country.

Documentation and risk: Exporters should retain clear records substantiating origin, composition, and export transactions for all U.S.-origin items. Failing to secure a required Canadian export permit (or misuse of GEP-12) can trigger enforcement under EIPA ss. 19–20, leading to the penalties described in the penalties section of this guide.

Guidance is current as of 2026-06-15. Regulatory details and GEP country eligibilities can change; exporters must monitor GAC Notices and periodically verify regulatory texts.

Source: Export Control List, SOR/89-202, Group 5, item 5400 Source: General Export Permit No. 12, SOR/97-107 Source: Export and Brokering Controls Handbook – Group 5 Items (including 5400)

Canada’s export-control regime governs not only the physical export of goods and technology but also “deemed exports”—intangible transfers—under the Export and Import Permits Act (EIPA) and the Export Control List (ECL). The EIPA (s. 2(1)) defines “technology” to include technical data, technical assistance, and know-how required for controlled items, and “transfer” includes any disclosure “from a place in Canada to a place outside Canada,” by any means—electronic or otherwise (EIPA ss. 2(1), 2(1.1)). Section 13 prohibits exporters from transferring controlled technology to a foreign destination, absent an export permit.

Intangible transfer scenarios (drawn from GAC guidance): The Export and Brokering Controls Handbook (GAC) spells out how “transfer” extends to:

• Sending controlled technical data by email to a recipient located abroad;
• Uploading or storing controlled files to cloud servers accessible from outside Canada;
• Sharing controlled technical specifications or software with a foreign national outside Canada via remote desktop or platform access;
• Providing technical training, assistance, or verbal instructions to a foreign national physically located outside Canada, such as through online meetings or calls.

Exporters are required to classify not just goods but also underlying technology; the Guide to Canada’s Export Control List provides the technical criteria and definitions (for example, “technology,” “required,” "public domain"). The key compliance risk is that seemingly routine activities—cloud storage, file sharing, email attachments, or remote access—can create an “export” under the law when the recipient is outside Canada.

Distinguishing factor: The regulation only triggers when technology departs Canada (e.g., the recipient is physically outside Canada). Disclosures entirely within Canada, even to foreign nationals, are not a "transfer" for EIPA purposes (though such disclosures may still trigger Controlled Goods Regulations or other requirements).

Risk mitigation and enforcement: Global Affairs Canada (GAC) guidance recommends exporters implement safeguards for controlled technology—such as technical restrictions on access and monitoring file storage locations—to prevent unauthorized cross-border transfers. Violations are subject to EIPA s. 19, which provides for criminal liability for both individuals and corporate officers or directors who knowingly participate in an export-control breach.

Guidance in the Handbook and the official Guide is current as of June 2026. Exporters should verify updates through Global Affairs Canada and CBSA resources when undertaking cloud-based or remote-technology sharing.

Source: Export and Import Permits Act, R.S.C. 1985, c. E-19, ss. 2(1), 2(1.1), 13 Source: Guide to Canada’s Export Control List – Definitions and Technology notes, GAC 2025 Source: Export and Brokering Controls Handbook — "Intangible Transfers and Cloud Computing"

Canadian export-control law imposes documentary retention and inspection obligations on all persons and companies exporting or transferring goods or technology subject to the Export and Import Permits Act (EIPA), with recent changes for certain nuclear transactions.

General Requirement under EIPA Section 10.1(1) of the EIPA requires any person who applies for or holds a permit under the Act, or who exports or transfers goods or technology covered by the Act, to keep all records needed to determine compliance with the Act. These obligations are broad, applying to controlled goods and technology exports, intangible transfers, and permit applications. Records generally include: export permits (individual or general), CBSA export declarations (such as B13A forms), invoices, shipping and technical documents, end-use/user statements, and relevant correspondence evidencing due diligence and compliance steps.

Retention Period Section 10.1(2) of the EIPA specifies a minimum six-year recordkeeping period from the date of the record or as otherwise prescribed by regulation. For most export transactions, there are currently no longer periods prescribed, so the six-year rule governs. As of May 2025, however, a new regulatory change imposes a specific recordkeeping rule for nuclear transfers:

• Nuclear Non-proliferation Import and Export Control Regulations (SOR/2000‑210 as amended by SOR/2025-196): Section 3.1 (effective May 2025) now requires holders of a licence for the export or import of subject nuclear items to retain all prescribed records for six years from the expiry date of the licence (not just from record creation). This applies to transactions involving nuclear items controlled under those regulations.

This newly enacted requirement brings nuclear recordkeeping into formal alignment with the EIPA baseline, but with the period calculated from licence expiry for nuclear items, which can mean retention periods greater than six years from record creation if the licence term is long. Exporters of nuclear items should audit compliance policies to ensure this new timing is observed.

Inspection and Audit Powers Section 10.2 of the EIPA permits designated inspectors to audit or examine records at reasonable times. Inspectors may enter business premises (excluding dwellings without consent or warrant), review records, and require printouts or copies of electronic files. Failure to maintain adequate or complete records may constitute evidence of non-compliance and trigger prosecution under s. 19 if a required permit or authorization cannot be substantiated.

General Export and CBSA Documentation General export documentation requirements under the Customs Act and CBSA policy have not substantively changed. Commercial exporters must retain records of all exports, including permits and export declarations, for at least six years after export, aligning with EIPA and nuclear regulations.

Best Practices Exporters and permit holders should maintain compliance files in a secure system, with backup and access controls for at least six years from record creation (or, for nuclear transactions, from licence expiry), to ensure timely response to any regulatory audit. Ensure that changes in nuclear export compliance policies reflect the 2025 regulatory amendment.

Source: Export and Import Permits Act, R.S.C. 1985, c. E-19, ss. 10.1–10.2 Source: Export Permits Regulations, SOR/97-204, s. 8 Source: Nuclear Non-proliferation Import and Export Control Regulations, SOR/2000‑210, s. 3.1 Source: CBSA – Keeping Records for Exporters Source: Export and Brokering Controls Handbook (Records and Inspections section), Global Affairs Canada

Global Affairs Canada (GAC) differentiates between “Open Policy Countries” and other destinations in its published export-control guidance and operational practices, materially shaping compliance for intra-company transfers (ICTs) of controlled goods and technology.

Open Policy Countries: current list and processing standards According to the Export and Brokering Controls Handbook (2026 edition), “Open Policy” destinations include, but are not limited to: the United States, European Union member states, Australia, New Zealand, Japan, Switzerland, Norway, and the Republic of Korea. These countries are recognized by Canada as possessing effective strategic export controls and partnership commitments, so permit applications involving them are generally processed more quickly.

GAC sets a non-binding administrative target (service standard) of 10 business days for individual export permit applications to Open Policy Countries—provided all required information is supplied and no additional interdepartmental review is necessary. For other destinations (sometimes referred to as “Non-Open Policy Countries”), applications are subject to a 40-business-day service standard. These standards, published in the Handbook, are operational guidelines, not statutory obligations. (See Handbook, “Service Standards for Permit Applications.”)

Intra-company transfers: legal and compliance position Neither the Export and Import Permits Act (EIPA) nor the Export Control List (ECL) makes a formal distinction for intra-company transfers (ICTs); a shipment or transfer of controlled goods or technology from a Canadian parent to a foreign affiliate (subsidiary, branch office, etc.) is subject to the same permit requirements and ECL classification rules as a transfer to any unrelated third party (EIPA s.13; Export Permits Regs s.3(2)). However, in operational practice, permit applications for ICTs to affiliates in Open Policy Countries may be processed more rapidly, and GAC may sometimes accept streamlined supporting documentation, so long as the corporate relationship and end-use are credibly documented. For ICTs to Non-Open Policy Countries or for higher-risk controlled technology (e.g., munitions, dual-use electronics, advanced encryption), a full due diligence review and end-use statement are typically required. GAC administrative guidance on ICTs emphasizes comprehensive disclosure of the affiliate relationship, business registry documentation, and detailed end-use descriptions (Handbook, “Permit Application Requirements” & “End-use and End-user Due Diligence”).

Compliance risks and audit focus Exporters must not assume that intra-corporate status eliminates risk or reduces regulatory scrutiny. All transfers of controlled technology—including cloud-based file sharing or remote server access by affiliate personnel overseas—are subject to permit requirements unless a General Export Permit (GEP) applies. GAC’s Handbook specifically notes that intangible technology transfers to foreign affiliates (even in Open Policy Countries) are "exports" for EIPA purposes. Compliance audits, especially in high-tech sectors, often address whether technical, procedural, and IT controls are adequate, as laid out in the Handbook (“Compliance and Audit Expectations” section).

Source: Export and Brokering Controls Handbook, Global Affairs Canada Source: Export Permits Regulations, SOR/97-204

Canada's Area Control List (ACL) is a country-specific export control mechanism implemented under section 4 of the Export and Import Permits Act (EIPA). The ACL empowers the Governor in Council to designate certain countries such that the export or transfer of any goods or technology from Canada to those destinations requires an individual export permit, regardless of whether the item appears on the Export Control List (ECL).

Current coverage and regulatory basis. The ACL is codified at SOR/81-543, and its contents are authoritative: as of June 2026, the only country on the ACL is North Korea (Democratic People's Republic of Korea), following the removal of Belarus and Myanmar in prior regulatory amendments. Any export or transfer—physical goods, technology, software, or intangible transfers—to North Korea is subject to an individual export permit requirement. This country list is current per SOR/81-543 and governs until amended by the Governor in Council.

Permit requirement and scope. EIPA section 13 makes it an offense to export or transfer any goods or technology to an ACL country except under the authority of a permit issued by the Minister of Foreign Affairs. The permit process applies to all goods and technologies regardless of classification, sensitivity, or value. The law does not distinguish between commercial, low-value, or non-sale shipments; if the destination is listed on the ACL, a permit is mandatory.

Humanitarian and special exceptions. The EIPA and applicable regulations do not enumerate a formal process for humanitarian waivers or exemptions, and primary-source guidance confines exceptions to those announced by public notice or under international obligations (for example, certain medical supplies as mandated by UN Security Council resolutions). If an exception for humanitarian reasons is considered, the details and procedures are not published in the current regulatory text or handbook. Practitioners should refer directly to SOR/81-543 and published GAC notices for any temporary or policy-based exceptions.

Penalties and corporate liability. Exporting goods or technology to an ACL country without a valid permit is an offence under EIPA section 19, subject to criminal penalties, including fines and imprisonment, with personal liability for directors and officers under section 20 as detailed elsewhere in this guide.

Practitioners must regularly monitor SOR/81-543 for country list changes; regulatory amendments are controlling. Guidance current as of 2026-06-16.

Source: Export and Import Permits Act, R.S.C. 1985, c. E-19, ss. 4, 13, 19, 20 Source: Area Control List, SOR/81-543 Source: Export Controls Handbook, Global Affairs Canada — ACL guidance

Canada does not recognize a de minimis threshold for U.S.-origin goods or technology incorporated into Canadian products under its export-control regime. Under the Export Control List (ECL), Group 5, item 5400, Canadian controls apply to "all goods and technology that are of United States origin, unless they are included elsewhere in this List or in the Area Control List." The regulatory text contains no reference to percentage-based or value-based exemptions for U.S. content embedded in finished goods.

No value threshold or exemption. Unlike U.S. export regulations (e.g., EAR 15 C.F.R. § 734.4), where the de minimis rule may exempt certain re-exports of foreign-made products containing minimal U.S.-origin controlled content, Canada requires exporters to secure a Canadian authorization for any export or transfer of goods or technology that are of U.S. origin (not otherwise controlled or specifically exempted elsewhere), regardless of quantity or dollar value. If a finished product manufactured in Canada incorporates any item or technology of U.S. origin classified under ECL item 5400—and the finished product is consigned to a destination other than the United States—the export requires a permit under Canadian law, unless it falls within the scope of a General Export Permit (notably, GEP-12 for most non-embargoed destinations).

Global Affairs Canada’s Export and Brokering Controls Handbook and the ECL regulation are explicit: item 5400 captures “all” U.S.-origin goods and technology unless already listed in another ECL Group, listed on the Area Control List, or eligible for a GEP. No published Canadian guidance or regulatory text authorizes a de minimis exclusion for incidental U.S. content. Exporters must classify their finished products to determine whether item 5400 applies due to embedded components, parts, or software—any U.S. content triggers the Canadian export-control obligation.

Parallel but not identical to U.S. rules. This approach differs fundamentally from U.S. Department of Commerce Bureau of Industry and Security (BIS) “de minimis” rules, which provide a percentage-based exception for foreign-made products with minimal controlled U.S. content. Canadian law has no such carve-out: it operates on an “all origin” basis for item 5400, irrespective of the quantum of U.S.-origin input.

Exporters must also confirm compliance with U.S. law, but Canadian obligations under the EIPA and ECL are independent and fully apply as described. As of June 2026, there is no proposal or published regulatory plan to adopt a de minimis threshold in this context.

Source: Export Control List, SOR/89-202, Group 5, item 5400 Source: Export and Brokering Controls Handbook – Group 5 U.S.-origin guidance, Global Affairs Canada

Exporters who receive a denial, suspension, or cancellation of an export permit—or who are subject to enforcement actions—under the Export and Import Permits Act (EIPA) face a tightly limited formal appeal framework. The EIPA grants the Minister of Foreign Affairs wide discretionary power to issue, refuse, suspend, or cancel permits (s. 7), but does not create any internal administrative appeal or review process. There is no statutory right of appeal to a tribunal or board; dissatisfied parties may only request reconsideration by submitting supplemental information to Global Affairs Canada, but the Minister is not obliged to reconsider, provide reasons, or conduct a hearing, unless fairness or the particular facts demand it. This position is reflected in s. 24 of the EIPA, which states: “An order of the Minister made pursuant to this Act is final and conclusive for all purposes and is not subject to appeal to or review by any court.” However, Canadian administrative law and the Federal Courts Act do carve out judicial review as a remedy.

Applicants directly affected by a permit decision or enforcement action may apply for judicial review to the Federal Court under s. 18.1 of the Federal Courts Act. This application must normally be filed within 30 days after notification of the decision, although the Court may extend this period. The Court will review whether the Minister acted within statutory authority, followed procedural fairness, and exercised discretion in a manner deemed reasonable by modern administrative law standards. The Federal Court does not substitute its own judgment for the Minister’s; if the decision is set aside, the usual remedy is for the matter to be sent back to the Minister for redetermination in line with the Court’s ruling. The statutes are silent on a required standard of review; Canadian courts generally apply the “reasonableness” standard, with a significant measure of deference to executive discretion—particularly in cases involving foreign policy or national security. This deference is established by Supreme Court jurisprudence, not by statutory language.

For enforcement measures such as search and seizure under the EIPA, the statute incorporates procedures and protections from the Criminal Code and Customs Act. If criminal charges are brought under s. 19, standard criminal procedure and Charter rights attach. Administrative actions (e.g., seizures, permit suspensions) may be subject to separate judicial review by the Federal Court, while criminal prosecutions proceed in criminal courts.

Statutory and judicial review remedies are as described in the EIPA and Federal Courts Act as accessible on June 16, 2026. The statutes do not require that reasons be given or a particular record be produced; these procedural elements are shaped primarily by established Canadian administrative law.

Source: Export and Import Permits Act, R.S.C. 1985, c. E-19, ss. 7, 24 Source: Federal Courts Act, R.S.C. 1985, c. F-7, s. 18.1

Canada applies detailed export controls to cryptographic goods, software, and technology under the Export Control List (ECL) Group 1, Category 5—Part 2, following the Wassenaar Arrangement’s dual-use controls. Items classified under ECL entries 1-5.A.2 (equipment), 1-5.D.2 (software), and 1-5.E.2 (technology) are controlled if they meet specific technical parameters in the Guide to Canada’s Export Control List. These span strong encryption products (such as VPN appliances, encrypted storage, authentication/signature devices) and associated software/source code. Most consumer software using cryptography is not controlled if it meets strict “mass market” criteria and is not designed for military, intelligence, or prohibited end-use.

Mass market criteria and exclusions: The 2025 Guide to Canada’s Export Control List spells out the exclusions for certain “mass market” items by algorithm, key size, and commercial availability, closely tracking Wassenaar guidelines. For example, symmetric algorithms are excluded if the key length does not exceed 56 bits. The Guide also contains Notes defining “public domain” and open-source cryptographic software; generally, cryptographic source code placed in the public domain (available without restrictions and not developed for military use) is excluded, but highly capable cryptographic APIs and export of software libraries may still be controlled unless all technical and publication conditions are met. Exporters must review both the body and notes of 1-5.A.2, 1-5.D.2, and 1-5.E.2 to determine applicability. The exclusions are technical and fact-dependent.

General Export Permits (GEP-45/46): For eligible cryptography, GEP No. 45 (development/production purposes, SOR/2012-160) and GEP No. 46 (export to specified consignees, SOR/2013-1) provide streamlined export pathways without requiring individual permits—provided all GEP terms are met. First-time users must notify Global Affairs Canada before any export in a calendar year and must file semi-annual export reports (describing consignees, items, quantities, and values). Exporters must retain relevant records for six years. Notably, GEP eligibility is constrained by destination and end-use: sanctioned countries or embargoed end-uses remain excluded.

U.S. carve-out and compliance caveats: Transfers to the United States may be outside the scope of some Canada export controls, but not all cryptographic products (especially legacy military/intelligence designs, or controlled underlying technology) are automatically exempt; the Guide requires an explicit classification. Goods or technology subject to U.S. export controls may trigger independent U.S. re-export obligations even where Canadian requirements are minimal.

Ongoing compliance risks: Software exporters frequently misread exclusion criteria—especially for hybrid software-SaaS, open-source derivatives, or new algorithm implementations. Even if a product appears uncontrolled under one exclusion, record retention and reporting rules under the EIPA, Export Permits Regulations, and GEP-45/46 must be observed. The Guide and ECL are periodically updated to reflect Wassenaar changes; exporters must confirm eligibility before each export.

Guidance current as of 2026-06-16; primary source editions referenced are May 2025 (Guide) and as in-force dates for SOR/2012-160, SOR/2013-1.

Source: Export Control List, SOR/89-202, Group 1, Cat. 5 Source: Guide to Canada’s Export Control List — Group 1, Part 5, 2025 Source: General Export Permit No. 45, SOR/2012-160 Source: General Export Permit No. 46, SOR/2013-1 Source: Export and Brokering Controls Handbook — Cryptography, GAC