U.S. BIS upgrades UAE export control status; advanced AI chip access now restricted to vetted and approved entities only.

The US Department of Commerce's Bureau of Industry and Security (BIS) issued a final rule effective July 10, 2026, significantly updating the United Arab Emirates' treatment under the Export Administration Regulations. The rule removes the UAE from Country Groups D:3 and D:4, adds the UAE to Country Group A:5, and establishes a new entity-specific approval framework for advanced computing items and License Exception Strategic Trade Authorization.

BIS framed the changes as reflecting the UAE's status as a US Major Defense Partner, its support for US national security interests, and its commitments to protect sensitive US technology from diversion or misuse. The rule is also linked to the May 2025 US-UAE AI Acceleration Partnership framework, under which the countries agreed to deepen technology cooperation, including the launch of a 1 gigawatt (GW) AI data center as part of a planned 5 GW AI technology cluster in Abu Dhabi.

On September 23, 2024, the United States recognized the UAE as a Major Defense Partner, a designation then shared only with India, to support deeper defense cooperation, joint training, exercises, and military-to-military collaboration. This designation is distinct from Major Non-NATO Ally status and does not itself provide Export Administration Regulations (EAR) or International Traffic in Arms Regulations (ITAR) authorization.

Prior to the July 10, 2026 final rule, the UAE was listed in Country Group B but also in Country Groups D:3 and D:4, which limited the availability of several license exceptions for items controlled for chemical and biological weapons (CB) and missile technology (MT) reasons. BIS specifically noted that an MT-controlled unmanned aerial vehicle (UAV) could not be temporarily exported to the UAE for display at a defense trade show under License Exception Temporary Imports, Exports, Reexports, and Transfers (TMP).

The new rule gives concrete export control consequence to the UAE's Major Defense Partner status by removing the UAE from Country Groups D:3 and D:4. Additional exports, reexports, and in-country transfers of CB- and MT-controlled items are now eligible for license exceptions including TMP, GOV, TSU, AVS, and APR, and additional provisions of ACE and BAG become available. The rule also removes certain UAE-related missile end-use restrictions and certain US person restrictions, eliminating restrictions on support for UAE UAV programs.

Importantly, the rule does not remove Commerce Control List (CCL)-based license requirements. MT- and CB-controlled items requiring a license by Export Control Classification Number (ECCN) classification will still require authorization unless a license exception is available and all conditions are met. The practical change is not wholesale decontrol of UAE-bound items, but a significant expansion of license exception eligibility.

License Exception Strategic Trade Authorization (STA) is one of the EAR's most important license exceptions, allowing exports, reexports, and in-country transfers of certain controlled items to specified destinations and users without obtaining an individual BIS license, provided all parties satisfy detailed eligibility, certification, notification, and recordkeeping conditions. For the UAE, the significance of STA is that some transactions involving sensitive dual-use, commercial space, and certain military items may move through a license exception rather than requiring a transaction-specific license.

The final rule adds the UAE to Country Group A:5, a change that would normally expand access to STA. However, BIS paired that upgrade with a new limitation: for exports, reexports, or in-country transfers to or within the UAE, STA is available only where the ultimate consignee and all end users are approved entities listed in new Supplement No. 8 to Part 740. UAE's A:5 status creates the country-level basis for favorable treatment, but Supplement No. 8 determines which specific UAE government agencies and companies can actually use that treatment.

BIS stated that STA may authorize eligible exports, reexports, and transfers of items controlled for national security (NS), CB, nuclear nonproliferation (NP), regional stability (RS), crime control (CC), and significant items (SI) reasons, including certain military items, commercial space-related items, and dual-use items relevant to semiconductor packaging, oil and gas production, desalination, and civil nuclear power generation. Commercial entities in the UAE seeking approval may submit an advisory opinion request to BIS, which will assess requests case by case based on US national security and foreign policy interests, including the applicant's compliance capabilities and track record.

The rule does not generally ease exports of advanced computing items to the UAE. BIS will continue enforcing license requirements for advanced computing items under 15 CFR § 742.6(a)(6)(iii)(A), including ECCNs 3A090.a and 4A090.a and related ".z" paragraph items, for exports, reexports, and in-country transfers to or within the UAE unless the ultimate consignee and all end users are listed in Supplement No. 8 and approved to receive those items license-free. BIS also amended § 742.6(a)(6)(iii)(B) to maintain UAE-specific license requirements for lower-performance advanced computing items, including ECCNs 3A090.b and 4A090.b and related ".z.b" items, again with an exception for approved Supplement No. 8 entities.

This approach is consistent with BIS's broader post-AI Diffusion Rule posture. In May 2025, BIS announced that it would not enforce the Biden-era Framework for Artificial Intelligence Diffusion and would issue a replacement rule in the future. Subsequently, in May 2026, BIS clarified that certain advanced computing license requirements continue to apply to entities headquartered in, or with an ultimate parent headquartered in, Country Group D:5 or Macau, even if the entity is located elsewhere. On July 14, 2026, Under Secretary for Industry and Security Jeffrey Kessler told the US Congress that the US administration no longer intends to replace the AI Diffusion Rule, instead focusing on new rulemaking.

Supplement No. 8 to Part 740 identifies approved ultimate consignees and end users in the UAE for advanced computing items and/or STA. The preamble separately states that BIS will "favorably review" license applications involving another entity for semiconductor and server exports. That statement does not appear as a self-executing authorization in the regulatory text. Accordingly, transactions related to that entity may benefit from a favorable licensing policy, but they still require transaction-specific review unless another authorization applies.

These deployment-specific controls do not modify BIS's industry-wide anti-diversion requirements. The final rule specifically warns that "approval in supplement no. 8 to part 740 does not overcome the end-use and end-user based license requirements in part 744 of the EAR," and otherwise applicable provisions including anti-diversion requirements and General Prohibition 10 (prohibiting acts related to an item subject to US export controls while "knowing" a past, present, or future violation) still apply.

Certain UAE companies have already developed tailored compliance frameworks to meet enhanced US physical security, cybersecurity, and anti-diversion requirements associated with prior authorizations. These measures are likely to frame US government expectations for other UAE companies and companies in the broader region. The UAE's new, entity-limited STA eligibility may also narrow the scope of some mandatory filings before the Committee on Foreign Investment in the United States (CFIUS).