Congress tightens export controls on foreign subsidiaries of sanctioned entities

What it does

This bill requires the Commerce Department to apply export licensing rules to subsidiaries and affiliates (50%+ owned) of companies already on the U.S. government's Entity List or Military End User List—entities restricted from receiving sensitive U.S. technology due to national security concerns. The bill mandates that before adding any entity to these lists, Commerce must assess whether applying the Foreign Direct Product Rule (which restricts downstream use of U.S. technology) serves U.S. national security, and notify Congress within 2 days. Commerce may waive these requirements on a case-by-case basis if national security justifies it, with similar congressional notification required.

Why we flagged it

The bill's operative mechanism is closing a subsidiary loophole in existing export-control law by extending licensing requirements to affiliates of sanctioned entities. This is regulatory enforcement, not deregulation or subsidy—it tightens rather than loosens restrictions on entities already deemed national security risks.

What the text implies

• Subsidiaries of Chinese, Russian, or Iranian entities on the Entity List may face sudden licensing requirements, potentially disrupting supply chains for U.S. companies with legitimate business in those subsidiaries—though the waiver mechanism provides an escape valve.
• The 2-day congressional notification window is extremely tight; Congress may lack time for meaningful review before waivers take effect, potentially converting the notification requirement into a formality rather than a check.

The full analysis lists 3 implications of this text.

Who stands to gain

U.S. defense contractors and technology firms (reduced competition from sanctioned foreign entities); Compliance and export-control consulting firms