Workshops Law & Policy Quantum Cryptography Export Control
Law & Policy Full Day Workshop

Quantum Cryptography Export Control: EAR, ITAR, and UK Export Control

This workshop clarifies export control obligations for quantum cryptographic technologies across US, UK, and multilateral regimes. Built for compliance teams navigating ECCN classifications, ITAR jurisdiction, and Wassenaar updates.

Full day (6 hours + Q&A)
In person or online
Max 30 delegates

Proud to recommend our expert members

Qrypto Cyber
Eclypses
Arqit
QuantBond
Krown
Applied Quantum
Quantum Bitcoin
Venari Security
QuStream
BHO Legal
Census
QSP
IDQ
Patero
Entopya
Belden
Atlant3D
Zenith Studio
Qudef
Aries Partners
GQI
Upperside Conferences
Austrade
Arrise Innovations
CyberRST
Triarii Research
QSysteme
WizzWang
DeepTech DAO
Xyberteq
Viavi
Entrust
Qsentinel
Nokia
Gopher Security
Quside
Qrypto Cyber
Eclypses
Arqit
QuantBond
Krown
Applied Quantum
Quantum Bitcoin
Venari Security
QuStream
BHO Legal
Census
QSP
IDQ
Patero
Entopya
Belden
Atlant3D
Zenith Studio
Qudef
Aries Partners
GQI
Upperside Conferences
Austrade
Arrise Innovations
CyberRST
Triarii Research
QSysteme
WizzWang
DeepTech DAO
Xyberteq
Viavi
Entrust
Qsentinel
Nokia
Gopher Security
Quside

Workshop Description

Quantum cryptographic technologies sit across multiple export control regimes simultaneously. A commercial QKD system may be classified under EAR ECCN 5A002, but if integrated into a military communications platform, it could fall under ITAR USML Category XI. Post-quantum cryptographic algorithms published as open standards by NIST are generally not controlled, but specific implementations optimised for classified environments may be. The 2023 and 2024 Wassenaar Arrangement plenary sessions added quantum computing components and QKD equipment to the dual-use control lists, creating new compliance obligations for companies that previously exported without restriction.

This workshop maps the classification landscape across all three regimes. Delegates work through real product specifications to determine the correct ECCN, assess ITAR jurisdiction, and identify UK Strategic Export Control List entries. The session covers Licence Exception ENC eligibility, deemed export rules for academic and industrial research collaborations, and the practical design of Internal Compliance Programmes for quantum technology exporters. Where controls diverge between the US, UK, and EU, the workshop highlights the specific differences and their implications for multinational quantum technology programmes including AUKUS and NATO DIANA.

What participants cover

  • EAR ECCN classification for QKD hardware (5A002), QRNG devices, and PQC software implementations (5D002)
  • ITAR jurisdiction: USML Category XI and XIII applicability to quantum sensors and military quantum communications
  • UK Strategic Export Control Lists Category 5 Part 2 treatment of quantum information security products
  • Wassenaar Arrangement 2023-2024 updates adding quantum computing and QKD to the dual-use control list
  • EU Dual-Use Regulation (2021/821) Annex I quantum technology entries and catch-all provisions
  • Commodity jurisdiction determinations and licence exception eligibility for quantum cryptographic products

Preliminary Agenda

Full Day Workshop structure with scheduled breaks. Content is configurable to your organisation's product portfolio, target export markets, and current compliance infrastructure.

# Session Topics
1 Export Control Fundamentals for Quantum Technologies Why quantum cryptography sits at the intersection of multiple control regimes
2 US Export Administration Regulations (EAR) and Quantum Cryptography ECCN classifications, licence exceptions, and deemed export rules
  • ECCN 5A002, 5D002, 5E002: how QKD hardware, QRNG devices, and PQC software are classified
  • Licence Exception ENC (Section 740.17): eligibility criteria for quantum cryptographic products
  • Deemed export rules: when sharing quantum cryptography research with foreign nationals triggers EAR
Break, after 50 min
3 ITAR and Quantum Defence Applications United States Munitions List categories and quantum technology overlap
  • USML Category XI (military electronics) and Category XIII (auxiliary military equipment): where quantum sensors and QKD for military comms fall
  • Commodity jurisdiction determinations: how to assess whether a quantum product is EAR or ITAR controlled
  • ITAR brokering rules for international quantum defence collaborations (AUKUS, Five Eyes, NATO DIANA)
4 Interactive Demonstration: Export Classification Walkthrough Full-day format only
  • Classifying a commercial QKD system: working through the ECCN decision tree with a real product specification
  • Preparing a commodity jurisdiction request for a dual-use quantum sensing device
  • Drafting an Internal Compliance Programme (ICP) checklist for a quantum technology exporter
Break, after 60 min
5 UK Strategic Export Control Lists and Wassenaar Arrangement European and multilateral dimensions of quantum export control
  • UK Strategic Export Control Lists: Category 5 Part 2 (Information Security) treatment of QKD and PQC
  • EU Dual-Use Regulation (2021/821): how quantum technologies map to Annex I categories
  • Wassenaar Arrangement: the 2023-2024 updates adding quantum computing and QKD to the control list
6 Compliance Frameworks and Practical Risk Management Building export control programmes for quantum technology organisations
  • Internal Compliance Programme design: the seven elements recommended by BIS and ECJU
  • End-use and end-user screening for quantum technology transfers
  • Academic research exemptions and their limits: fundamental research exclusion versus applied quantum engineering
7 Q&A and Compliance Planning

Designed and Delivered By

Workshops are designed and delivered by QSECDEF in collaboration with sector specialists. All facilitators have direct experience in both quantum technologies and export control compliance.

QD

Quantum Security Defence

Workshop design and delivery

QSECDEF brings world-leading expertise in post-quantum cryptography, quantum computing strategy, and defence-grade security assessment. Our advisory membership spans 600+ organisations and 1,200+ professionals working at the intersection of quantum technologies and critical infrastructure security.

EC

Export Control and Trade Law Partners

Domain expertise and regulatory validation

Export control workshops are co-delivered with practitioners who have direct experience in EAR and ITAR compliance, UK ECJU licensing, and Wassenaar Arrangement implementation. This ensures workshop content reflects current enforcement practice and regulatory interpretation.

Commission This Workshop

Sessions are configured around your organisation's product portfolio, target export markets, and regulatory jurisdiction. Get in touch to discuss requirements and schedule a date.

Contact Us