On 17 October 2023 the US Bureau of Industry and Security updated its rules, further tightening export controls on advanced computing chips and semiconductor manufacturing equipment destined for China. The update covers performance thresholds, licence exceptions, the entity list and end-use review.
For companies using US technology, equipment or design tools, this is not a document for the semiconductor industry alone. It affects compute procurement, cloud services, server integration, foundry work and research collaboration.
The technical logic
Earlier controls focused on selected high-performance chips and manufacturing equipment. The updated rules use more granular performance metrics, including total processing performance and performance density, to capture workarounds through chip combinations, cut-down versions or packaging.
Companies cannot simply check whether a model appears on a list. They must calculate actual compute, interconnect and cluster scale. The same model in different configurations may produce different conclusions.
Licence exceptions and cut-down space
The rules adjust certain licence exceptions, narrowing channels available for specific destinations or uses. Arrangements relying on cut-down versions, consumer-grade products or multi-chip assembly need reassessment.
For cloud services and compute leasing, the risk lies in remote access. Even where chips are not exported, providing advanced computing cloud services to restricted parties may trigger controls. Companies should review customer identity, use and access permissions.
Entity list and supply chain diligence
The update also expands the entity list. Listed parties face licence requirements for controlled items, usually under a presumption of denial. Suppliers should embed list screening into procurement and sales processes rather than relying on annual reviews.
The depth of diligence depends on item sensitivity. For high-risk items, identify end user, end use, resale path and logistics; for distributors and agents, obtain non-resale and non-diversion commitments and retain verifiable records.
Impact on Chinese companies
First, uncertainty in compute procurement rises. Companies should prepare alternatives for critical projects, including domestic compute, hybrid architectures and leasing. Second, research collaboration may be constrained where US technology, tools or personnel are involved. Third, transshipment and re-export risk increases: routing through third countries, overseas assembly and onward sale may all be traced.
Fourth, contract terms need adjustment. Making export licences a condition precedent and allocating responsibility and termination rights on regulatory change can reduce commercial loss from supply interruption.
Five things to do now
First, build an item list assessed by technical parameters, not model numbers. Second, screen customers and suppliers against the list. Third, review cloud and remote access arrangements. Fourth, assess transshipment, assembly and re-export paths. Fifth, revise control clauses in procurement and sales contracts.
For export controls and item classification, see our export controls service; for cross-border supply chains and multi-jurisdiction arrangements, see multi-jurisdiction compliance; for procurement and sales contracts, see commercial contracts.
This article is based on the US Bureau of Industry and Security rule update of 17 October 2023. It is for reference only and does not constitute legal advice.