“Technology that can build a hospital or a weapon.” Dual-use goods, software, and technologies are items with both legitimate civilian applications and potential military, intelligence, or weapons of mass destruction-relevant uses — making their export, transfer, and development subject to heightened regulatory scrutiny.
Executive Summary
The dual-use problem is as old as nuclear physics but has intensified dramatically in the semiconductor and AI era. Advanced logic chips power both smartphones and hypersonic missile guidance systems. AI models optimize both drug discovery and autonomous weapons targeting. Gene synthesis equipment enables both vaccine development and potential bioweapon creation. The challenge for export control regimes is drawing a classification line precise enough to restrict military-relevant transfers without hampering legitimate civilian commerce — a balance that becomes harder as the performance gap between consumer and military-grade technology narrows.
The Strategic Mechanism
Dual-use classification operates through control lists maintained by national export control authorities:
- Commerce Control List (CCL): The U.S. BIS catalog of dual-use items controlled under the EAR, organized by Export Control Classification Number (ECCN). Items are controlled for reasons including national security (NS), missile technology (MT), nuclear nonproliferation (NP), and chemical/biological weapons (CB)
- EU Dual-Use Regulation: The EU’s parallel regime, updated significantly in 2021 to add cyber surveillance tools and human security controls; administered by member state authorities
- Wassenaar Arrangement: Multilateral export control regime covering conventional arms and dual-use goods/technologies among 42 participating states — the primary international coordination mechanism
- The classification challenge: Chips above a certain performance threshold are dual-use; the threshold must be continuously updated as commercial performance improves. The October 2022 U.S. chip controls used a specific performance metric (FLOPS at given precision) that required revision within months as commercial chips crossed the threshold
- Deemed export rule: Transferring dual-use technology to a foreign national — even on U.S. soil — constitutes a regulated export in U.S. law
Market & Policy Impact
- The dual-use classification of advanced AI chips forced NVIDIA to develop export-restricted variants (A800, H800) for the Chinese market — a design constraint with significant engineering and commercial costs
- AI model weights are increasingly being evaluated for dual-use classification, which would represent a significant expansion of export controls into purely software domains
- Biotech dual-use concerns have prompted new scrutiny of gene synthesis orders, academic research collaborations, and international laboratory partnerships
- Drone technology — initially civilian — has become a front-line military asset in Ukraine and the Middle East, prompting rapid reclassification and control updates
- Companies in dual-use-adjacent sectors must maintain end-use and end-user screening processes and face significant penalties for violations, including denial orders and criminal prosecution
Modern Case Study: AI Chips, Dual-Use Thresholds, and the NVIDIA Redesign Cycle, 2022–2024
When BIS published its October 2022 chip controls, it defined restrictions using a performance metric combining total processing performance and performance density for chips used in AI training and inference. NVIDIA’s A100 and H100 chips exceeded these thresholds and were restricted from export to China. NVIDIA rapidly developed the A800 and H800 variants — technically compliant with the thresholds — for the Chinese market. In October 2023, BIS tightened controls again, closing the A800/H800 loophole with revised thresholds and a “chip smurfing” provision addressing the use of multiple compliant chips in networked configurations. The episode illustrated the fundamental challenge of threshold-based dual-use controls: they create a moving target, incentivize design-around efforts, and require continuous regulatory updates to remain effective.