The Export Control Reform Act of 2018 (ECRA) is a United States statute that provides permanent statutory authority for the Export Administration Regulations (EAR), administered by the Department of Commerce's Bureau of Industry and Security (BIS). ECRA became law on 13 August 2018 as part of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L. 115-232), enacted alongside the Foreign Investment Risk Review Modernization Act (FIRRMA); it is codified at 50 U.S.C. §§ 4801 et seq. (Source: https://www.akingump.com/en/insights/alerts/the-export-control-reform-act-of-2018-and-possible-new-controls). Part I of ECRA is titled the "Export Controls Act of 2018" (ECA) and is the authority for the dual-use export controls BIS administers; Part II is the "Anti-Boycott Act of 2018."
Background
For roughly two decades before ECRA, the underlying statute for the EAR—the Export Administration Act of 1979—had lapsed, and the EAR were kept in effect through executive orders and an emergency declaration under the International Emergency Economic Powers Act (IEEPA) renewed by annual presidential notice. ECRA replaced that arrangement with permanent authority, largely codifying BIS practices and policies as they had evolved since 1979 without changing core EAR concepts or country-specific licensing policies (Source: https://www.akingump.com/en/insights/alerts/the-export-control-reform-act-of-2018-and-possible-new-controls). A primary policy motivation, shared with FIRRMA, was to strengthen US export and investment controls against the transfer of critical technologies to destinations of concern, principally China.
Emerging and foundational technologies (Section 1758)
The provision of ECRA with the broadest reach beyond traditional export-control practice is Section 1758 of the ECA, which directs the executive branch to identify and control "emerging and foundational technologies" that are "essential to the national security of the United States" and not already covered by existing controls. Key features described in contemporaneous analysis include (Source: https://www.akingump.com/en/insights/alerts/the-export-control-reform-act-of-2018-and-possible-new-controls):
- An interagency process led by Commerce and involving the Departments of Defense, Energy, and State, conducted as a "regular, ongoing" effort rather than a one-time exercise.
- A statutory limit confining new controls to technologies essential to national security, excluding purely economic or industrial-policy rationales.
- A requirement that the government weigh foreign availability of comparable technologies and the effect of unilateral controls on domestic development before imposing them.
- Publication of new controls as amendments to the EAR's Commerce Control List, after public notice and comment.
- A 180-day reporting requirement to CFIUS and Congress.
- Authority to impose "interim controls," including "is informed" actions that require a license for a specific person's export of a particular technology in a particular transaction before any general rule is in place.
When Congress enacted ECRA, artificial intelligence and machine learning were among the technology areas informally cited as candidates for control under Section 1758, alongside fields such as additive manufacturing, advanced computing, robotics, and biotechnology. BIS subsequently abandoned efforts to draw a formal line between "emerging" and "foundational" technologies in establishing controls (Source: https://www.mofo.com/resources/insights/220624-emerging-and-foundational-technologies-distinction).
Enforcement and penalties
ECA Section 1760 carries forward the civil and criminal penalty framework established under IEEPA. Maximum criminal penalties for willful violations are $1 million and, for individuals, up to 20 years' imprisonment; maximum civil penalties are $300,000 or twice the value of the transaction, whichever is greater. ECRA also expanded BIS enforcement authorities, including for investigations conducted outside the United States (Source: https://www.akingump.com/en/insights/alerts/the-export-control-reform-act-of-2018-and-possible-new-controls).
Application to AI models (2026)
ECRA returned to prominence in June 2026 when Commerce Secretary Howard Lutnick invoked it to restrict foreign access to Anthropic's Mythos 5 and Fable 5 models. In a 12 June 2026 letter to Anthropic chief executive Dario Amodei, Commerce ordered the company to suspend export, re-export, and domestic transfer of the two models to all destinations outside the United States and to all foreign persons, citing concerns that the models could be diverted to military-intelligence users in China, Russia, or other countries of concern, and threatening criminal and civil penalties (Source: https://www.reuters.com/technology/anthropic-us-officials-meeting-monday-resolve-dispute-over-export-curbs-2026-06-15/). Reporting described this as the first use of ECRA authority against an AI model. Export-control specialists questioned whether the statute reached the models, given that they are made available through remote access rather than physically exported (Source: https://www.reuters.com/technology/anthropic-us-officials-meeting-monday-resolve-dispute-over-export-curbs-2026-06-15/). Anthropic disabled access to both models to comply while negotiating with the administration to restore access.
Relationships
- related: Export Controls (AI) — ECRA is the domestic statutory basis for US controls on AI-relevant technologies.
- related: BIS Framework for AI Diffusion — Interim Final Rule (RESCINDED) — a later BIS framework regulating AI diffusion built on EAR authority.
- related: Anthropic v. United States (Pentagon ban challenge) — dispute arising from the June 2026 invocation against Anthropic's models.
- related: Anthropic
- related: Sovereign AI