[Home](/)/[Resources](/resources)/Canada Export and Import Permits Act CanadaExport Controls # Canada Export and Import Permits Act: When Hardware Companies Need Export Permits Canada controls exports of dual-use goods — technology and products that have both civilian and potential military application — through the Export and Import Permits Act (EIPA), administered by Global Affairs Canada. The Export Control List (ECL) covers a wide range of electronics: encryption-capable products, RF equipment above certain frequency thresholds, night-vision components, high-performance computing hardware, and radiation-hardened components are all examples that routinely appear in hardware company portfolios. Missing an export permit obligation isn't a paperwork failure — it can result in criminal charges under the EIPA, seizure of goods, and reputational consequences that make future export licensing harder to obtain. Copy Link[Share on WhatsApp](https://wa.me/?text=https%3A%2F%2Fkrono-labs.com%2Fguides%2Fcanada-export-import-permits-act) At a glance Administering body Global Affairs Canada Key legislation Export and Import Permits Act (EIPA) Control list Export Control List (ECL) Record retention 6 years ## What the Export Control List covers for electronics ### The Export Control List (ECL) The ECL is the schedule of goods requiring export permits under the EIPA. It maps closely to the Wassenaar Arrangement Dual-Use List, which Canada adopted through its ECL. Items are classified into Groups — Group 1 covers dual-use goods and technologies including electronics, computers, and telecommunications equipment. Each item entry has control parameters (frequency ranges, data rates, encryption key lengths) that determine whether a specific product configuration is controlled. ### Encryption and Information Security (ECL Group 1 Category 5 Part 2) Products with encryption capabilities above certain key-length thresholds — historically 56-bit symmetric, now higher — are controlled. Most modern products with AES-128 or AES-256 are controlled for export to certain destinations. The ECL has a mass-market exemption for widely available consumer encryption products, but it requires the exporter to make a determination, not simply assume exemption. ### Wireless and RF equipment Spread-spectrum and frequency-hopping transmitters above certain peak power levels and frequency ranges, satellite transceivers, and software-defined radios (SDRs) capable of being reconfigured across broad frequency ranges are examples of ECL-controlled radio products. Hardware companies embedding Wi-Fi, LTE, or 5G modules in industrial or enterprise products should verify ECL applicability. ### Destination-based controls — the Area Control List (ACL) Some destinations (Russia, Belarus, North Korea, and others) are on Canada's Area Control List. Any export to an ACL country requires a permit regardless of whether the product is on the ECL. Post-February 2022 sanctions added Russia comprehensively; the ACL is updated by Order-in-Council and must be checked at the time of export, not at contract signing. ### Deemed exports Sharing controlled technology with a foreign national in Canada — providing design files, source code, or technical documentation to an employee or contractor who is a national of a country subject to controls — may constitute a 'deemed export' requiring the same permit as a physical shipment. This is under-appreciated in R&D-heavy hardware companies. ## EIPA compliance process step by step 01 Classify your product against the Export Control List. Use the ECL's Group 1 (Dual-Use) items, matching your product's specifications — frequency, data rate, encryption type, output power, operating temperature range — against the control parameters. Global Affairs Canada's Strategic Trade Controls division publishes guidance and accepts classification inquiries. 02 Check the destination against the Area Control List. Even if your product isn't on the ECL, exports to ACL countries require a permit. Verify the current ACL — it changes by government order and is not always reflected in commercial databases in real time. 03 Assess whether a permit is required or whether an exemption applies. The EIPA and its Regulations contain specific permit exemptions — for example, permits are not required for exports to certain close allies (the United States, for most non-strategic goods, under General Export Permit No. 12). Applying the wrong exemption is still a violation. 04 Apply for an export permit from Global Affairs Canada's EXCOL system if required. Applications require: product description, ECL classification, quantity, value, end-user details, and an end-use certificate for controlled items. Processing times range from days to months depending on the destination and product sensitivity. 05 Maintain records of classification determinations, permit applications, and export documentation for six years — the EIPA's recordkeeping period. ## Frequently asked questions ### Does Canada's EIPA overlap with US EAR controls? Yes — and the overlap is material. If your product is US-origin (manufactured in the US, or containing more than de minimis US-controlled content), US Export Administration Regulations (EAR) apply to the re-export from Canada as well as the initial export from the US. Canada's EIPA is a separate, parallel obligation — satisfying one does not satisfy the other. ### Are commercial Wi-Fi or Bluetooth modules covered by the ECL? Mass-market Wi-Fi and Bluetooth modules are generally eligible for the ECL's mass-market exception if they are widely available to the general public and cannot be easily modified. However, the exporter must make this determination — the exception isn't self-executing. Modules with higher-than-standard output power, custom firmware, or frequency agility may fall outside the exception. ### What are the penalties for EIPA violations? EIPA violations can result in criminal prosecution under section 19: on summary conviction, a fine up to CAD 250,000 or imprisonment up to 12 months; on indictment, a fine in the court's discretion or imprisonment up to 10 years. The Canada Border Services Agency can seize goods at the border, and Global Affairs Canada can revoke existing permits. ### Do intra-company transfers of technology count as exports under EIPA? Potentially yes. Providing controlled technology — design files, technical specifications, software code — to a subsidiary in a controlled country, or to a foreign national employee at a Canadian facility under certain circumstances, may constitute a controlled transfer. This is the 'deemed export' issue; Global Affairs Canada has published guidance but it remains an area of legal complexity. **Disclaimer:** Educational resource only. Regulatory requirements change and vary by product category. Consult an accredited test laboratory or qualified compliance engineer before making certification decisions. 🇨🇦 Canada roadmap for your product Every standard, document, and test that applies — free, no account required. See your free roadmap[ Want an expert to take your product through 🇨🇦 Canada compliance for you? One consultant from Krono's compliance team takes your product from requirements to legal sale, with a fixed quote before any work starts. See compliance services](/services) Learn this properly In-depth course that teaches the full process, not just this one answer. [Start the course — $149](/courses/47-canada-ised-ic-certification-radio-equipment)[Prefer to read? Get the book — $24.99](/books/47-canada-ised-ic-certification-radio-equipment) Related guides * [Canada CBSA Import ProceduresCanada CBSA import procedures for electronics: CARM portal B3 accounting document submission, CUSMA/USMCA tariff preference origin rules, CAD $20 de minimis threshold for commercial imports, advance rulings, and CBSA audit risk for electronics importers.](/guides/canada-cbsa-import-procedures) * [Canada Customs Duties ElectronicsHow to import electronics into Canada: CBSA tariff classification, MFN 0% rates, CUSMA rules of origin, and GST/HST on imports.](/guides/canada-customs-duties-electronics) * [Australia Export Controls DSGLAustralia DSGL export controls for electronics: DSGL Part 2 dual-use categories (Category 3 electronics, Category 5 telecoms/encryption), Individual and Open Individual Export Permits, intangible technology transfer controls, AUKUS streamlined pathways, and 10-year imprisonment penalties.](/guides/australia-export-controls-dsgl)