What Is an ECCN?
An Export Control Classification Number (ECCN) is a five-character alphanumeric code that identifies the level of export control applied to an item under the U.S. Export Administration Regulations (EAR). The ECCN determines whether you need an export license, what license exceptions may apply, and which destinations are restricted.
The ECCN format follows a specific pattern: the first digit (0-9) indicates the CCL category, the second character (A-E) identifies the product group, and the remaining three digits specify the particular control parameters. For example, in ECCN 5A992, the '5' refers to Category 5 (Telecommunications and Information Security), the 'A' indicates end items and equipment, and '992' specifies mass-market encryption items.
The Commerce Control List Structure
The CCL is organized into 10 categories numbered 0 through 9, each covering a distinct technology domain. Category 0 covers nuclear materials and facilities. Category 1 addresses materials, chemicals, and microorganisms. Category 2 handles materials processing equipment. Category 3 encompasses electronics. Category 4 covers computers.
Category 5 is split into two parts: Part 1 for telecommunications and Part 2 for information security (encryption). Category 6 covers sensors and lasers. Category 7 addresses navigation and avionics. Category 8 handles marine technology, and Category 9 covers aerospace and propulsion systems.
How to Classify Your Item
Classification follows the Order of Review outlined in Supplement No. 4 to EAR Part 774. First, identify which CCL category applies based on your item's technical characteristics. Second, determine the applicable product group (A through E). Third, check whether any 600-series or 9x515 ECCN applies — these take priority over all other entries.
If no specific ECCN describes your item after checking all categories and product groups, it is designated EAR99. EAR99 items are still subject to the EAR but are not listed on the CCL and generally do not require a license for most destinations.
Common Classification Mistakes
The most frequent error is assuming an item is EAR99 without systematically reviewing the CCL. Another common mistake is overlooking the 'specially designed' definition in §772.1, which uses a specific two-part catch-and-release framework. Classifiers also frequently miss the General Information Security Note (GISN), which requires any item with encryption functionality to be evaluated against Category 5 Part 2 regardless of the item's primary function.
Always remember: classification is based on technical parameters, not intended use. A commercial router with encryption capability must be evaluated under Category 5 Part 2 even if it is sold exclusively to consumers.