Germany is one of the world';s largest trading nations, and its foreign trade law framework is among the most technically demanding in the European Union. Businesses operating cross-border from or through Germany face a layered system of EU regulations, national statutes, and administrative enforcement that can result in criminal liability, asset freezes, and loss of export licences if mismanaged. This article answers the most frequently asked legal questions about international trade and sanctions compliance in Germany, covering the regulatory architecture, key obligations, enforcement mechanisms, and practical strategies for managing risk.
German foreign trade law rests on two national pillars: the Außenwirtschaftsgesetz (AWG, Foreign Trade and Payments Act) and the Außenwirtschaftsverordnung (AWV, Foreign Trade and Payments Regulation). These instruments implement and supplement EU-level rules, which take direct effect in Germany without requiring transposition.
At the EU level, Council Regulation (EC) No 428/2009 - now replaced and updated by Council Regulation (EU) 2021/821 - establishes the dual-use export control regime. Dual-use goods are items that have both civilian and potential military applications. The regulation sets out control lists, licensing categories, and end-use verification requirements that apply uniformly across all EU member states, including Germany.
Restrictive measures adopted by the EU Council - commonly referred to as sanctions - are implemented through directly applicable EU regulations. These cover asset freezes, transaction prohibitions, import and export bans, and sectoral restrictions targeting specific industries, entities, or countries. Germany does not adopt its own autonomous sanctions regime separate from the EU framework, but German authorities enforce EU measures with particular rigour.
The AWG, in its current version, establishes criminal and administrative liability for violations of foreign trade rules. Section 17 AWG provides for criminal penalties of up to five years'; imprisonment for intentional violations involving embargoed goods or sanctioned parties. Section 18 AWG covers less serious offences and administrative fines. The AWV specifies licensing requirements, reporting obligations, and procedural rules that complement the AWG.
The competent federal authority for export control and sanctions enforcement is the Bundesamt für Wirtschaft und Ausfuhrkontrolle (BAFA, Federal Office for Economic Affairs and Export Control). BAFA issues export licences, conducts compliance audits, investigates potential violations, and maintains the national list of controlled goods. The Zollkriminalamt (ZKA, Customs Criminal Investigation Office) handles criminal investigations, often in cooperation with public prosecutors.
A non-obvious risk for international businesses is that Germany applies the AWG and AWV not only to goods physically exported from German territory, but also to brokering transactions, technical assistance, and certain financial services provided by German-resident persons or entities in relation to controlled items - even when those items never enter Germany.
The personal scope of German and EU trade law is broader than many international clients assume. The obligations apply to:
The territorial and personal reach of EU sanctions regulations is defined in each individual regulation. As a general principle, EU sanctions bind EU operators regardless of where the transaction takes place. This means a German company negotiating a contract abroad must still screen counterparties against EU consolidated lists.
The EU Consolidated List of Persons, Groups and Entities Subject to EU Financial Sanctions is the primary reference document. German companies are legally required to screen all business partners, beneficial owners, and transaction parties against this list before entering into any commercial relationship or executing any payment. Failure to screen is itself a compliance failure, independent of whether a sanctioned party is actually involved.
A common mistake made by international clients is to treat sanctions screening as a one-time onboarding exercise. EU sanctions lists are updated continuously, sometimes with immediate effect. A counterparty that was clean at contract signing may be listed by the time of payment or delivery. Contracts should include representations and warranties on sanctions status, and screening must be repeated at each material transaction step.
German law also imposes obligations on financial institutions under the Kreditwesengesetz (KWG, Banking Act) and the Geldwäschegesetz (GwG, Anti-Money Laundering Act). Banks operating in Germany are required to freeze assets of listed persons immediately upon designation and to report to the Deutsche Bundesbank and BaFin (Bundesanstalt für Finanzdienstleistungsaufsicht, Federal Financial Supervisory Authority). For non-financial businesses, the GwG imposes customer due diligence and suspicious transaction reporting obligations that intersect with sanctions compliance.
To receive a checklist on sanctions screening and compliance obligations for businesses operating in Germany, send a request to info@vlolawfirm.com.
Export control licensing in Germany operates on a tiered system that distinguishes between EU-controlled dual-use items, nationally controlled items, and items subject to embargo or sectoral restrictions.
For dual-use goods listed in Annex I of EU Regulation 2021/821, an export licence is required before the goods leave EU customs territory. The licence application is submitted to BAFA. BAFA reviews the application against the control list classification, the end-use declaration provided by the foreign buyer, the end-user';s profile, and the destination country';s risk level. Processing times vary but typically range from several weeks to several months for complex cases.
Germany also maintains a national control list (Ausfuhrliste) under the AWV, covering items not captured by the EU dual-use regulation but considered sensitive for national security or foreign policy reasons. Items on the Ausfuhrliste require a national export licence from BAFA.
Several simplified licensing mechanisms exist. General Export Authorisations (GEAs) - both EU-wide and national - allow exporters to ship certain categories of goods to approved destinations without applying for an individual licence, provided the exporter registers with BAFA and maintains records. The EU General Export Authorisation EU001, for example, covers exports to a defined list of low-risk countries for a broad range of dual-use items. Exporters using GEAs must keep records for at least ten years, as required by Article 26 of EU Regulation 2021/821.
A practical scenario: a German machinery manufacturer receives an order from a buyer in a third country for industrial equipment that falls under Export Control Classification Number (ECCN) equivalent categories in the EU dual-use list. The manufacturer must classify the goods, determine whether a licence is required, verify the end-use and end-user, and either apply for an individual licence or confirm eligibility under a GEA. If the manufacturer ships without completing this process and the goods are later found to have been diverted to a prohibited end-use, both the company and responsible individuals face criminal exposure under Section 17 AWG.
A second scenario: a software company based in Germany provides cloud-based services that include technology listed under the dual-use regulation. The company must assess whether the provision of that technology to foreign users constitutes a controlled "transfer" requiring a licence. Many technology companies underappreciate that intangible transfers - including software downloads and technical assistance provided electronically - are subject to the same licensing requirements as physical exports under Article 2(2) of EU Regulation 2021/821.
The cost of export licence applications is relatively modest in direct fees, but the internal compliance infrastructure required - classification expertise, end-user screening, record-keeping systems - represents a significant operational investment. Lawyers'; fees for advising on complex licence applications and compliance programmes typically start from the low thousands of EUR and scale with complexity.
Enforcement of EU sanctions in Germany is conducted by BAFA for administrative matters and by the Zollkriminalamt and public prosecutors for criminal matters. German customs authorities (Zoll) conduct physical checks at borders and ports and refer suspected violations to the ZKA.
The AWG distinguishes between intentional criminal violations and negligent or less serious administrative violations. Intentional violations of embargo provisions or asset freeze obligations under Section 17 AWG carry criminal penalties of up to five years'; imprisonment and unlimited fines for individuals. For legal entities, administrative fines under Section 19 AWG can reach up to EUR 500,000 per violation, and in cases involving proceeds of the violation, fines can be set at up to twice the value of the proceeds.
German prosecutors have shown increasing willingness to pursue corporate criminal liability through the Ordnungswidrigkeitengesetz (OWiG, Act on Regulatory Offences). Under Section 30 OWiG, a fine can be imposed on a legal entity if a responsible person within the entity commits a criminal or administrative offence in connection with the entity';s business. This mechanism effectively creates corporate liability even where individual prosecution is not pursued.
A non-obvious risk is the concept of "circumvention" under EU sanctions regulations. EU regulations explicitly prohibit transactions structured to circumvent sanctions, including the use of intermediaries, shell companies, or complex ownership structures designed to obscure the involvement of a sanctioned party. German prosecutors and BAFA take an expansive view of circumvention, and transactions that appear formally compliant but achieve a prohibited result can still attract enforcement action.
A third practical scenario: a German trading company enters into a contract with a third-country intermediary to supply goods that are not themselves subject to export controls. After delivery, it emerges that the intermediary was acting as a front for a sanctioned entity. The trading company may face investigation for circumvention, even if it had no actual knowledge of the sanctioned party';s involvement, if prosecutors determine that the company failed to conduct adequate due diligence. The risk of inaction - failing to implement a proper compliance programme - is therefore not merely reputational but directly criminal.
Asset freezes are self-executing under EU sanctions regulations. Once a party is listed, any EU operator holding assets of that party is legally required to freeze them immediately, without waiting for a government instruction. Failure to freeze is itself a violation. German banks and financial institutions have well-developed procedures for this, but non-financial businesses - including trading companies, logistics providers, and professional service firms - often lack equivalent systems.
To receive a checklist on enforcement exposure and internal compliance procedures for German trade and sanctions law, send a request to info@vlolawfirm.com.
A sanctions and export control compliance programme in Germany must address four functional areas: governance, screening, classification, and record-keeping.
On governance, German law does not prescribe a specific compliance programme structure, but BAFA guidance and enforcement practice make clear that the existence of a documented, implemented programme is a significant mitigating factor in enforcement proceedings. The programme should designate a responsible compliance officer, define internal approval processes for controlled transactions, and establish escalation procedures.
Screening obligations require businesses to check all counterparties - customers, suppliers, intermediaries, beneficial owners, and financial institutions involved in a transaction - against the EU Consolidated List and any applicable country-specific lists. Screening should be conducted at onboarding, at contract execution, and at payment. Automated screening tools are widely available and are considered standard practice for businesses with significant transaction volumes.
Classification is the process of determining whether goods, software, or technology fall within the scope of the EU dual-use regulation or the national Ausfuhrliste. Classification requires technical knowledge of the product and legal knowledge of the control lists. Misclassification - whether by over-controlling or under-controlling - creates operational and legal risk. BAFA offers a binding classification service (verbindliche Zolltarifauskunft equivalent for export control purposes) that provides legal certainty, though processing times can be lengthy.
Record-keeping requirements under Article 26 of EU Regulation 2021/821 mandate that exporters retain all documents relating to export licence applications and shipments for at least ten years. German tax law imposes parallel record-keeping obligations under the Abgabenordnung (AO, Fiscal Code) for up to ten years. In practice, businesses should maintain a unified document management system that satisfies both sets of requirements.
A common mistake made by international groups with German subsidiaries is to treat the German entity';s compliance obligations as identical to those of the parent company in another jurisdiction. US export control law (EAR, ITAR) and German/EU export control law overlap in some areas but diverge significantly in others. A product that is EAR99 (not controlled under US export regulations) may still require a German or EU licence. Conversely, a product controlled under ITAR may not require an EU licence for certain destinations. Dual-jurisdiction analysis is essential for any group with transatlantic operations.
The business economics of compliance investment are straightforward: the cost of building and maintaining a compliance programme is substantially lower than the cost of a single enforcement action. Criminal investigations are disruptive, expensive, and reputationally damaging regardless of outcome. BAFA audits, even when they result in no finding of violation, require significant management time and legal support. Lawyers'; fees for defending a criminal investigation under the AWG typically start from the mid-five figures in EUR and can reach significantly higher for complex multi-jurisdiction matters.
When BAFA refuses an export licence application, the applicant has the right to challenge the decision through administrative proceedings. The first step is a Widerspruch (administrative objection) filed with BAFA within one month of the refusal decision, as required by the Verwaltungsgerichtsordnung (VwGO, Code of Administrative Court Procedure). If the objection is rejected, the applicant may bring an action before the competent administrative court (Verwaltungsgericht). The administrative courts have jurisdiction to review both the legality and, in some cases, the merits of BAFA';s licensing decisions.
In practice, administrative litigation against BAFA licence refusals is uncommon, because the courts give significant deference to BAFA';s technical and foreign policy assessments. A more effective strategy is often to engage with BAFA at the pre-application stage, provide additional end-use documentation, or restructure the transaction to address BAFA';s concerns. BAFA has a formal pre-application consultation process that experienced practitioners use to identify and resolve issues before a formal application is submitted.
When a criminal investigation is opened by the ZKA or public prosecutors, the investigated party has the right to legal representation from the outset. German criminal procedure under the Strafprozessordnung (StPO, Code of Criminal Procedure) provides for the right to silence, the right to review the investigation file once charges are formally considered, and the right to challenge the admissibility of evidence. Early engagement of specialist counsel is critical, because statements made to investigators before counsel is retained can be used against the investigated party.
Voluntary self-disclosure is a recognised mitigating factor in German enforcement practice. BAFA and prosecutors take into account whether a company identified a potential violation, reported it proactively, cooperated with the investigation, and implemented remedial measures. While self-disclosure does not guarantee immunity from prosecution, it materially affects the outcome in terms of penalties and the likelihood of criminal versus administrative treatment.
A further defence available in export control cases is the "good faith" or due diligence defence. Under EU Regulation 2021/821 and the AWG, a person who takes all reasonable steps to verify the end-use and end-user of controlled goods, and who acts in good faith on the basis of that verification, has a stronger position in enforcement proceedings than one who conducts no due diligence. This is not a complete defence, but it is a significant mitigating factor. The practical implication is that the quality of a company';s due diligence documentation directly affects its legal exposure.
Asset freeze decisions affecting a company';s own assets - for example, if the company itself is listed or if its assets are frozen as a result of a counterparty listing - can be challenged through EU-level proceedings before the General Court of the European Union. National courts in Germany can also grant interim relief in urgent cases where an asset freeze causes immediate and irreparable harm. The procedural timeline for EU-level challenges is measured in months to years, making interim measures at the national level important for businesses facing immediate liquidity pressure.
We can help build a strategy for responding to BAFA enforcement actions, licence refusals, or criminal investigations under the AWG. Contact info@vlolawfirm.com to discuss your situation.
---
What is the most significant practical risk for a German company trading with non-EU counterparties?
The most significant practical risk is transacting with a party that is listed on the EU Consolidated List or that is subject to sectoral restrictions, without adequate screening. German companies are legally required to screen all counterparties before entering into transactions, and this obligation extends to beneficial owners and intermediaries, not just the direct contractual party. A failure to screen - even where no sanctioned party is ultimately involved - is itself a compliance deficiency that BAFA and prosecutors treat as evidence of inadequate internal controls. The consequences range from administrative fines to criminal investigation of responsible individuals within the company.
How long does a BAFA export licence application take, and what happens if goods are shipped before the licence is granted?
Processing times for individual export licence applications at BAFA vary considerably depending on the complexity of the goods, the destination country, and the end-user profile. Straightforward applications for low-risk destinations may be processed within a few weeks; applications involving sensitive technology or higher-risk destinations can take several months. Shipping controlled goods before a licence is granted is a violation of the AWG and EU Regulation 2021/821, regardless of the exporter';s belief that the licence will ultimately be approved. Companies facing time-sensitive transactions should explore whether a General Export Authorisation applies, or engage BAFA through the pre-application consultation process to accelerate review.
Should a company self-disclose a potential violation to BAFA or wait to see if it is investigated?
The decision to self-disclose requires careful legal analysis and should not be made without specialist advice. Self-disclosure is a recognised mitigating factor in German enforcement practice and can influence whether a matter is treated as a criminal or administrative offence, and the level of any penalty. However, self-disclosure also triggers a formal investigation process and requires the company to provide detailed information about the potential violation. The timing, scope, and framing of a self-disclosure are critical. A premature or poorly structured disclosure can create more exposure than it resolves. The better approach is to conduct an internal investigation first, assess the legal exposure, and then make a considered decision about disclosure with the benefit of legal advice.
---
International trade and sanctions law in Germany is a technically demanding field where procedural errors and compliance gaps carry direct criminal and financial consequences. The regulatory framework - combining EU regulations, the AWG, the AWV, and BAFA enforcement practice - requires businesses to maintain active, documented compliance programmes rather than reactive responses to individual transactions. The cost of getting this right is manageable; the cost of getting it wrong is not.
To receive a checklist on building a trade and sanctions compliance programme for operations in Germany, send a request to info@vlolawfirm.com.
Our law firm VLO Law Firms has experience supporting clients in Germany on international trade, export control, and sanctions compliance matters. We can assist with licence applications, counterparty due diligence, internal compliance programme design, and representation in BAFA proceedings or criminal investigations. To receive a consultation, contact: info@vlolawfirm.com.