At its December 2013 plenary in Vienna, the Wassenaar Arrangement agreed to add intrusion software and IP network communications surveillance systems to its List of Dual-Use Goods and Technologies.
Key points
- New controls cover systems, equipment and software for generating, delivering or communicating with intrusion software.
- IP network surveillance systems used to analyse and index communications are also covered.
- The changes aim to limit the spread of surveillance tools to repressive regimes.
- Wassenaar is not law in itself; participating states implement it through national export controls.
- Cryptography controls in Category 5 Part 2 continue to apply alongside the new items.
The new controls will reach UK law through the EU dual-use list and UK export control legislation. Security vendors, penetration testing firms and researchers should review whether their tools or technical data could need an export licence.
Source: Wassenaar Arrangement List of Dual-Use Goods, WA-LIST (13) 1 (Wassenaar Arrangement)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
