United States of America: Implemented Bureau of Industry and Security (BIS) Interim Final Rule on cybersecurity items regulation

On 19 January 2022, the interim final rule published by the US Bureau of Industry and Security (BIS) takes full effect. The Rule aims to implement controls against certain “cybersecurity items" that are used to pursue malicious cyber activities such as espionage or surveillance. This is done through amendments to the Commerce Control List (CCL). Furthermore, the Export Control Classification Numbers (ECCNs) are updated and a new License Exception Authorized Cybersecurity Exports (ACE) is created.