Part of the AI Regulation News hub.
The Commerce Department moved the UAE into Country Group A:5 but kept the license requirement on advanced computing items, routing AI-chip relief through a named-entity list instead of the country upgrade
The country upgrade and the chip relief are two different mechanisms in one rule, and only one of them is about geography. For AI compute the gate is a list of approved entities, so being in the UAE is not what qualifies you.
Bottom line: A binding final rule, effective 10 July 2026, four days before it was published. It removes the UAE from Country Groups D:3 and D:4 and adds it to A:5, but it expressly maintains license requirements for advanced computing items to or within the UAE.
Who this affects: Export control counsel and trade compliance teams at chip and server vendors, cloud and data centre operators building in the Gulf, US-headquartered AI companies with UAE subsidiaries, and anyone modelling where frontier compute can lawfully sit.
Issue date: Effective 10 July 2026; published in the Federal Register on 14 July 2026 as document 2026-14132. The rule took effect before publication.
What changed: The UAE gained Country Group A:5 status and eligibility for License Exception STA, which covers military items, certain satellites and spacecraft, and dual-use items for oil and gas, desalination and civil nuclear power. Advanced computing was handled separately and more narrowly.
Analysis: The headline is a country upgrade; the AI substance is an entity carve-out. License requirements on the top tier of AI chips remain in force for the UAE, and they fall away only where the ultimate consignee and all end users are the UAE Government or entities named in supplement no. 8 to part 740. That is a list, not a jurisdiction.
Primary sources: Final rule, 2026-14132, via GPO govinfo (EN)
- Instrument (EN)
- Enhanced Favorable Treatment for the United Arab Emirates Under the Export Administration Regulations
- Authority
- Bureau of Industry and Security, US Department of Commerce
- Jurisdiction
- United States, with extraterritorial reach through the EAR reexport rules
- Status
- Final rule
- Bindingness
- Binding. Amends the Export Administration Regulations.
- Issue date / next deadline
- Effective 10 July 2026, published 14 July 2026. No compliance deadline or transition period is set.
- AI-relevant ECCNs
- 3A090.a and 4A090.a and related .z items under section 742.6(a)(6)(iii)(A); controls also maintained on 3A090.b, 4A090.b and related .z items
- Scope caveat
- The rule is broader than AI. License Exception STA covers military items, satellites and spacecraft, and oil and gas, desalination and civil nuclear items. Only the advanced computing portion is treated here.
- Editorial Note
- Informational analysis for working professionals, not legal advice. Confirm how any rule applies to your situation with qualified counsel.
- Primary source
- https://www.govinfo.gov/content/pkg/FR-2026-07-14/html/2026-14132.htm
Two mechanisms, one rule
BIS describes three amendments. It removes the UAE from Country Group D:3, the chemical and biological designation, and from D:4, the missile technology designation. It adds the UAE to Country Group A:5, with eligibility for License Exception STA for the UAE Government and approved commercial entities. And, in its own words, it maintains license requirements for advanced computing items destined to or within the UAE, except for UAE Government agencies as well as approved UAE commercial entities and US-headquartered AI entities identified in supplement no. 8 to part 740 and subsidiaries of such US-headquartered AI companies.
The first two are geography. The third is not, and it is the one that matters for AI. Reading the summary quickly gives the impression that the country upgrade carries the chips with it. It does not. The rule states the license requirement is maintained and then carves out from it.
What STA actually authorises is set out separately: military items, certain commercial satellites and spacecraft, and dual-use items useful in, among other things, oil and gas production, desalination and civil nuclear power generation. Advanced computing is not in that list. It is dealt with in its own passage, under its own conditions.
What the carve-out requires
Section 742.6(a)(6)(iii)(A) of the EAR imposes a worldwide license requirement on certain advanced computing items, specifically ECCNs 3A090.a, 4A090.a and related .z paragraph items. That is the top tier, and the rule preserves it for the UAE.
The exception is tightly drawn. It applies when the ultimate consignee and all end users are UAE Government entities or approved commercial entities listed in supplement no. 8 to part 740 and specified as approved to receive such advanced computing items license-free. Two conditions worth noting: it reaches every end user, not just the immediate buyer, and being on supplement no. 8 is not by itself sufficient, because an entity must also be specified as approved for license-free receipt of these items.
BIS separately maintains controls on the second tier, 3A090.b, 4A090.b and related .z items, to or within the UAE, except when destined to the UAE Government or approved commercial entities. The rule also adds a new license requirement paragraph covering the UAE alongside Country Groups D:1, D:4 and D:5 for that second tier.
So the practical question for a vendor is not whether the destination is the UAE. It is whether every party in the chain is on the list and approved for the tier being shipped. A data centre in Abu Dhabi operated by an unlisted entity is in the same position it was before this rule.
Why this shape of rule is the interesting part
The rule situates itself against the rescission of the Biden-era AI diffusion rule, citing BIS guidance of 13 May 2025 and 31 May 2026. The diffusion approach sorted the world into tiers of countries with numerical compute allowances. What replaces it here is narrower and more discretionary: a specific bilateral arrangement, implemented through a list of named entities that the agency controls.
That has consequences for anyone forecasting compute geography. Under a country-tier system, a firm can plan by jurisdiction. Under an entity-list system, the same firm's access depends on an administrative listing decision that can be amended without notice-and-comment on the underlying policy. The rule's own use of the phrase approved commercial entities, rather than any objective criterion, is the tell.
It is also worth noting what the rule says it is balancing. BIS frames the change as facilitating secure access by trusted entities in the UAE to some of the most sensitive items subject to the EAR, and the advanced computing sentence ties the arrangement to the May 2025 US-UAE Artificial Intelligence Cooperation framework while asserting it proceeds without compromising US digital infrastructure buildout. The last clause is doing quiet work: it is the domestic-capacity argument that has shaped this policy area, appearing here as an assurance rather than as an operative condition.
What we did not verify
We fetched the rule from the Government Publishing Office's govinfo service and read it in full: 37,215 bytes, clean decode, no replacement characters. Every provision described above was located in that text, and the quoted sentence was matched against it.
We did not open supplement no. 8 to part 740. We therefore do not know which entities are listed, how many there are, whether any US-headquartered AI company is named, or which of them are specified as approved for license-free receipt. Nothing here should be read as saying a particular company is or is not covered.
We did not open the May 2025 US-UAE Artificial Intelligence Cooperation framework, and we describe it only as the rule describes it. We did not open the BIS guidance of 13 May 2025 or 31 May 2026, nor the rescinded AI diffusion rule, so our account of what preceded this is limited to what this rule states.
We did not verify any figure for compute volume, chip counts or investment associated with this arrangement, and the rule contains none. We make no claim about enforcement activity, since the rule creates none.
One routing note for anyone checking our work: federalregister.gov currently returns a Request Access challenge page as an HTTP 200 for full-text URLs from some networks, which is easy to mistake for the document. The govinfo URL above is a separate official GPO system and serves the full text.
If you sell or deploy frontier compute, do not read this as the UAE becoming an open destination. The license requirement on 3A090.a and 4A090.a survives, and relief depends on every consignee and end user being a listed, approved entity under supplement no. 8 to part 740. Check the list and the approval scope before the destination. And note the structural shift: access to AI compute is now being allocated by administrative listing rather than by country tier, which is a different thing to plan around and a faster thing to change.
Source File
https://www.govinfo.gov/content/pkg/FR-2026-07-14/html/2026-14132.htm
Open the govinfo page for FR document 2026-14132 and confirm three things: the DATES line stating the rule is effective July 10, 2026; the third numbered amendment in the background section, which maintains license requirements for advanced computing items except for named entities; and the passage on section 742.6(a)(6)(iii)(A) preserving the worldwide requirement for ECCNs 3A090.a and 4A090.a.
The UAE Government and approved commercial entities will also have license-free access to advanced computing items, consistent with the May 2025 U.S.-UAE Artificial Intelligence Cooperation framework, without compromising U.S. digital infrastructure buildout. Bureau of Industry and Security, final rule 2026-14132, 14 July 2026
FAQ
Did this rule give the UAE license-free access to AI chips?
Only for named entities. The rule expressly maintains license requirements for advanced computing items to or within the UAE. They fall away where the ultimate consignee and all end users are UAE Government entities or approved commercial entities listed in supplement no. 8 to part 740 and specified as approved to receive those items license-free.
Does License Exception STA cover advanced computing?
The rule describes STA as authorising military items, certain commercial satellites and spacecraft, and dual-use items useful in oil and gas production, desalination and civil nuclear power generation. Advanced computing is addressed separately in the rule, under its own conditions.
Which ECCNs are involved?
Section 742.6(a)(6)(iii)(A) imposes a worldwide license requirement on ECCNs 3A090.a, 4A090.a and related .z paragraph items. BIS also maintains controls on 3A090.b, 4A090.b and related .z items destined to or within the UAE, subject to a similar government and approved-entity exception.
When did it take effect?
It is effective 10 July 2026 and was published in the Federal Register on 14 July 2026, so it took effect before publication. The rule sets no compliance deadline or transition period.
Is this rule only about AI?
No, and it should not be described that way. It also changes treatment of military items, satellites and spacecraft, and dual-use items for oil and gas, desalination and civil nuclear power. The advanced computing provisions are a distinct and separately drafted part of it.
Related briefings
Sponsored Training
Practical AI training for regulated professionals, built around verification, documentation and a defensible process. See the courses.