
The next major change in export-control screening may not be about adding another name to a list. It may be about seeing the relationships behind the names already on it.
The U.S. Bureau of Industry and Security’s Affiliates Rule, commonly referred to as the BIS 50% Rule, is designed to extend certain BIS restrictions to foreign entities owned 50% or more, directly, indirectly, individually, or in aggregate, by listed entities or entities subject to ownership-based restrictions. The Federal Register provides the underlying rule and scope.
With relevant provisions currently scheduled to remain stayed through November 9, 2026, compliance teams have an important opportunity to understand what the change could mean for their customers, suppliers, distributors, and other third parties. Organizations should consult current BIS guidance for the latest status.
Traditional screening typically starts with a name match. But a third party may not appear on a restricted-party list while still presenting potential exposure through its parent company, shareholders, subsidiaries or affiliates.
That creates a gap between what a screening system shows and what a compliance team may need to understand.
The practical questions become:
BIS has also identified significant minority ownership as a red flag that may require additional due diligence. BIS describes the Affiliates Rule and related red flags in its announcement.
BIS50 exposure can arise across the third-party lifecycle, including:
The challenge is not simply finding more names. It is connecting ownership information to the broader risk context already used by compliance teams—including sanctions, PEP, watchlist, state-owned enterprise, and ownership and affiliation data.
Diligent Risk Intelligence is introducing a BIS50 dataset to help organizations identify and investigate potential ownership-based exposure related to BIS-listed parties.
The dataset is designed to provide structured information on relevant BIS-listed entities and researched ownership relationships, including direct, indirect, and aggregated relationships where reliable information is available. Relationship evidence supports further review and helps analysts understand how a potential connection was identified.
BIS50 is not intended to replace an organization’s existing screening platform or make a definitive legal determination. It is designed to add ownership intelligence to the risk workflows and data environments teams already use.
Organizations can access the dataset through delivery methods including Snowflake and flexible feed formats such as XML, TXT, and CSV. This gives teams options for connecting BIS50 to their existing compliance, third-party risk, and screening processes.
The broader value comes from connecting BIS50 with other risk datasets. A potential BIS-related ownership connection can be reviewed alongside sanctions, PEP, watchlist, state-owned enterprise, and ownership and affiliation signals. This helps teams move from a standalone match to a more complete view of the relationship.
Before BIS50 becomes part of your operating model, consider asking:
BIS50 is ultimately about more than another dataset. It is about helping compliance teams see the connections that traditional screening can miss, and giving them a practical way to bring that intelligence into the workflows they already rely on.
Learn more about BIS50 and Diligent Risk Intelligence.
This article is for general informational purposes only and does not constitute legal advice or a determination that any particular entity is subject to BIS restrictions. Coverage varies by jurisdiction and the availability of reliable information.