On 30 July 2026, HMRC announced that Airbus Operations Limited had agreed a £6.4m compound settlement for offences under the Export Control Order 2008, the largest such settlement for strategic export control offences to date.
Yet the significance of this case lies not just in the headline figure, but in what it tells us about HMRC's enforcement priorities and the evolving relationship between the voluntary disclosure regime and the drive for increased transparency.
How were the Airbus export controls breaches discovered?
The breaches were identified through Airbus’s own internal audit and voluntarily reported to HMRC: the company cooperated fully with the subsequent investigation and implemented remediation measures.
In that sense, Airbus followed the approach regulators typically encourage; proactive identification, voluntary disclosure, full cooperation and remediation.
The same was true of Petrofac Facilities Management Limited, which agreed a compound settlement of £569,157 for Russia sanctions breaches just a month earlier – the first time HMRC publicly named a company in connection with such a settlement.
The Airbus case did not involve exports without licences or deliberate circumvention of regulatory requirements. According to HMRC, the breaches primarily related to non-compliance with licence conditions and record-keeping obligations.
What export controls did Airbus violate?
Specifically, the internal audit at Airbus found the company had not kept accurate records of the transfer of controlled technology under three Open General Export Licences (OGELs) for which it was registered.
This amounted to a breach of Export Control Order 2008 Article 29(2)(a-g), which requires exporters to keep records of the following information:
a) a description of the act, i.e. the transfer of controlled technology
b) a description of items which the act relates to, i.e. this would have been the description of the technology in question
c) the dates on which relevant technology was transferred out of the UK
d) the quantity of the goods (if any) to which the act relates (note, this would not have been relevant to the technology transfers)
e) the name and address of the exporter, i.e. Airbus
f) the name and address of any recipient of the technology in question, i.e. the person(s) to whom Airbus transferred the technology, and
g) in so far as it is known, the name and address of the end user of the transferred technology
In addition, the company failed to keep mandatory OGEL registers amounting to a breach of Article 29(3), which requires registers to be kept for at least four years from the end of the calendar year in which the export or transfer took place.
Airbus also neglected to keep accurate records contrary to the conditions of one of their OGELs. This amounted to a breach of Article 29(2)(i), which requires exporters to keep records of “any further information required by the licence”.
Although we do not know what OGEL this related to, certain OGELs have specific or additional record-keeping requirements. Lastly, on one occasion Airbus breached a Standard Individual Export Licence (SIEL) condition.
The above failures were categorised by HMRC as offences contrary to Article 38(1)(a) (failing to comply with licence conditions) and Article 38(1)(b) (failing to comply with obligations under Article 29 of the ECO) of the Export Control Order.
The applicable monetary penalty for offences under Articles 38(1)(a) and (b) is an unlimited fine.
Interestingly, while breaches of licence conditions by failing to keep records of all information mentioned in (a)—(g) above may attract unlimited fines, exporting controlled dual-use technology without a licence attracts a maximum penalty of only £2,500.
Any attempt to reverse-engineer the calculation of the fine would be purely speculative without further details but whatever the circumstances may have been, the message from HMRC is clear: licence conditions and record-keeping requirements are not just administrative formalities, they are enforceable legal obligations capable of attracting substantial penalties.
(Limited) transparency
Taken together, the Airbus and Petrofac settlements indicate a clear shift toward greater transparency in trade control enforcement.
There are understandable policy reasons for this approach: publishing enforcement outcomes increases the visibility of regulatory activity, may contribute to deterrence by attaching enforcement figures to a real business name and potentially highlights industries with more compliance exposure.
Understanding how a settlement of this magnitude arose from record-keeping failures is essential to building deterrence.
For UK exporters looking to learn from the Airbus settlement, HMRC’s announcement and accompanying notice to exporters offers limited insight into the nature of the underlying failures.
If naming the offender is to improve transparency, there is a strong case for pairing announcements with more detailed guidance on the underlying compliance failures and the aggravating or mitigating factors driving the settlement calculation.
Without additional context, businesses will inevitably find it difficult to translate headline enforcement outcomes into practical lessons for their own compliance programmes.
Where does this leave voluntary disclosures?
Unfortunately, in the absence of published guidance on how HMRC calculated compound settlement amount, it is difficult to assess what the penalty might have been without Airbus self-reporting.
That said, £6.4m is likely to have been significantly discounted, given HMRC’s public acknowledgment of Airbus’s voluntary disclosure and cooperation.
As such, businesses identifying potential export control breaches should not assume that disclosure has lost its value.
However, we think that there is a balance to be struck here. If the prospect of being named deters businesses from making voluntary disclosures, HMRC may find that the flow of industry intelligence needed to identify compliance risks begins to diminish.
Naming and shaming companies that have proactively disclosed and cooperated could have a chilling effect, potentially discouraging others from coming forward if they believe that even full cooperation might result in reputational exposure.
Key takeaways for exporters
Even with limited detail published, there are key lessons exporters should take notice of:
• Licence conditions matter: obtaining a licence is only the first step. Exporters must fully understand and comply with all conditions attached to their licences, including recordkeeping, registration requirements and obtaining relevant undertakings
• OGELs require active compliance: an OGEL is not a one-time compliance exercise. They come with ongoing obligations that must be monitored and maintained
• Internal audits can uncover problems – and that’s a good thing: the Airbus breaches were identified through the company’s own audit processes. This shows the importance of periodic assessments of export control compliance
• Voluntary disclosure still has value: while the penalty was significant, the matter was resolved out of court. Businesses that identify potential breaches should still consider disclosure and cooperation as a route to resolution
• Expect greater visibility: in light of HMRC’s new policy of naming offenders, businesses should factor reputational considerations into their compliance planning.
