Customs and regulatory compliance in 2026 for importers and exporters

a[data-rs-seo-link]{text-decoration:underline!important;color:#1a56db!important;cursor:pointer!important;}a[data-rs-seo-link]{text-decoration:underline!important;color:#1a56db!important;cursor:pointer!important;}

Why customs compliance now reaches beyond the entry form

Customs and regulatory compliance in 2026 is no longer just a matter of assigning an HS code, paying duty, and filing a commercial invoice. For importers and exporters, the working scope now covers product classification, valuation, origin, forced labor due diligence, export controls, advance cargo data, carbon-related import rules, sanctions screening, and record retention. The practical lesson is clear: compliance has to be built before a shipment moves, not repaired after a hold, rejection, penalty notice, or customer delay. That depends on reliable product master data, documented supplier evidence, clear internal ownership, and regular checks of broker and freight-forwarder filings. For more trade updates, visit our Customs and Compliance section.

Recent changes show why the border process now starts earlier. U.S. Customs and Border Protection guidance issued in August 2025 stated that, effective August 29, 2025, goods from all countries would no longer be eligible for the Section 321 duty-free de minimis administrative exemption, with ACE rejecting certain Section 321 and entry type 86 filings for ineligible shipments. (content.govdelivery.com) In the EU, the European Commission says the Carbon Border Adjustment Mechanism definitive regime applies from January 1, 2026, while ICS2 Release 3 became operational for all transport modes from September 1, 2025, subject to limited temporary derogations in some Member States. (taxation-customs.ec.europa.eu)

What belongs inside a customs and regulatory compliance program

A useful compliance program starts with a wider definition of the border process. Customs authorities and partner government agencies do not review goods only as commercial transactions. They also assess revenue, security, safety, origin, sustainability, sanctions, and admissibility risks. A shipment can therefore fail for reasons that sit outside traditional duty management, including missing supply chain evidence, inaccurate advance data, restricted-party exposure, or a product-specific agency requirement.

For import teams, the foundation remains tariff classification, customs value, country of origin, marking, preferential tariff claims, trade remedies, and recordkeeping. For export teams, the equivalent layer includes jurisdiction, classification, license determination, end-use and end-user screening, destination controls, and export records. Cross-border e-commerce, marketplace sales, and direct-to-consumer shipping add pressure because a high volume of small packages can turn minor data errors into recurring compliance failures.

The importer of record cannot outsource responsibility entirely

Licensed customs brokers, freight forwarders, and trade consultants are important partners, but they do not replace internal ownership. In the United States, 19 U.S.C. 1484 requires the importer of record to use reasonable care when making entry and providing information needed for CBP to determine release, duty, statistics, and other legal requirements. (uscode.house.gov) CBP materials also describe informed compliance as a shared responsibility in which the agency communicates requirements and the trade community conducts regulated activities in accordance with customs laws and regulations. (cbp.gov)

That principle matters in daily operations. If a company gives a broker incomplete product descriptions, outdated HS codes, unsupported origin claims, or vague supplier names, the customs entry may be filed on time but still be noncompliant. A broker can help interpret rules and transmit data, but the importer normally controls the commercial records, supplier communications, engineering details, purchase terms, and internal approvals needed to support the declaration.

Companies should assign clear ownership for the data elements that repeatedly drive customs outcomes. Product teams should notify trade compliance when materials or functions change. Procurement should preserve supplier declarations and contract terms. Finance should identify assists, royalties, rebates, and related-party pricing issues that may affect customs value. Logistics should not replace verified product data with estimated descriptions when booking freight.

Records are a control, not an archive

Recordkeeping is often treated as a back-office task, but it is one of the clearest indicators of whether a compliance program works. In U.S. import compliance, 19 U.S.C. 1508 requires covered parties to make, keep, and produce records related to import transactions, and the statute generally limits prescribed retention periods to no more than five years from entry, reconciliation, or exportation as appropriate. (uscode.house.gov) CBP customer guidance also states that entry summary records must be kept for five years from the date of entry or from the activity that required the record to be created. (help.cbp.gov)

A strong record file should explain the declaration, not merely store documents. For a routine import, that may include the purchase order, commercial invoice, packing list, bill of lading or air waybill, payment records, entry summary, classification notes, origin support, valuation support, and any partner government agency documents. For higher-risk goods, the file may also need supplier questionnaires, production records, traceability evidence, mill certificates, laboratory reports, licenses, or correspondence explaining why a claim was made.

Digital recordkeeping can improve control only if documents are searchable, version-controlled, and linked to the relevant entry or shipment. A shared drive with inconsistent file names is not a compliance system. Teams should be able to retrieve records by importer, supplier, SKU, entry number, HS code, origin, and shipment date. Periodic sampling helps as well: select a small number of entries each month and check whether the file would support the declaration if a regulator requested evidence.

Supply chain due diligence has become a customs issue

Forced labor enforcement shows why compliance teams need visibility beyond tier-one suppliers. CBP announced on January 28, 2026 that it had revamped its forced labor website and updated the UFLPA Enforcement Statistics Dashboard, adding revised definitions, new data elements, additional filters, and more granular counting of individual import transactions. (content.govdelivery.com) The agency says the dashboard focuses on UFLPA enforcement and includes filters such as fiscal year, industry, exam result, country of origin, and HTS four-digit heading. (content.govdelivery.com)

The compliance implication is that importers should not wait for a detention to collect supply chain evidence. If goods involve cotton, polysilicon, aluminum, seafood, PVC, electronics, automotive components, or other sectors that have attracted forced labor scrutiny, companies should identify production sites, raw material origins, subcontractors, and transportation routes before importation. Documentation should be specific enough to connect the imported product to the actual supply chain, not simply state that a supplier has a policy against forced labor.

This is an area where internal functions often operate in separate tracks. Procurement may approve a supplier based on price and capacity. Legal may review contract clauses. Sustainability may evaluate corporate social responsibility responses. Logistics may handle shipment documents. Customs compliance needs a consolidated evidence trail that can be produced quickly and that matches the product, shipment, and supplier named in the entry.

Advance data and carbon rules are changing the timing of compliance

Modern customs systems increasingly require accurate information earlier in the supply chain. The European Commission describes ICS2 as an advance cargo information system for goods entering or transiting the EU, with safety and security data submitted through the Entry Summary Declaration and used for risk analysis and targeted controls. (taxation-customs.ec.europa.eu) As of September 1, 2025, the Commission said ICS2 would be fully operational in all Member States for all means of transport, including road and rail, while noting limited temporary derogations for some Member States and Northern Ireland. (taxation-customs.ec.europa.eu)

That changes the role of data governance. A vague description such as “parts,” “accessories,” or “samples” may create risk when regulators expect actionable cargo information before arrival. Importers and exporters should standardize product descriptions, align HS codes with descriptions, and make sure carriers, brokers, and forwarders receive the same data set. If commercial, logistics, and customs systems each contain different supplier names, weights, values, or origins, the shipment may be vulnerable to questions even when the underlying goods are legitimate. See also: Freight and Logistics.

Carbon-related import controls add another timing challenge. Under the EU CBAM definitive regime from January 1, 2026, the European Commission says EU importers or indirect customs representatives importing more than the single mass-based threshold of 50 tonnes of CBAM goods must apply for authorized CBAM declarant status, buy certificates, declare embedded emissions, and surrender certificates annually. (taxation-customs.ec.europa.eu) Covered sectors listed by the Commission include iron and steel, cement, aluminium, fertilizers, electricity, and hydrogen. (taxation-customs.ec.europa.eu)

For non-EU exporters selling into the EU, CBAM is not only an EU importer issue. Buyers may request emissions data, production details, installation information, and supporting calculations. Sellers that cannot provide credible information may face commercial pressure even if the legal filing obligation sits with the EU importer or representative.

Export compliance should be connected to customs controls

Import and export compliance often sit in different departments, but regulators increasingly expect both sides of trade to be risk-aware. The U.S. Bureau of Industry and Security describes export compliance programs as procedures and tools that help organizations comply with export controls and reduce the risk of violations for exports, reexports, and in-country transfers subject to the Export Administration Regulations. BIS identifies eight elements for an effective program, including management commitment, risk assessments, authorization procedures, recordkeeping, training, audits, corrective actions, and maintaining the program over time. (bis.gov)

Those elements translate well into customs operations. Management must fund compliance rather than treating it as a clerical cost. Risk assessments should focus resources on high-risk products, suppliers, destinations, and transaction types. Written procedures should explain who approves classifications, licenses, origin claims, and broker instructions. Training should reach sales, purchasing, finance, engineering, customer service, and warehouse employees whose decisions can create trade risk.

A connected approach also prevents contradictions. A product classified one way for export control purposes and another way for customs purposes may have a valid explanation, but the difference should be documented. Restricted-party screening should occur before shipment, not after goods are packed. If an export license condition affects routing, consignee, end use, or documentation, logistics teams need that information before they book transport.

A practical 90-day improvement plan

Companies do not need to fix every trade compliance issue at once. A focused 90-day plan can create measurable improvement without stopping business.

1. Days 1-15: map the current process. Identify who creates product data, who approves HS codes, who selects brokers, who signs origin certificates, who screens parties, and who stores records. Document the actual process, not the ideal policy.
2. Days 16-30: rank the highest-risk flows. Prioritize goods with high duty rates, trade remedy exposure, forced labor sensitivity, export control relevance, partner agency requirements, CBAM exposure, or frequent data corrections.
3. Days 31-50: test a sample of recent shipments. Compare broker filings against commercial documents and internal approvals. Look for mismatched values, vague descriptions, unsupported origin claims, missing records, or inconsistent party names.
4. Days 51-70: correct master data and procedures. Update product descriptions, classification notes, supplier evidence files, broker instructions, and escalation rules. Create a clear checklist for new products and new suppliers.
5. Days 71-90: train and monitor. Train the functions that create risk, then establish monthly metrics such as entry corrections, holds, late documents, license escalations, record gaps, and supplier evidence completion.

The goal is not paperwork for its own sake. The goal is to make cross-border decisions repeatable, defensible, and fast enough to support commercial operations.

Frequently asked questions

Is customs compliance the same as regulatory compliance?

No. Customs compliance usually focuses on import and export declarations, duties, classification, valuation, origin, and customs procedures. Regulatory compliance is broader and can include safety rules, forced labor laws, sanctions, export controls, environmental requirements, product standards, and agency-specific admissibility rules. In practice, the two now overlap heavily at the border.

Can a customs broker be responsible for all entry errors?

A broker may be responsible for its own professional conduct and filing practices, but the importer of record still needs internal controls over the information supplied for entry. If the underlying product, value, origin, or supplier data is wrong, broker involvement alone may not establish that the importer used reasonable care.

How often should HS classifications be reviewed?

Classifications should be reviewed when a product changes, when sourcing or materials change, when regulations or tariff schedules change, when a binding ruling or agency guidance affects the item, or when an audit identifies inconsistencies. High-risk or high-volume items should be reviewed on a defined cycle rather than only after a problem occurs.

What is the biggest compliance mistake for small importers?

The most common mistake is treating customs as a shipment-by-shipment task instead of a data and evidence system. Even small importers need documented classifications, supplier records, origin support, valuation logic, and a way to retrieve entry files quickly.

Does CBAM affect exporters outside the EU?

Yes, indirectly. The EU importer or indirect customs representative may carry the formal CBAM obligation, but non-EU producers and exporters may need to provide emissions and production data so the importer can meet authorization, declaration, and certificate requirements.