Wassenaar Arrangement

The Wassenaar Arrangement on Export Controls for Conventional Arms and Dual-Use Goods and Technologies is a multilateral export control regime (MECR) with 42 participating states including many former Comecon (Warsaw Pact) countries.
The Wassenaar Arrangement was established to contribute to regional and international security and stability by promoting transparency and greater responsibility in transfers of conventional arms and dual-use goods and technologies, thus preventing destabilizing accumulations. Participating states seek, through their national policies, to ensure that transfers of these items do not contribute to the development or enhancement of military capabilities which undermine these goals, and are not diverted to support such capabilities.
It is the successor to the Cold War-era Coordinating Committee for Multilateral Export Controls (COCOM), and was established on 12 July 1996, in Wassenaar, the Netherlands, which is near The Hague. The Wassenaar Arrangement is considerably less strict than COCOM, focusing primarily on the transparency of national export control regimes and not granting veto power to individual members over organizational decisions. A Secretariat for administering the agreement is located in Vienna, Austria. Like COCOM, however, it is not a treaty, and therefore is not legally binding.
Every six months member countries exchange information on deliveries of conventional arms to non-Wassenaar members that fall under eight broad weapons categories: battle tanks, armoured fighting vehicles (AFVs), large-caliber artillery, military aircraft, military helicopters, warships, missiles or missile systems, and small arms and light weapons.
Control lists.
The outline of the arrangement is set out in a document entitled "Guidelines & Procedures, including the Initial Elements". The list of restricted technologies is broken into two parts, the "List of Dual-Use Goods and Technologies" (also known as the "Basic List") and the "Munitions List". The Basic List is composed of ten categories based on increasing levels of sophistication:
Basic List has two nested subsections—Sensitive and Very Sensitive. Items of the Very Sensitive List include materials for stealth technology—i.e., equipment that could be used for submarine detection, advanced radar, and jet engine technologies.
Within each of the categories, there are 5 types of controlled item. These are approximately as follows:
The types of item B, C, D and E typically refer to the type A items, but there are many exceptions, e.g. some materials may be controlled, even though there is no specific Good referred to.
The Wassenaar Arrangement List's categories are typically processed, and merged with other sources, e.g. Category 5.A.2 maps on to US ECCN 5A002, and EU control classification 5A002. 
The Munitions List has 22 categories, which are not labeled.
In order for an item to be placed on the lists, Member States must take into account the following 
criteria:
Membership.
, the 42 participating states are: 
 – European Union member state. - NATO member. 
, , , & are not members of the Wassenaar Agreement. & see below.
Admission requirements.
Admission requires states to:
The People's Republic of China and Israel are not members. The Arrangement is open on a global and non-discriminatory basis to prospective adherents that comply with the agreed criteria. Admission of new members requires the consensus of all members. 
India joined as the 42nd participating state on 07 December 2017. "Wassenaar Arrangement participating states reviewed the progress of a number of current membership applications and agreed at the plenary meeting to admit India which will become the Arrangement's 42nd participating state as soon as the necessary procedural arrangements for joining the WA are completed," the grouping said in a statement. India's application was supported by Russia, USA, France and Germany.
2013 amendments.
In December 2013, the list of export restricted technologies was amended to include internet-based surveillance systems. New technologies placed under the export control regime include "intrusion software"—software designed to defeat a computer or network's protective measures so as to extract data or information—as well as IP network surveillance systems. 
The purpose of the amendments was to prevent Western technology companies from selling surveillance technology to governments known to abuse human rights. However, some technology companies have expressed concerns that the scope of the controls may be too broad, limiting security researchers' ability to identify and correct security vulnerabilities. Google and Facebook criticized the agreement for the restrictions it will place on activities like penetration testing, sharing information about threats, and bug bounty programs. They argue that the restrictions will weaken the security of participating nations and do little to curb threats from non-participant nations.