Secure Trade Advisors

⚑ Regulatory Alert Section 2(c) mandates CTPAT validation or a CTPAT-certified broker for all foreign importers of record filing formal U.S. entries. CBP has 180 days to implement.
CTPAT Alert  ·  June 3, 2026 Executive Order

The New Customs Enforcement Order: What CTPAT Companies — and Foreign Importers — Must Know

President Trump's June 3, 2026 Executive Order on customs enforcement contains a buried but consequential CTPAT mandate for foreign importers of record. We've read the full text — and we're flagging what the White House left unanswered.

Published June 4, 2026 Secure Trade Advisors  ·  securetradeadvisors.com

What the Order actually says about CTPAT

The Executive Order signed June 3, 2026 — "Strengthening Customs Enforcement" — is primarily a sweeping reform of importer-of-record (IOR) accountability. Buried in Section 2(c) is a direct CTPAT mandate with significant implications for foreign companies that import into the United States on their own account.

Section 2(c) Foreign IORs filing formal entry must either: (1) be validated in CBP's CTPAT program, if determined eligible, or (2) use a CTPAT-validated and licensed customs broker to file entries on their behalf. CBP has 180 days to publish implementing regulations.

This is a presidential-level mandate — not a CBP guidance update or a Federal Register notice. It elevates CTPAT's role from a voluntary, incentive-based program to a structural requirement for a defined class of importers. The significance of that shift should not be underestimated.

Beyond the CTPAT mandate, Section 3(a) requires importers to certify compliance with the Countering America's Adversaries Through Sanctions Act (CAATSA) and other supply chain laws, and to disclose foreign tax identifiers, global business identifiers, and detailed production data — down to model numbers, composition, and grade specifications. Section 3(b) goes further: within 90 days, foreign exporters must submit to CBP any documentation they were required to provide to their own country's customs authority before exporting to the United States. This bilateral documentation requirement closes a significant information gap that CBP has long cited as an enforcement obstacle.

Bottom Line CTPAT certification is no longer just a trusted trader benefit. For foreign importers of record, it is on a path to becoming a condition of market access. CBP's implementing regulations — due within 180 days — will determine the specifics.

What the EO requires — and when

Eight provisions with direct compliance implications for importers, brokers, and foreign companies shipping to the United States.

Section Requirement Deadline
2(a) — Bond & assets Foreign IORs must maintain minimum tangible domestic assets or bonding at all times. Minimum bond coverage increases. 180 days
2(b) — Informal entry ban Foreign IORs prohibited from filing informal (low-value) entries. U.S. IORs only for informal entry going forward. Promptly
2(c) — CTPAT mandate Foreign IORs filing formal entry must be CTPAT-validated (if eligible) or use a CTPAT-certified broker. Continuous bonds restricted. 180 days
2(d) — Good standing All IORs must maintain "good standing" with CBP based on compliance and payment history. IORs out of good standing cannot import. 180 days
2(f) — Enhanced vetting Recurrent vetting required for all import-related actors: IORs, affiliates, brokers, freight forwarders, custodians. 180 days
3(a) — Import certification IORs must certify CAATSA compliance and other supply chain laws. Disclose foreign tax IDs, business identifiers, and detailed production data (model numbers, composition, grade). TBD by CBP
3(b) — Exporter documentation Foreign exporters must submit to CBP any documentation required by their own country's customs authority prior to export to the U.S. 90 days
4(a) — CTPAT enforcement CBP directed to enforce CTPAT program conditions, enforce liquidated damages, restrict in-bond utilization, increase audits, and impose maximum penalties on brokers who fail due diligence or repeatedly represent noncompliant clients. Ongoing
4(c) — Penalty & LD floors Minimum 50% penalty floor on assessed violations. Separate minimum liquidated damages floor to be established. No mitigation for repeat offenders. 90 days

The CTPAT program gap the EO doesn't acknowledge

The Order references "CTPAT" without specifying which program or acknowledging that CTPAT eligibility is not universal. This is the most consequential ambiguity in the entire mandate.

CTPAT Security — the flagship program — only accepts foreign manufacturers from Canada and Mexico. A foreign manufacturer in China, Vietnam, Germany, India, South Korea, or anywhere else outside North America is not eligible to join CTPAT Security under current program rules. Period.

There are two possible programs a foreign IOR could theoretically satisfy the mandate through:

CTPAT Security
  • The main trusted trader program. Open to U.S. importers, customs brokers, carriers, consolidators, and — for foreign manufacturers — Canada and Mexico only.
  • Not available to manufacturers in Asia, Europe, or elsewhere under current program rules.
  • Full MSC (Minimum Security Criteria) compliance and CBP validation required.
CTPAT Trade Compliance
  • A separate program focused on customs compliance — tariff classification, valuation, and origin. Broader eligibility than CTPAT Security.
  • Addresses trade compliance, not supply chain security. Different program, different criteria.
  • Whether CBP will accept TC participation as satisfying this mandate is not clarified in the Order.
Critical Unresolved Question

Which CTPAT? CBP's implementing guidance will be the deciding document.

The Order gives CBP 180 days to implement. That guidance — likely through rulemaking — will answer the three questions that matter most right now:

  1. Does CTPAT Trade Compliance satisfy the mandate for foreign IORs ineligible for CTPAT Security?
  2. Will CBP expand CTPAT Security eligibility to foreign manufacturers beyond Canada and Mexico?
  3. What does "CTPAT-validated and licensed customs broker" mean in practice — does existing CTPAT certification qualify, or will brokers need to meet a new standard?
Key Takeaway The practical effect for most foreign IORs outside North America is that they cannot self-validate under current program rules and will be defaulted to the broker pathway — they will need a CTPAT-certified broker to file their U.S. entries.

Who this affects — and how

The mandate applies differently depending on your role in the supply chain and your company's country of operation.

Most Actionable Path
Foreign manufacturers in Mexico & Canada acting as their own IOR
Directly in scope for CTPAT Security certification — and the path forward is clear. If you import into the U.S. using your own IOR designation and operate in Mexico or Canada, begin a CTPAT Security readiness assessment now. The 180-day CBP implementation window is not 180 days of breathing room.
Uncertain Path
Foreign manufacturers outside North America acting as their own IOR
Under current rules, CTPAT Security is unavailable to you. The most immediately protective action is to ensure your customs broker holds valid CTPAT certification. Watch CBP's guidance closely for any CTPAT Trade Compliance pathway announcement.
Upstream Dependency
U.S. importers with foreign supplier IORs
If your supply chain involves foreign manufacturers or trading companies who serve as their own IOR on U.S.-bound shipments, you now have an upstream compliance dependency. Audit which suppliers and trading partners hold IOR designations and what their CTPAT status is.
Competitive Opportunity
U.S. customs brokers
CTPAT certification is shifting from a differentiator to a baseline requirement. Foreign IORs who cannot self-certify will need a CTPAT-certified broker. Section 4(a) simultaneously raises the stakes — maximum penalties apply to brokers who fail due diligence or repeatedly represent noncompliant clients.

How CBP could interpret the mandate: three scenarios

Until implementing regulations are published, these are the three most likely ways CBP resolves the CTPAT program ambiguity.

1
Narrow interpretation — CTPAT Security only. CBP reads the mandate as requiring CTPAT Security validation. Most foreign IORs outside Canada and Mexico cannot self-qualify and are defaulted to the broker pathway. The certification requirement becomes functionally a broker requirement for most of the world.
2
CTPAT Trade Compliance pathway. CBP announces that CTPAT Trade Compliance certification satisfies the Section 2(c) requirement for foreign IORs who are ineligible for CTPAT Security. This is the most practical near-term resolution for the eligibility gap and would create a significant surge in CTPAT TC applications.
3
Expanded CTPAT Security eligibility. CBP uses the Order as authority to expand CTPAT Security's foreign manufacturer eligibility beyond Canada and Mexico — opening the program to Asian, European, and other foreign manufacturers. This would require significant program changes and capacity investment. Possible, but not a near-term outcome.

What companies should do now

Six actions to take before CBP's implementing regulations set the compliance clock — regardless of which interpretation scenario plays out.

Step 01
Determine your IOR structure
Identify whether your company, your suppliers, or your trading partners currently serve as IOR on U.S.-bound shipments. This is the threshold question — none of the rest applies if you don't have a foreign IOR in your chain.
Step 02
Check CTPAT eligibility
For manufacturers in Mexico and Canada: begin a formal CTPAT Security readiness assessment. For manufacturers elsewhere: confirm your customs broker holds CTPAT certification, or identify one who does.
Step 03
Audit customs broker CTPAT status
Any broker filing entries on behalf of a foreign IOR should hold CTPAT certification. Confirm this now — before implementing regulations set the deadline. Non-certified brokers will face a compliance gap as soon as rules take effect.
Step 04
Review bond and asset requirements
The Order tightens bond minimums and requires IORs to maintain tangible domestic assets. Foreign IOR clients relying on continuous bonds need to reassess their coverage levels before CBP's revised bonding rules take effect.
Step 05
Monitor CBP's implementing guidance
The Order establishes the mandate; CBP's rulemaking establishes the specifics. Watch the Federal Register for proposed rules. This is where the CTPAT program ambiguity will be resolved — engage with your CTPAT advisor when the notice-and-comment period opens.
Step 06
Assess "good standing" exposure
Section 2(d) creates a new IOR good standing requirement tied to compliance history and pending liabilities. Any IOR with unresolved penalty cases, prior violations, or affiliated entities with enforcement history should conduct an internal review now.

Implementation timeline

Key regulatory milestones from the date of signing through the one-year reporting requirement.

Jun 3, 2026
EO signed. Effective immediately as a mandate to CBP and DHS. Some provisions (informal entry ban) take effect promptly without rulemaking.
~Jul 3, 2026
90-day provisions due: Supply chain disclosure and exporter documentation requirements, 50% penalty floor and liquidated damages floor, seizure and forfeiture reforms.
~Jul 18, 2026
45-day deadline: DHS submits legislative recommendations to the President to address IOR accountability and enforcement gaps.
~Dec 2026
180-day provisions due: CTPAT mandate for foreign IORs, IOR good standing framework, revised bonding minimums, enhanced vetting procedures. Watch for proposed rulemaking and Federal Register notices.
Jun 2027
One-year report to the President on the effectiveness of Order provisions from CBP and DHS.

Frequently asked questions

Key questions companies are asking about this EO and its CTPAT implications.

Does the CTPAT mandate apply to all foreign companies shipping to the U.S.?
No — the mandate applies specifically to foreign importers of record (IORs). A foreign manufacturer that ships goods to a U.S. importer who serves as IOR is not directly in scope. The requirement applies to foreign entities that serve as their own IOR on U.S. formal entries.
My company is a foreign manufacturer in China. Can we get CTPAT certified?
Under current CTPAT Security program rules, no — CTPAT Security only accepts foreign manufacturers from Canada and Mexico. As a Chinese manufacturer, you would need to use a CTPAT-certified customs broker under the Section 2(c) broker pathway, or monitor CBP's implementing guidance for any CTPAT Trade Compliance pathway announcement.
We are a Canadian manufacturer acting as our own IOR. What should we do?
You are directly in scope and eligible for CTPAT Security certification — making you one of the few foreign IOR categories that can satisfy the mandate through self-certification. You should begin a CTPAT readiness assessment immediately. The 180-day CBP implementation window is not 180 days of inaction time — early engagement with the program puts you ahead of the compliance deadline.
We are a U.S. customs broker. Does this EO require us to get CTPAT certified?
Not directly — but if you currently serve or plan to serve foreign IOR clients, your CTPAT certification status becomes a condition of their ability to use your services under Section 2(c). Beyond that, Section 4(a) establishes maximum penalties for brokers who fail due diligence or repeatedly represent noncompliant clients. CTPAT certification for brokers is effectively on a path from differentiator to baseline requirement.
Does this EO eliminate the de minimis threshold for foreign IORs?
Section 2(b) prohibits foreign IORs from filing informal entries — the category that covers low-value shipments historically processed under simplified procedures. This is a significant restriction on the de minimis pathway for foreign IORs specifically. U.S.-based IORs are not affected by this provision.
When do the CTPAT requirements take effect?
The EO directs CBP to implement the CTPAT mandate within 180 days — approximately December 2026. The specific compliance requirements, eligibility determinations, and broker standards will be defined in CBP's implementing regulations. Monitor the Federal Register for proposed rulemaking. Some provisions (informal entry ban, enforcement posture) take effect more quickly.
What is CAATSA and why does it matter here?
The Countering America's Adversaries Through Sanctions Act (CAATSA) is a 2017 law targeting sanctioned entities connected to Russia, Iran, and North Korea. Section 3(a) of the EO requires importers to certify CAATSA compliance alongside other supply chain law certifications. This extends CAATSA compliance obligations into the formal entry process, creating new certification and documentation requirements for any IOR with supply chain exposure to sanctioned jurisdictions or entities.
Complimentary Consultation
Not sure where your company stands? Let's find out.
In 30 minutes, we will assess your current CTPAT status, identify any gaps relative to CBP's current Minimum Security Criteria, and outline a clear path to certification — or confirm you are positioned ahead of the December 2026 compliance window.
Request Your Free Consultation →
No obligation. No sales pitch. Just clarity on where you stand.

Source documents

This analysis is based on the Executive Order text published June 3, 2026 at whitehouse.gov. CBP implementing regulations have not yet been published as of the date of this post. This analysis reflects Secure Trade Advisors' independent reading of the Order and does not constitute legal advice. CTPAT program eligibility rules cited reflect program parameters as of June 2026 and are subject to change through CBP rulemaking.

Not sure if your company is affected by the June 2026 Customs Enforcement Order?

Complete the form below and a CTPAT advisor will assess your exposure and next steps.

"*" indicates required fields

Name:*