The U.S. Federal Communications Commission (FCC) has enacted major regulatory reforms to its equipment authorization program, targeting national security risks in the communications supply chain. The new rules close the 'component part loophole' by prohibiting the authorization of any device containing logic-bearing hardware components (such as chips, IoT modules, and transceivers) produced by entities on the FCC's Covered List, regardless of who assembles the final product.

The regulation expands the definition of 'marketing' to include online marketplaces, requiring them to display the FCC ID of certified devices at the digital point of sale and to implement due diligence processes for verifying device authorization. Exemptions are provided for small sellers and used devices, but large platforms must comply with new verification and recordkeeping obligations. Any modification or permissive change to equipment by a Covered List entity now requires full recertification, and such entities are barred from using the SDoC process for any changes.

The FCC also updates the definition of 'critical infrastructure' to align with the USA PATRIOT Act and DHS guidance, narrows the scope to vital systems and assets, and introduces strict new importation rules for covered equipment. The order proposes future requirements for hardware and software bills of materials (HBOM/SBOM) to enhance supply chain transparency and facilitate enforcement.

Accelerated revocation procedures are established for authorizations obtained through false statements or serious non-compliance, and the FCC proposes further measures to strengthen post-market controls, traceability, and legal accountability for foreign manufacturers and importers. These reforms have immediate and far-reaching effects on manufacturers, importers, distributors, online marketplaces, operators, and users of communications equipment, especially in sectors such as consumer routers, drones, wireless modules, video surveillance, and IoT devices.

This is a High Impact regulatory change.

The FCC's new rules fundamentally alter the equipment authorization landscape for a wide range of communications and RF devices, introducing mandatory prohibitions, new compliance obligations, and expanded enforcement powers.

Key reasons for High Impact:

• Prohibits authorization of any device containing logic-bearing hardware from Covered List entities, regardless of final assembler.
• Expands marketing rules to online marketplaces, requiring FCC ID display and verification at point of sale.
• Mandates recertification for any modification by Covered List entities and bars SDoC use for such changes.
• Updates 'critical infrastructure' definition, affecting scope of covered equipment.
• Introduces strict new importation controls for covered equipment.
• Proposes future HBOM/SBOM requirements for supply chain transparency.
• Accelerates revocation and enforcement procedures.

Who is affected?

Manufacturers, importers, distributors, online marketplaces, certification bodies, operators, and end users of communications equipment—especially those dealing with routers, UAS/drones, wireless modules, and video surveillance.

Conclusion:

The reforms require immediate compliance review and operational changes for all stakeholders in the U.S. communications equipment supply chain. Failure to adapt may result in loss of market access, enforcement actions, or revocation of authorizations.