A Live FCC ID Is Not a Safe Harbor — and the FCC Now Wants Your Bill of Materials
August 10, 2026
The FCC opened a formal comment proceeding on prohibiting the import and marketing of foreign covered UAS, critical components and named surveillance equipment that already hold valid authorizations, and published its Third Further Notice of Proposed Rulemaking proposing HBOM/SBOM filings, a place-of-production Covered List category and a US-responsible-party requirement.
1. The FCC opened a proceeding aimed at equipment it has already authorized
On July 30, 2026 the FCC published a request for comment at 91 Fed. Reg. 48108 (FR Doc. 2026-15418, PS Docket No. 26-184, released as DA 26-742). It proposes prohibiting the continued importation and marketing of specified foreign-made UAS and UAS critical components, together with a set of named communications and video-surveillance equipment — including certain white-label and related designs.
Legal status: request for comment — a proposal only. It is not a rule and not an effective ban. Comments closed August 31, 2026. If a prohibition is later adopted, the FCC proposes that importation and marketing must cease 30 days after the final decision publishes in the Federal Register; that 30-day clock has not started.
The structural fact is the one to carry forward. The proceeding runs under 47 CFR § 2.939(e), the provision that reaches previously authorized equipment. Holding a live FCC ID does not stop it. The proposal expressly carves out continued use and operation of already-purchased units, equipment holding a DoW or DHS Conditional Approval, Blue UAS Cleared items, Buy American-compliant domestic products, and federal-government or testing and product-development use.
What it could mean for a Taiwanese manufacturer. No Taiwanese router or gateway ODM is a named subject here, and there is no direct prohibition on that group. The value of the item is precedential, and it is significant: an FCC equipment authorization is now demonstrably a revisable status, not a permanent one. Equipment lawfully authorized today can have its import and marketing restricted later once the FCC judges it covered. The practical consequence is that Covered List screening cannot be a one-time gate cleared at certification. It belongs in a lifecycle review that reaches white-label and OEM relationships, grantee codes, FCC IDs and the actual manufacturer behind each, with a defined re-check whenever the Covered List changes. If your BOM and supplier questionnaires do not currently capture FCC grantee code, FCC ID, true manufacturer, and white-label or technology-licensing source, that is the gap this proceeding exposes.
Primary sources:
2. The equipment-authorization overhaul proposal reached the Federal Register
On August 7, 2026 the FCC's Third Further Notice of Proposed Rulemaking (FCC 26-50, ET Docket No. 21-232) published at 91 Fed. Reg. 51139 (FR Doc. 2026-16197). Legal status: proposed rule — nothing in it is in force.
What it proposes, in the FCC's own framing:
- Splitting the Covered List into named-producer and named-service categories on one side and a new place-of-production category on the other.
- Requiring HBOM and SBOM filings, plus component-producer and production-location data, with equipment applications.
- Requiring foreign applicants for FCC certification to name a US-based responsible party.
- Establishing an SDoC device registry with public identifiers.
- New rules on white labeling, importation, online sales, FCC logo use, authorization terms and revocation procedure.
- Explicit treatment of software, firmware and hardware changes to Covered List equipment.
Initial comments due September 8, 2026. Reply comments were due September 21, 2026 as published, and were subsequently extended by seven days to September 28, 2026 by a later FCC order.
What it could mean for a Taiwanese manufacturer. If adopted in substantially this form, this is the heavier of the two halves of FCC 26-50 and it lands hardest on ODMs and OEMs — because you hold the supply chain the applicant is being asked to document. Full component traceability, HBOM and SBOM production, manufacturing-location records, a named US legal representative and formal model-change management would move from good practice to filing requirements. Two things are worth doing while it is still a proposal. First, run a gap matrix of the data you can produce today against the fields the FNPRM proposes, so you know the size of the problem before it is a deadline rather than after. Second, the comment window is itself the near-term asset: cost, confidentiality and supply-chain-feasibility objections carry weight in this proceeding precisely because the FCC is asking suppliers what is workable. Nothing here should be treated as a settled compliance requirement yet — and no system rebuild is justified on a proposal.
Primary sources:
3. No new defense-compliance changes this window
No new effective changes to CMMC, NIST SP 800-171, SPRS or DFARS were confirmed between July 27 and August 10, 2026. During the CMMC Phase II suspension, Phase I self-assessments, NIST SP 800-171 Rev. 2 as the control baseline, current SPRS submissions and DFARS 252.204-7012 obligations all continue to apply unchanged.
About this briefing
Vantikon tracks US regulatory developments that reach Taiwanese manufacturers and their supply chains. If something here touches your product line and you want to talk it through, get in touch — we are glad to have the conversation.
This briefing is informational and does not constitute legal advice; consult qualified counsel for your specific situation.
