Federal Register #ET Docket No. 21-232, FCC 26-50, FR ID 365005

FCC Final Rule on Communications Equipment Authorization and Security

This opportunity involves a regulatory update from the Federal Communications Commission (FCC) focused on communications equipment security and authorization. - Government Buyer: - Federal Communications Commission (FCC) - OEMs and Vendors: - No specific OEMs or vendors are named; the rule references entities on the FCC's Covered List as restricted manufacturers - Products/Services Requested: - No products or services are being directly procured or solicited - The rule applies to all logic-bearing hardware components and communications equipment subject to FCC authorization - Unique or Notable Requirements: - Prohibits authorization of devices containing logic-bearing hardware from entities on the FCC's Covered List - Requires full certification for any modification or permissive change to equipment by a Covered List entity - Mandates online marketplaces display FCC IDs for devices at the point of sale (with exceptions for used devices and low-volume sellers) - Updates the definition of 'critical infrastructure' for regulatory purposes - Corrects administrative errors in FCC regulations - This is a regulatory action impacting all manufacturers, importers, and sellers of communications equipment, not a procurement or solicitation.

Description

The Federal Communications Commission (FCC) has issued a final rule to strengthen its equipment authorization program to mitigate national security risks in the communications supply chain. The rule prohibits authorization of devices containing logic-bearing hardware components from entities on the FCC's Covered List, requires full certification for modifications by such entities, and mandates online marketplaces to display FCC IDs at the point of sale. The rule also revises the definition of critical infrastructure and corrects administrative errors in FCC regulations. These measures aim to reduce risks of espionage, network disruption, and unauthorized access to U.S. communications infrastructure.

View original listing