Determination of communications equipment or services posing national security risks

Not later than 1 year after March 12, 2020, the Commission shall publish on its website a list of covered communications equipment or services. is produced or provided by any entity, if, based exclusively on the determinations described in paragraphs (1) through (4) of subsection (c), such equipment or service produced or provided by such entity poses an unacceptable risk to the national security of the United States or the security and safety of United States persons; and routing or redirecting user data traffic or permitting visibility into any user data or packets that such equipment or service transmits or otherwise handles; causing the network of a provider of advanced communications service to be disrupted remotely; or otherwise posing an unacceptable risk to the national security of the United States or the security and safety of United States persons. A specific determination made by any executive branch interagency body with appropriate national security expertise, including the Federal Acquisition Security Council established under section 1322(a) of title 41. A specific determination made by the Department of Commerce pursuant to Executive Order No. 13873 (84 Fed. Reg. 22689; relating to securing the information and communications technology and services supply chain). The communications equipment or service being covered telecommunications equipment or services, as defined in section 889(f)(3) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Public Law 115–232; 132 Stat. 1918). A specific determination made by an appropriate national security agency. The Commission shall periodically update the list published under subsection (a) to address changes in the determinations described in paragraphs (1) through (4) of subsection (c). The Commission shall monitor the making or reversing of the determinations described in paragraphs (1) through (4) of subsection (c) in order to place additional communications equipment or services on the list published under subsection (a) or to remove communications equipment or services from such list. If a determination described in any such paragraph that provided the basis for a determination by the Commission under subsection (b)(1) with respect to any communications equipment or service is reversed, the Commission shall remove such equipment or service from such list, except that the Commission may not remove such equipment or service from such list if any other determination described in any such paragraph provides a basis for inclusion on such list by the Commission under subsection (b)(1) with respect to such equipment or service. For each 12-month period during which the list published under subsection (a) is not updated, the Commission shall notify the public that no updates were necessary during such period to protect national security or to address changes in the determinations described in paragraphs (1) through (4) of subsection (c). Communications or video surveillance equipment produced by Shenzhen Da-Jiang Innovations Sciences and Technologies Company Limited (commonly known as ‘DJI Technologies’). Communications or video surveillance equipment produced by Autel Robotics. any subsidiary, affiliate, or partner of the named entity; any entity in a joint venture with the named entity; or any entity to which the named entity has a technology sharing or licensing agreement. Communications or video surveillance services, including software, provided by an entity described in subparagraphs (A), (B), and (C) or using equipment described in such subparagraphs. If the appropriate national security agency does not make a determination as required by paragraph (1) within one year after the enactment of this Act, the Commission shall add all communications equipment and services listed in paragraph (1) to the covered list. the Commission shall place such communications equipment or services on the covered list; and the appropriate national security agency shall submit to the appropriate congressional committees a report on their determination which shall be submitted in unclassified form but may contain a classified annex. that agency shall submit to the appropriate congressional committees a report on their determinations, which shall be submitted in unclassified form but may contain a classified annex; and within 180 days following the determination, all other appropriate national security agencies shall review the determination and shall submit to the appropriate congressional committees a report on their determinations, which shall be submitted in unclassified form but may contain a classified annex. The term ‘appropriate national security agency’ has the same meaning as the term in section 9 of the Secure and Trusted Communications Networks Act of 2019 (47 U.S.C. 1608)) [sic]. The term ‘Commission’ means the Federal Communications Commission. The term ‘covered list’ means the list of covered communications equipment or services published by the Commission under section 2(a) of the Secure and Trusted Communications Networks Act [of 2019 (47 U.S.C. 1601(a))]. the Committee on Armed Services, the Committee on Homeland Security and Governmental Affairs, the Committee on Commerce, Science, and Transportation, and the Select Committee on Intelligence in the Senate; and the Committee on Armed Services, the Committee on Homeland Security, the Committee on Energy and Commerce, and the Permanent Select Committee on Intelligence in the House of Representatives. The term ‘technology sharing agreement’ means an agreement where a named entity licenses their technology to a company directly or through an intermediary manufacturer. Nothing herein shall be construed to override or affect the uses permitted by sections 1823 through 1832 of the National Defense Authorization Act for Fiscal Year 2024 (Public Law 118–31) [41 U.S.C. 3901 note prec.] and sections 936 [49 U.S.C. 44801 note] and 1032 [138 Stat. 1406] of the Federal Aviation Administration [FAA] Reauthorization Act of 2024 (Public Law 118–63), including the duration thereof. If the Commission places communications equipment or services on the covered list pursuant to subsection (b)(1)(A) of this section, the appropriate national security agency shall provide the Commission with necessary information on whether enabling those uses is appropriate and how to enable those uses if necessary, and the Commission may promulgate implementing rules or policies accordingly.” “This Act may be cited as the ‘Secure Equipment Act of 2021’. Not later than 1 year after the date of the enactment of this Act [Nov. 11, 2021], the Commission shall adopt rules in the proceeding initiated in the Notice of Proposed Rulemaking in the matter of Protecting Against National Security Threats to the Communications Supply Chain through the Equipment Authorization Program (ET Docket No. 21–232; FCC 21–73; adopted June 17, 2021), in accordance with paragraph (2), to update the equipment authorization procedures of the Commission. In the rules adopted under paragraph (1), the Commission shall clarify that the Commission will no longer review or approve any application for equipment authorization for equipment that is on the list of covered communications equipment or services published by the Commission under section 2(a) of the Secure and Trusted Communications Networks Act of 2019 (47 U.S.C. 1601(a)). In the rules adopted under paragraph (1), the Commission may not provide for review or revocation of any equipment authorization granted before the date on which such rules are adopted on the basis of the equipment being on the list described in paragraph (2). examining the necessity of review or revocation of any equipment authorization on the basis of the equipment being on the list described in paragraph (2); or adopting rules providing for any such review or revocation. In this section, the term ‘Commission’ means the Federal Communications Commission.” The Commission shall place on the list published under subsection (a) any communications equipment or service, if and only if such equipment or service— is capable of— In taking action under subsection (b)(1), the Commission shall place on the list any communications equipment or service that poses an unacceptable risk to the national security of the United States or the security and safety of United States persons based solely on one or more of the following determinations: Not later than one year after the date of the enactment of this Act [Dec. 23, 2024], an appropriate national security agency shall determine if any of the following communications or video surveillance equipment or services pose an unacceptable risk to the national security of the United States or the security and safety of United States persons: With respect to an entity described in subparagraph (A) or (B) (referred to in this subparagraph as a ‘named entity’)— Not later than 30 days after an appropriate national security agency determines that any of the communications equipment or services specified in subsection (a)(1) present an unacceptable risk to the national security of the United States or the security and safety of United States persons— Not later than 30 days after an appropriate national security agency determines that any of the communications equipment or services specified in subsection (a)(1) do not present an unacceptable risk to the national security of the United States or the security and safety of United States persons— In this section: The term ‘appropriate congressional committees’ means— Nothing in this section may be construed to prohibit the Commission, other than in the rules adopted under paragraph (1), from— (Source: (Pub. L. 116–124, § 2, Mar. 12, 2020, 134 Stat. 158.))