Closing the Component-Level Equipment Authorization Loophole
On September 11, 2026, the US Federal Communications Commission (FCC) issued a final rule in the Federal Register (91 FR 57798, Document 2026-18535) amending 47 CFR Parts 1 and 2 to eliminate a recognized component-level loophole in its equipment authorization program. Under the revised rules, the FCC prohibits granting equipment authorization to any device that incorporates a logic-bearing hardware component produced by an entity identified on the Commission’s Covered List, where the device itself would have been prohibited from authorization under 47 CFR § 2.903(a) had the Covered List entity produced the entire device.
The new prohibition applies to logic-bearing hardware components produced by entities subject to producer/provider-based Covered List determinations. It does not apply to production-location-based Covered List entries unless the producing entity is independently identified on the Covered List. Previously, prohibitions primarily targeted finished devices produced or branded directly by Covered List entities. Under the updated regulatory framework, even when a device is manufactured and marketed by an independent entity, embedding prohibited logic components can disqualify the entire finished product from receiving FCC equipment certification when the rule’s device-level conditions are met.
Definition of Logic-Bearing Hardware Components
The FCC established a functional standard to define regulated components:
- Regulated scope: Any device, system, module, sub-assembly, integrated circuit (IC), or physical component that generates and uses timing signals or pulses at a rate exceeding 9,000 pulses per second (9 kHz) using digital techniques, or that generates and utilizes radiofrequency energy to execute data processing functions, including computation, storage, or transmission. This encompasses microcontrollers (MCUs), system-on-chips (SoCs), RF transceivers, and cellular/Wi-Fi communication modules.
- Passive and mechanical exclusions: Purely mechanical or passive components—such as device enclosures, structural fasteners, resistors, passive wiring, and plain battery cells—are expressly excluded from the prohibition.
- Deferred expansions: The Commission declined at this stage to extend the prohibition to standalone software, firmware, or components produced by non-Covered List foreign entities.
Implementation Timeline and Prospective Application
The final rule outlines specific transitional boundaries:
- Prospective enforcement from October 13, 2026: The rule takes effect 30 days following Federal Register publication. The prohibition applies strictly prospectively to new equipment authorization applications filed on or after October 13, 2026.
- Existing authorizations preserved: Previously authorized equipment remains valid and is not retroactively revoked. Applications pending as of the effective date are exempt unless subsequently amended to introduce, replace, or alter a logic-bearing hardware component.
- Online point-of-sale FCC ID disclosure: Clarifying marketing provisions under 47 CFR § 2.803, the rule requires affected online marketplaces to display a device’s valid FCC ID at the online point of sale. Compliance begins March 1, 2027 for marketplaces with physical access to or title over the device, and June 1, 2027 for marketplaces relying on third-party seller certifications; limited exceptions apply to certain pre-effective-date listings, non-high-volume third-party sellers, and used devices.
Practical Checks for Medical Device Manufacturers
Medical device manufacturers producing connected clinical systems (such as patient monitors, imaging carts, wearable physiological sensors, and connected infusion pumps) destined for the North American market should evaluate the following compliance measures:
- Screen BOMs for new FCC submissions: Audit bills of materials for devices currently under development or scheduled for upcoming FCC authorization, and assess whether the finished device would itself be prohibited under 47 CFR § 2.903(a), including whether any wireless modules, microcontrollers, or logic ICs originate from entities subject to producer/provider-based Covered List determinations.
- Assess hardware revision plans: For existing commercial product lines, identify upcoming hardware redesigns or permissive changes that could trigger a component re-evaluation under the prospective rule.
- Align e-commerce and digital product listings: Verify that North American commercial product landing pages and online distribution channels prominently feature the required FCC IDs, taking account of the applicable marketplace compliance date and exceptions.
Sources
- Primary official sourceProtecting Against National Security Threats to the Communications Supply Chain Through the Equipment Authorization Program (opens in a new tab)Federal Communications Commission