Full Report
Following last week’s creation of a new Council for National Security, the U.S. Federal Communications Commission (FCC) has... The post US FCC launches probes into CCP-linked entities amid national security concerns appeared first on Industrial Cyber.
Analysis Summary
# Regulation/Compliance: FCC Investigation into CCP-Linked Entities
## Overview
The U.S. Federal Communications Commission (FCC) has launched an investigation targeting specific entities aligned with the Chinese Communist Party (CCP) regarding their ongoing U.S. operations. This action follows the prior placement of these entities' equipment and services on the FCC’s Covered List due to determinations that they pose unacceptable risks to U.S. national security. The investigation seeks to ascertain why these entities continue to operate in the U.S., potentially due to misinterpretation of restrictions imposed by the Covered List.
## Key Details
- Issuing Authority: U.S. Federal Communications Commission (FCC), in the context of the newly created Council for National Security.
- Effective Date: Investigation launched around March 22, 2025 (following the creation of the Council for National Security last week, as per the article).
- Jurisdiction: United States operations of targeted international entities.
- Status: Investigation launched/In Effect (Enforcement action pending outcomes).
## Requirements
### Mandatory Requirements
1. **Cease Prohibited Operations:** Entities on the Covered List must cease operations in the U.S. if those operations pose unacceptable national security risks as determined by the FCC.
2. **Cooperation with Investigation:** Targeted entities must comply with the FCC's investigation regarding their continued U.S. activities, particularly clarifying any ambiguity regarding the scope of prior prohibitions.
### Recommended Practices
1. **Review Covered List Impact:** For all organizations utilizing equipment or services previously placed on the FCC Covered List, a review must be conducted to ensure operational alignment with current FCC prohibitions and restrictions.
2. **National Security Vetting:** Organizations operating within sensitive or critical sectors should proactively vet all vendors and service providers against national security watchlists maintained by U.S. agencies.
## Affected Organizations
- Industries: Entities involved in telecommunications, technology supply chains, and potentially critical infrastructure sectors reliant on the named equipment/services.
- Organization Size: Not explicitly defined, but applicable to any entity whose services or equipment are on the Covered List or are linked to the CCP and operating in the U.S.
- Geographic Scope: United States operations of the targeted international companies.
## Compliance Timeline
- **Prior Action (Pre-March 2025):** Equipment/services of targeted entities placed on the FCC’s Covered List due to national security risk.
- **March 2025 (Approx.):** FCC launches new investigation into continued U.S. operations.
- **Final deadline:** Not specified; compliance hinges on the outcome of the current investigation and any subsequent compliance orders issued by the FCC.
## Implementation Guidance
### Assessment Phase
- **Coverage Status Mapping:** Determine if the organization directly uses equipment or services manufactured or provided by the entities named in the investigation (e.g., Huawei, ZTE, China Mobile International USA Inc., China Telecom (Americas), etc.).
- **Contractual Review:** Review existing contracts with these entities to identify jurisdictions or service types that might be deemed non-compliant.
### Implementation Phase
- **Operational Modification:** Develop and execute a plan to phase out or replace any equipment/services identified as posing an unacceptable national security risk, based on prior FCC rulings.
- **Clarification Submission:** If operating based on an interpretation that operations are *not* prohibited, prepare documentation to submit to the FCC demonstrating compliance justification during the investigation.
### Validation Phase
- **Legal Counsel Review:** Obtain sign-off from legal counsel confirming that all operational changes fully meet the requirements associated with the FCC Covered List restrictions.
## Technical Requirements
The article does not specify new technical requirements, but the underlying issue relates to the use of equipment and services from entities deemed to pose unacceptable national security risks (specifically mentioning Huawei, ZTE, Hikvision, Dahua, and specific China *telecom branches). Compliance requires the removal or restriction of these technologies where prohibited.
## Penalties & Enforcement
- **Fines:** Not explicitly detailed, but associated with prior FCC actions regarding the Covered List. Non-compliance with subsequent enforcement actions resulting from this investigation would likely incur significant civil penalties typical of FCC regulatory violations.
- **Other Consequences:** Potential revocation of operating licenses, prohibition from accessing U.S. networks, and civil/criminal liability depending on the scale and nature of the national security threat posed.
- **Enforcement:** The FCC is actively conducting probes/investigations, which suggests direct auditing and mandatory reporting requirements may be forthcoming.
## Related Standards
While the action is regulatory (FCC mandate), it strongly aligns with broader national security standards concerning supply chain risk management (e.g., requirements often seen in CISA guidance or sector-specific regulations involving critical infrastructure).
## Resources
- Official Documentation: FCC Public Comment/Order documents related to the initial placement of entities on the Covered List (Specific link only provided for Commissioner Carr’s statement: `https://docs.fcc.gov/public/attachments/DOC-410318A1.pdf`).
- Guidance Documents: Follow official FCC announcements regarding the scope and findings of this specific investigation.
- Tools: Vendor risk management platforms used to track companies on U.S. government exclusion lists.
## Practical Recommendations
1. **Immediate Due Diligence:** Organizations should immediately review internal hardware/software sourcing against the list of named entities (Huawei, ZTE, Hytera, Hikvision, Dahua, China Mobile International USA Inc., China Telecom (Americas), Pacifica Networks/ComNet (USA) LLC, and China Unicom (Americas) Operations).
2. **Monitor FCC Communications:** Critical infrastructure operators and telecom providers must closely track official FCC releases regarding this investigation to understand if scope creep or clarification is occurring regarding existing bans.
3. **Engage Security Leadership:** Integrate findings from this enforcement action into the overall supply chain risk management program, acknowledging that national security considerations now dictate vendor viability in certain sectors.