The Federal Communications Commission has revised its timeline for restricting firmware updates on certain foreign-made devices, offering a temporary reprieve to consumers. The original deadline, set for March 1, 2027, would have blocked firmware updates for drones and routers deemed a national security risk. The FCC’s Office of Engineering and Technology announced the change on May 8, 2026.
Scope of the Amendment
Under the revised order, manufacturers of banned devices may continue to release critical firmware updates until 2029. This extension applies specifically to devices already on the FCC’s prohibited list, which includes products from Chinese firms such as Huawei and DJI. The updates cover security patches and essential bug fixes but do not permit new features or hardware changes.
The decision effectively provides a two-year lifeline for owners of these devices, who would otherwise face unpatched vulnerabilities after the original cutoff. The FCC emphasized that the extension does not signal a reversal of its broader ban on these products.
Background and Rationale
The FCC’s original ban, established under the Secure and Trusted Communications Networks Act, aimed to mitigate risks from foreign surveillance and supply chain interference. Devices on the prohibited list cannot be imported or sold in the United States, but existing consumer-owned units were allowed to receive updates until the 2027 deadline.
Industry observers noted that the 2027 deadline created practical challenges for consumers relying on these devices for critical infrastructure, such as home networking or aerial monitoring. The extension to 2029 gives regulators more time to evaluate alternative mitigation strategies without forcing immediate device replacement.
The Office of Engineering and Technology clarified that the amendment applies only to firmware updates deemed necessary for device security or operational integrity. Cosmetic or performance-enhancing updates remain prohibited.
Impact on Consumers and the Secondary Market
Owners of affected drones and routers now have a clearer timeline for planning equipment upgrades. The extension does not affect the status of devices already sold or in use, but manufacturers must apply for individual waivers to issue updates. Companies like DJI have already sought such waivers for specific product lines.
The secondary market for these devices may see continued activity, as buyers now have assurance that security support will last at least three more years. However, the FCC has warned that devices sold after the original ban date remain subject to seizure if imported illegally.
Broader Regulatory Context
The FCC’s action aligns with ongoing efforts by the Department of Defense and other federal agencies to phase out Chinese-made telecommunications equipment from sensitive networks. While the extension offers temporary relief for consumers, federal procurement rules already bar the use of banned devices in government systems.
Private businesses using these devices for internal operations should note that the FCC’s order does not override contractual or insurance requirements. Companies may still need to replace equipment to comply with industry security standards or liability policies by 2029.
Looking ahead, the FCC is expected to issue further guidance on the waiver process and potential exceptions for medical or industrial devices that rely on firmware from prohibited vendors. The agency has also indicated that it will monitor the effectiveness of the extension through regular compliance audits.
Consumers with affected devices should verify their eligibility for updates through manufacturer portals and ensure that any waivers obtained are tied to specific device serial numbers. The FCC has not signaled any intent to extend the deadline beyond 2029 at this time.
