Full Report
The Federal Communications Commission (FCC) added foreign-produced mobile robots and networked power inverters to its Covered List on July 28. The move generally prevents new models from receiving the equipment authorization required for import, marketing, or sale in the US. Previously authorized models can still be sold, and devices people already own are unaffected. Federal purchases and use
Analysis Summary
# Regulation/Compliance: FCC Expansion of the Covered List (Mobile Robots & Power Inverters)
## Overview
This regulation expands the Federal Communications Commission (FCC) "Covered List" under the Secure and Trusted Communications Networks Act. It restricts the equipment authorization—and therefore the import, sale, and marketing—of foreign-produced mobile robots and networked power inverters deemed to pose an unacceptable risk to national security. The action aims to mitigate vulnerabilities involving unauthorized remote access, data exfiltration, and potential critical infrastructure disruption.
## Key Details
- **Issuing Authority:** Federal Communications Commission (FCC)
- **Effective Date:** July 28, 2026
- **Jurisdiction:** United States (Importation/Marketing/Sale)
- **Status:** Final
## Requirements
### Mandatory Requirements
1. **Model Authorization Prohibition:** New models of "foreign-produced" mobile robots and networked power inverters cannot receive FCC equipment authorization.
2. **"Foreign-Produced" Verification:** Equipment must qualify as a "domestic end product" under the Buy American standard (48 CFR 25.101(a)) to avoid the "foreign-produced" designation.
3. **Firmware/Software Restrictions:** Covered equipment is generally excluded from certification procedures for Class I and Class II permissive changes, except for specific security patches.
### Recommended Practices
1. **Vulnerability Patching:** Organizations should immediately apply firmware/software updates for existing devices permitted under the current FCC waiver.
2. **Transparency in Procurement:** Supply chain audits should be conducted to identify equipment that fails the 48 CFR 25.101(a) domestic product test.
## Affected Organizations
- **Industries:** Telecommunications, Consumer Electronics, Solar/Renewable Energy (Power Inverters), Robotics, Logistics, and Smart Home technology.
- **Organization Size:** All sizes (Manufacturers, Importers, and Retailers).
- **Geographic Scope:** Vendors and distributors operating within or importing to the United States.
## Compliance Timeline
- **July 27, 2026:** National security determinations finalized.
- **July 28, 2026:** Regulations effective; new model authorizations blocked.
- **January 1, 2028:** Final deadline for manufacturers to apply for "Conditional Approval" through the DoW or DHS.
- **January 1, 2029:** Expiration of the automatic waiver for software/firmware patches (unless extended).
## Implementation Guidance
### Assessment Phase
- Inventory all robotic and power inverter models currently in the pipeline for US release.
- Determine the "domestic end product" status of components and final assembly based on 48 CFR 25.101(a).
- Identify existing fleet devices that may require long-term security maintenance.
### Implementation Phase
- Cease marketing and importation of new non-compliant "foreign-produced" models.
- Apply for Conditional Approval from the Department of War (for robots) or Department of Homeland Security (for inverters/robots) if applicable.
### Validation Phase
- Verify that no new model numbers for covered equipment categories have been submitted for FCC certification without a waiver or conditional approval.
- Audit firmware update logs to ensure they meet the specific "security and compatibility" criteria allowed by the waiver.
## Technical Requirements
- **Mobile Robots:** Defined as ground devices >4.4 lbs with environmental sensors, obstacle avoidance/navigation, and wired/wireless comms ≥200 kbps. Includes software, firmware, and AI/ML model weights.
- **Power Inverters:** Systems converting DC/AC with remote communication, control, sensing, or monitoring components.
- **Exclusions:** Fixed industrial arms (SCARA, gantry), medical devices (FDA-regulated), road vehicles, rail equipment, and uncrewed aircraft (UAVs).
## Penalties & Enforcement
- **Fines:** Significant civil penalties for importing or selling unauthorized electronic equipment.
- **Other Consequences:** Seizure of equipment by U.S. Customs and Border Protection; revocation of existing FCC certifications for related product lines.
- **Enforcement:** Enforced by the FCC’s Enforcement Bureau and the Office of Engineering and Technology.
## Related Standards
- **48 CFR 25.101(a):** The "Buy American" standard used to determine domestic vs. foreign production.
- **Secure and Trusted Communications Networks Act:** The primary statutory authority for the Covered List.
## Resources
- **Official Documentation:** [https://docs.fcc.gov/public/attachments/DOC-423682A1.pdf] (Fact Sheet)
- **Waiver Details:** [https://docs.fcc.gov/public/attachments/DA-26-789A1.pdf]
- **National Security Determination:** [https://docs.fcc.gov/public/attachments/DA-26-786A1.pdf]
## Practical Recommendations
- **Avoid "Grey Market" Imports:** Ensure all units are verified as "previously authorized" before purchase.
- **Infrastructure Hardening:** For existing networked inverters, move management interfaces behind VPNs or air-gapped networks to mitigate the risks named in the Forescout SUN:DOWN research.
- **Review CVEs:** Review CVE-2025-35027 and CVE-2025-2894 for specific vulnerabilities currently targeted by this regulation.