Router Covered List

The FCC’s Public Safety and Homeland Security Bureau adds routers produced in a foreign country to the FCC Covered List, subject to Conditional Approvals from the Department of War (DoW) or Department of Homeland Security (DHS).

What it does The Public Notice adopts a National Security Determination received by the FCC on March 20, 2026, finding that foreign-produced routers pose unacceptable risks involving supply-chain vulnerabilities and severe cybersecurity threats. The Covered List entry is: “Routers produced in a foreign country, except routers which have been granted a Conditional Approval by DoW or DHS.” The notice explains that production generally includes major stages such as manufacturing, assembly, design, and development. It also provides submission guidance for Conditional Approvals, which may last up to 18 months and require corporate, supply-chain, and U.S. manufacturing information.

Who it affects The action applies regardless of the producer’s nationality to entities producing routers abroad, equipment-authorization applicants, test laboratories, and telecommunications equipment manufacturers. Covered equipment may not receive FCC equipment authorization, and applicants must certify that equipment is not prohibited as covered equipment.

Definition of router "Routers: For the purpose of this determination, the term “Routers” is defined by [NIST] Internal Report 8425A to include consumer-grade networking devices that are primarily intended for residential use and can be installed by the customer. Routers forward data packets, most commonly Internet Protocol (IP) packets, between networked systems."

Why it matters The action extends the Covered List from identified entities and other equipment categories to a place-of-production category. It is intended to address risks associated with compromised routers, including network surveillance, data exfiltration, botnets, unauthorized access, and disruption of critical infrastructure, while providing a DoW/DHS exemption pathway.

Key dates and numbers

• March 20, 2026: National Security Determination received and Conditional Approval guidance dated.
• March 23, 2026: Public Notice released and router category included on the Covered List.
• Conditional Approvals may be granted for up to 18 months.
• Relevant authorities include 47 U.S.C. § 1601 and 47 CFR §§ 1.50002, 1.50003, 2.903, and 2.911.