FCC blocks video devices under first component-level enforcement of HiSilicon chip ban

FCC enforces first component-level bans on devices powered by HiSilicon surveillance silicon

The United States Federal Communications Commission has issued its first equipment authorization denials under newly enacted component-level rules, blocking a consumer automotive dashboard camera and a wireless video transmitter from commercial import, marketing, and sale within the United States. The regulatory enforcement action marks a historic departure from traditional brand-level blacklists, targeting the underlying semiconductor architecture embedded within finished electronic hardware regardless of the brand name printed on the exterior casing.

Technical teardown examinations conducted by the FCC Office of Engineering and Technology established that both unauthorized devices incorporated the Hi3516CV610 Ultra-HD Smart Vision System-on-Chip (SoC). The processor is designed and manufactured by HiSilicon Technologies, the semiconductor subsidiary of Huawei Technologies, which has been designated on the FCC Covered List of national security threats since March 2021. The Hi3516CV610 is an artificial intelligence surveillance processor featuring an integrated Neural Processing Unit (NPU) engineered for autonomous facial detection, human tracking, and optical motion classification.

The enforcement action represents the first operational application of the FCC Third Report and Order (FCC 26-50) under ET Docket No. 21-232, which took full legal effect on 13 October 2026. By prohibiting the authorization of any electronic equipment containing logic-bearing components from Covered List entities, the agency has eliminated a multi-year regulatory loophole that permitted original design manufacturers (ODMs) to purchase blacklisted Chinese silicon, solder it onto generic circuit boards, and distribute finished consumer gadgets across Western e-commerce platforms under unvetted third-party badges.

Lifecycle of the FCC component-level enforcement and port interdiction process

Zoom

Quantitative enforcement timeline, regulatory duration, and silicon telemetry

The regulatory timeline leading to the first component-level enforcement highlights the prolonged legal progression required to close supply chain circumvention routes. Exactly 1,797 days (4.92 years, derived) elapsed between the passage of the Secure Equipment Act of 2021 (Public Law 117-55) on 11 November 2021 and the enactment date of the component-level rule on 13 October 2026. Furthermore, 1,418 days (3.88 years, derived) passed following the initial finished equipment ban under FCC Report and Order 22-84 on 25 November 2022 before federal regulators expanded their scope to logic-bearing silicon.

Following the enactment of the Third Report and Order on 13 October 2026, federal engineers took exactly 11 days (derived) to execute laboratory teardown audits and issue formal authorization denials for the two affected video devices on 24 October 2026.

Table 1: Quantitative timeline, regulatory metrics, and silicon technical parameters for the FCC component-level ban.

Enforcement Parameter	Quantified Value	Regulatory and Technical Context
Secure Equipment Act Enactment	11 November 2021	US Congressional mandate establishing supply chain security requirements
Finished Goods Ban Order	25 November 2022	FCC 22-84 prohibiting equipment authorization for named brand entities
Component Rule In Effect	13 October 2026	Third Report and Order (FCC 26-50) extending bans to logic silicon
First Enforcement Denial	24 October 2026	Denial of authorization for automotive dashcam and wireless transmitter
Act to Component Rule Duration	1,797 Days (4.92 Years)	Derived duration to close third-party white-label circumvention
Finished Ban to Component Duration	1,418 Days (3.88 Years)	Derived timeframe between brand-level and component-level restrictions
Rule Effect to First Denial	11 Days Elapsed	Derived rapid operational execution following regulatory activation
Target Silicon System-on-Chip	HiSilicon Hi3516CV610	UHD Smart Vision processor with on-die neural acceleration
Host CPU Architecture	Dual ARM Cortex-A7	950 MHz clock speed, 32KB/32KB L1 cache, 128KB shared L2 cache
Neural Compute Performance	1.0 TOPS INT8	1,000,000,000,000 operations per second on-die AI tensor capacity
Maximum Video Throughput	6MP @ 30 frames/sec	180 million raw pixels per second processed through camera ISP
Silicon Package Footprint	9.0 mm x 9.0 mm QFN-88	81.0 mm^2 surface area integrating processor and DDR3 memory
UK PSTI Mandatory Enforcement	29 April 2024	908 days elapsed (derived) since UK consumer IoT security standards

Silicon architecture and hardware autopsy of the HiSilicon Hi3516CV610 SoC

To comprehend why federal regulators expanded national security restrictions to embedded semiconductor components, engineers must examine the internal architectural topology of modern smart vision silicon. The HiSilicon Hi3516CV610 is not a passive camera interface or static image sensor; it is a fully integrated, Turing-complete edge computing platform capable of executing independent operating systems and sophisticated neural network models.

At the compute foundation, the SoC integrates a dual-core ARM Cortex-A7 multiprocessing cluster operating at clock frequencies up to 950 MHz. Each core contains 32 kilobytes of instruction cache, 32 kilobytes of data cache, and a shared 128-kilobyte secondary cache, supplemented by ARM Neon Single Instruction Multiple Data (SIMD) acceleration and an IEEE 754 floating-point unit (VFPv4). This primary compute cluster runs a full embedded Linux operating system (typically based on Linux kernel 4.9 or 5.10 within the HiSilicon software development kit), hosting network daemons, web servers, and video streaming endpoints.

The definitive component of the Hi3516CV610 is its proprietary Neural Processing Unit (NPU), delivering 1.0 TOPS (one trillion integer operations per second) of dedicated tensor computing capacity. Utilising the HiSilicon Neural Network Inference Engine (NNIE) and RuyiStudio toolchain, the NPU executes quantized convolutional neural networks and Transformer architectures directly on video streams. It performs real-time facial detection, pedestrian silhouette isolation, vehicle classification, and license plate recognition without placing computational overhead on the host CPU.

The image signal processor (ISP), branded under HiSilicon as the Yingyue vision engine, provides advanced dual-exposure wide dynamic range (WDR), three-dimensional noise reduction (3DNR), lens distortion correction (LDC), and low-light night enhancement. The ISP interfaces with camera image sensors via a four-lane MIPI CSI-2 bus, processing image data up to 6 megapixels at 30 frames per second (yielding a continuous raw throughput of 180 million pixels per second) or 4K resolution at 20 frames per second. Video compression is handled by on-die multi-stream hardware encoders supporting H.265 (HEVC Main Profile) and H.264 codecs with variable and constant bit rate controls.

External connectivity is governed by an extensive input-output matrix, including a 10/100 megabit RMII Ethernet media access controller, an SDIO 3.0 interface supporting Wi-Fi chipsets, a USB 2.0 Host/Device controller, and dual-microphone audio codecs. Contained within a compact 88-pin quad-flat no-leads (QFN-88) plastic package measuring just 9.0 by 9.0 millimetres (an area of 81.0 square millimetres), the chip frequently incorporates co-packaged DDR3 SDRAM, allowing original design manufacturers to construct complete networked surveillance appliances with minimal peripheral circuitry.

Architectural breakdown of on-die processor, NPU, ISP, and I/O subsystems

Zoom

Closing the white-label ODM loophole under Third Report and Order FCC 26-50

The emergence of component-level restrictions represents the direct culmination of an enforcement cat-and-mouse game between Western telecommunications regulators and overseas equipment manufacturers. When the FCC adopted its initial prohibition in November 2022 (FCC 22-84), the regulatory text prohibited equipment authorization under Part 2, Subpart J for equipment produced by entities on the Covered List. In practice, this restriction was enforced primarily against corporate brand entities, such as Huawei Technologies, ZTE Corporation, Hangzhou Hikvision, and Dahua Technology.

Overseas manufacturers quickly identified a glaring structural loophole in this brand-centric regime. Original design manufacturers (ODMs) based in Shenzhen and regional manufacturing hubs began purchasing bare HiSilicon SoCs directly from domestic semiconductor distributors or through newly established corporate affiliates such as Shanghai HiVision Microelectronics. These ODMs soldered the chips onto generic printed circuit boards, housed them in unbranded plastic enclosures, and affixed arbitrary consumer trademarks.

When submitting these devices to Telecommunications Certification Bodies (TCBs) for mandatory FCC Part 15 equipment authorization, the applicants declared an unaffiliated corporate entity as the manufacturer. Because neither the applicant nor the finished product badge matched an entity on the Covered List, automated regulatory filings proceeded without impediment, granting FCC ID numbers that permitted legal sale on major e-commerce platforms including Amazon, eBay, and Temu.

The FCC Third Report and Order (FCC 26-50) fundamentally dismantled this circumvention structure by establishing an explicit definition of 'covered logic-bearing components'. Under amended sections 47 C.F.R. § 2.903 and § 2.907, any equipment that incorporates microprocessors, systems-on-chip, microcontrollers, neural accelerators, basebands, or RF front-ends manufactured or designed by a Covered List entity is automatically denied equipment certification, regardless of whether the final product assembler is an unaffiliated third party.

Crucially, the regulatory standard distinguishes between passive electronic components and logic-bearing silicon. A generic capacitor, resistor, power inductor, or printed circuit board fiberglass layer does not trigger a ban because it lacks programmable execution capabilities. Conversely, any semiconductor capable of executing stored firmware, manipulating network packets, running algorithmic models, or controlling sensor telemetry is classified as a logic-bearing asset subject to absolute supply chain prohibition.

Epistemic audit: Stated regulatory facts versus unstated investigative details

A rigorous technical analysis requires establishing clear boundaries between facts verified on the official public record and operational specifics that regulatory authorities have deliberately withheld. The FCC public disclosure confirms the silicon identity and regulatory rationale while omitting specific commercial identifiers.

Table 2: Epistemic evaluation of the FCC component-level enforcement action, contrasting verified public statements against withheld operational data.

Investigative Parameter	Stated Public Record	Unstated / Negative Scope
Target Silicon Identity	HiSilicon Hi3516CV610 SoC explicitly identified	Silicon die revision and foundry fabrication node not stated
Product Categories	Automotive dashboard camera and wireless video link	Specific consumer retail brand names and trade dress withheld
Regulatory Instrument	Denial of Equipment Authorization under FCC 26-50	Specific FCC ID application tracking numbers not disclosed
Laboratory Methodology	Physical teardown audits by FCC OET laboratories	Specific decapping or bus-probing laboratory tools not specified
Commercial Scope	Devices barred from legal import, marketing, and sale	Total volume of units already distributed in the US not stated
Retail Remediation	Prohibition applies to pending and future authorizations	Whether retroactive recalls of sold inventory will occur not stated
Firmware Origin	SoC confirmed running smart-vision NPU capabilities	Whether firmware ran stock HiSilicon SDK or custom ODM fork not stated
Interdiction Coordination	CBP customs coordination authorized under Secure Act	Number of physical shipments detained at ports of entry not stated

UK regulatory comparisons: NSIA, Procurement Act 2023, and the PSTI Act blind spot

For United Kingdom security practitioners and public sector procurement bodies, the FCC component-level enforcement underscores a critical divergence between American and British regulatory frameworks. The UK government has taken aggressive steps to remove Chinese physical surveillance equipment from central government estates and critical national infrastructure (CNI) sites. Following Cabinet Office directives in June 2023 and statutory powers under the Procurement Act 2023, government departments were mandated to timeline the physical removal of surveillance hardware manufactured by companies subject to the National Intelligence Law of the People's Republic of China by April 2025.

However, the UK regulatory perimeter remains overwhelmingly focused on finished brand names (specifically Hikvision and Dahua) rather than component-level semiconductor provenance. Under the UK National Cyber Security Centre (NCSC) Supply Chain Security Principles, Principle 5 mandates that organisations must 'understand the supply chain to a degree proportionate to the risk'. Furthermore, Principle 7 requires visibility into 'sub-contractors and third parties' across the hardware lifecycle.

Despite these published principles, the statutory framework governing consumer and enterprise hardware sold in the UK contains a significant blind spot. The Product Security and Telecommunications Infrastructure (PSTI) Act 2022, which came into mandatory enforcement on 29 April 2024 (908 days elapsed, derived), establishes baseline technical security duties for connectable consumer products. These requirements mandate the elimination of default factory passwords, the publication of vulnerability disclosure policies, and minimum security update lifespans.

Crucially, the PSTI Act contains zero restrictions regarding semiconductor nationality, silicon design lineage, or foreign state-aligned processor architecture. Consequently, an unbranded automotive dashcam or commercial video transmitter powered by the HiSilicon Hi3516CV610 can fully comply with the UK PSTI Act by implementing a non-default setup password and publishing a security email address, remaining entirely legal for commercial sale across the United Kingdom while being federally prohibited as potential spyware in the United States.

Defender and hardware importer action checklist: Silicon lineage auditing

Enterprise hardware architects, corporate vehicle fleet administrators, and electronics distributors must execute a systematic hardware integrity review to eliminate prohibited silicon from their operating environments.

1. Mandate Audited Bills of Materials (BOMs): Require all hardware manufacturers, original equipment manufacturers (OEMs), and white-label distributors to provide full, verifiable component-level BOMs identifying the semiconductor foundry, design entity, and exact part number for all microprocessors, SoCs, and NPUs before procurement approval.

2. Cross-Reference Silicon Design Entities Against Sanctions Lists: Verify that integrated circuits within imported devices do not originate from entities identified on the FCC Covered List, the US Department of Commerce Entity List, or affiliated subsidiaries (specifically inspecting for HiSilicon Technologies and Shanghai HiVision Microelectronics).

3. Audit Commercial Vehicle Fleet Telematics: Conduct physical hardware and firmware teardown audits across enterprise dashcams, telematics hubs, and rear-view camera systems installed in commercial vehicles, inspecting printed circuit board markings to identify hidden HiSilicon vision processors.

4. Enforce Zero-Trust Network Segmentation for Video Equipment: Isolate all networked video cameras, digital video recorders (DVRs), and streaming transmitters on dedicated non-routable virtual local area networks (VLANs), blocking direct egress to the public internet and inspecting all outbound RTP, RTSP, and DNS traffic.

5. Verify Retail Point-of-Sale Compliance: E-commerce platforms and retail distributors operating in the US market must ensure all connectable video devices display a verified, valid FCC ID at the digital point of sale in compliance with the Third Report and Order.

The exposing question

If a sophisticated surveillance System-on-Chip can be concealed within an unbranded consumer dashcam simply by soldering it to an anonymous green printed circuit board, how can enterprise procurement teams or border customs inspectors realistically identify blacklisted silicon across millions of generic Internet of Things devices without performing destructive physical decapping and microscopic electron microscope audits on every container arriving at our ports?

Key facts

• Regulatory Action: The US Federal Communications Commission has issued its first equipment authorization denials under new component-level rules, blocking an automotive dashcam and wireless video transmitter.
• Governing Instrument: Third Report and Order (FCC 26-50) under ET Docket No. 21-232, in full legal effect since 13 October 2026.
• Prohibited Silicon: HiSilicon Hi3516CV610 Ultra-HD Smart Vision System-on-Chip (SoC) designed by Huawei's semiconductor subsidiary.
• Processor Architecture: Dual-core ARM Cortex-A7 MP2 @ 950 MHz running embedded Linux kernel and proprietary vision daemons.
• Neural Engine: 1.0 TOPS INT8 Neural Processing Unit (NPU) executing real-time facial detection, pedestrian tracking, and license plate recognition.
• Image Pipeline: 6MP camera ISP processing up to 180 million raw pixels per second with multi-stream H.265/H.264 video compression.
• Regulatory Duration: 1,797 days (4.92 years, derived) elapsed between the Secure Equipment Act of 2021 and component rule enactment; 11 days (derived) elapsed from rule enactment to first enforcement.
• Loophole Eliminated: Third-party original design manufacturers (ODMs) can no longer bypass national security bans by packaging blacklisted silicon under neutral white-label brand badges.
• Legal Impact: Affected devices cannot be legally certified, marketed, imported, or commercially sold within the United States.
• UK Regulatory Divergence: While the UK bans Chinese surveillance brands from sensitive government sites, the UK PSTI Act 2022 contains no component-level silicon restrictions for consumer hardware.