FCC Votes to End Recognition of Chinese Device Testing Labs by 2028
What Happened — The U.S. Federal Communications Commission (FCC) voted unanimously to stop recognizing electronics test laboratories located in China and other non‑reciprocal jurisdictions for FCC equipment certification. Device makers now have a two‑year window to shift testing to U.S. labs or labs in countries that have reciprocal agreements with the United States. Today, 82 % of FCC‑required testing is performed in China; the new rule aims to bring that share down dramatically. FCC Chair Brendan Carr warned that foreign labs can obtain detailed product designs months before market launch, creating a supply‑chain exposure that could be leveraged for espionage, sabotage, or theft of trade secrets. The rule follows earlier “bad labs” actions that removed 32 foreign‑controlled labs after a 2025 review.
Why It Matters for Trust & Control Assurance — The decision spotlights the control objective of third‑party risk management: continuously vetting, monitoring, and evidencing the security posture of external service providers.
Who Is Affected — Telecommunications equipment manufacturers, consumer‑electronics OEMs, and any organization that relies on FCC‑approved testing labs.
Recommended Actions —
- Update your vendor‑risk inventory to flag any testing labs that are not U.S.‑based or in a reciprocal country.
- Collect and archive accreditation certificates and test reports as part of your audit evidence.
- Incorporate lab‑approval status into continuous‑monitoring dashboards to demonstrate supply‑chain control for regulators and auditors.
Technical Notes — This is a regulatory policy change, not a software flaw. No CVEs are involved. The risk vector is reliance on third‑party testing facilities in jurisdictions without reciprocal oversight. Source: DataBreachToday