Cybersecurity Policy Report, Restrictions on Foreign Routers, UAS Eased by FCC to Allow Software Updates, (May 11, 2026)

By Paul Kirby

The FCC’s Office of Engineering and Technology has announced the extension until at least Jan. 1, 2029, of waivers announced in public notices released in January (CPR, Jan. 22) and March (CPR, March 25) of prohibitions on certain software and firmware changes to covered uncrewed aircraft systems (UAS), UAS critical components, and routers.

In a public notice in ET docket 21-232, OET also announced that the “waivers will be expanded to include a waiver on analogous Class II permissive changes involving software and firmware updates that mitigate harm to consumers. Under this waiver, all Uncrewed Aircraft Systems (UAS), UAS critical components, and routers produced in a foreign country that were authorized for use in the United States prior to these devices being added to the Covered List may at least until January 1, 2029, consistent with FCC rules, continue to receive software and firmware updates that mitigate harm to U.S. consumers. OET will, as soon as practicable, recommend to the full Commission considering codifying this waiver through a rulemaking.”

“We clarify that this waiver only applies to the prohibitions on Class I or Class II permissive changes for already-authorized devices. Grantees whose devices are subject to this waiver must still comply with other relevant FCC rules,” OET stressed. “These include, for example, the Class II permissive change requirements to provide complete information and tests results regarding such changes, to comply with minimum performance requirements of the applicable rules, not to market modified equipment prior to acknowledgement that the Class II permissive change is acceptable, and to certify as to whether the device is prohibited from receiving equipment authorization as covered equipment.”

News: FederalLegislation DataSecurity