Cybersecurity Policy Report, Views Sought by FCC on Drone Security, (Jun 17, 2026)

By Lynn Stanton

The FCC’s Office of Engineering and Technology is seeking comment on a recent ex parte filing submitted by SZ DJI Technology Co. Ltd. in the agency’s proceeding on DJI’s petition to reconsider the addition of its communications and video surveillance equipment and services to the FCC’s “covered list” of equipment and services deemed to be unacceptable risks to the national security of the U.S.

The FCC’s Public Safety and Homeland Security Bureau announced the addition of foreign-made uncrewed aircraft systems (UAS), or drones, and UAS critical components, as well as all communications and video surveillance equipment and services produced by DJI, to the covered list late last year in a public notice in WC docket 18-89, ET docket 21-323, and EA docket 21-233 (CPR, Jan. 5). DJI submitted a petition for reconsideration of that action in January (CPR, Jan. 23).

Last month, DJI met with FCC staff to discuss a security assessment report on two of the company’s drone systems and their controllers and applications, which was prepared by OnDefend.

“OnDefend is a trusted, independent company that tests technologies and their supply chains, validating security, safety, and the protection of U.S. citizen data. OnDefend performed a thorough technical evaluation of two DJI drone systems, the Air 3S and Matrice 4E, along with their corresponding controllers and applications (collectively, ‘DJI Products’). During the five-month window of testing, OnDefend’s assessment of the DJI Products ‘identified no evidence of hidden backdoors, no data transmissions outside the United States, and no viable pathways for hijacking or weaponization,’” DJI said in its June 9 filing describing the May 19 meeting.

“DJI believed this ex parte filing was not necessary for compliance with Commission rules, but agreed to file the report at the request of Commission staff,” it added.

In the report, OnDefend said, “No critical or high-risk findings were observed. Ten low-risk findings and thirteen observations were identified, consistent with industry norms for complex mobile and embedded systems. They were primarily related to application security configurations, session handling, and wireless hardening. None presented a realistic risk to safe drone operation or to widespread exposure of confidential information.”

In a public notice, the Office of Engineering and Technology said, “To provide parties with sufficient time to comment on the DJI Security Assessment, we offer an opportunity for public comment on DJI’s filing by August 28, 2026. All filings should reference docket number ET 26-22.”

News: FederalLegislation DataSecurity