White House Expands Dahua Hikvision Blacklist To Federal Funding [Final Rule Reverses]
The White House is expanding the NDAA to blacklist anyone who "uses" banned Hikvision/Dahua/Huawei HiSilicon equipment from participating in any federally-funded contracts, regardless of whether the contract involves banned equipment and regardless of the entity spending the federal funds, IPVM has verified in a new government disclosure.
UPDATE 8/14: the final rule has now been published and it does not expand the Hikvision/Dahua blacklist, in a reversal from what the White House stated yesterday and proposed back in January. What the new rule does do is prohibit federal funds from being spent on covered services and equipment, but not entities that "use" Hikuawei gear. For more info and examples read out latest post: Final Rule Does Not Expand Hikvision Dahua Blacklist
This means any company that "uses" Hikvision equipment or services cannot participate in any federally-funded contract, even a FEMA grant for a church to buy shovels. Additionally, any "video surveillance costs associated" with this new rule are "unallowable", meaning the federal government will not cover anyone's compliance costs.
This expansion of the blacklist clause, first proposed in January 2020, is representative of the Trump administration's tough and expansive implementation of the NDAA ban. In this post, we examine this development and discuss examples of its impacts.
Background: * *********** ********* ** *** ********* ******
*** ********* ******** ** ******* ******* *** ******* **** ****** *****. *** ***** is*** ****-********* '********* ******', ***** *********** ********** ************ ******** **** ********* **** *** company **** "****" ******* *********; **** isSection ***(*)(*)(*).
*** ***** **** ****** **** ****** is ************** ** **** *** ***** *******Section ***(*)(*), which states the government "may not obligate or expend loan or grant funds" to obtain covered equipment:
**** *** ******** ** ******* ******** *** ***** ***** *********** *** ********* * *** ****,2 *** ***.***, that would implement 889(b)(1) by prohibiting "Federal award recipients from using government funds" to contract with banned equipment users, regardless of whether the contract involves banned equipment or not:
**** *** **** ** * *********** expansion ** (*)(*) ******* **** **** **** ********* "******** * ***** **************" **** "significant *************'".
White ***** ********* ***** ******* **** ***.***
*****, *** ***** *****'* ****** ** Management *** *************** ** *** ******* ********** *** "******" **** *** *******. The ******** ** ******* *** **** as *** ******** **** **** *******, with ** **** ** ***********, ******** "even" *** ********* ********** ********* ** covered *********/********:
** ** ***** ****, **** *** ***.*** ********** ** *** *********. ** **** update **** ** ** ********.
Impact ********
**** **** *** **** ** *****, as ** *****, **** ********** *** following ******** ***** **** ***** *** prohibition:
- ** ********** **** **** ********* ******* can ** ****** *********** ** * local ****** ********'* ******** ******* ** it ** * *********-****** ********** ** Education ********
- * ************ ******* **** **** ***** equipment ****** *** ** * *** rec ****** ***** ***** ** **** of * **** ********
- * ********** ******** ******* **** **** cameras **** ****** ********* ***** ****** participate ** * ***** ******'* ********** of ******** *******-****** ******** ********
*** *** ****'* ******** **** *** mean ******* ********* ***** ****** **** with ********* ****** ************ (**** ************) in *** ***; ******, *** **** prohibits ************* ** *********-***************************.
*******, **** ** **** *** ************* *** *** ***************** **** ** ***** ** "***" of ******* *********, *** *******, ******* only ******* ****** ********* ******; *******, "maintenance" ** ****** ***** **** ***** as * ******* *******.
Related ***** ************ ***** "***********"
*** ***** ***** **** ** *** updated *********** ** "******* ******* **** the ****************** *** ***** ************ *****" associated **** ***.*** "*** ***********":
**** ***** * ********* **** ****** to ******* ** *********-****** ******** *** only ****** ** ** *** ** also ********** **** ********* ******* ***** to ******* *** ****** *********.
*** "***********" ******* ******* **** ** this ********** ***** ***** ********* ******, Section ***(*)(*).***** *** ****, *** ***** ********* ********** ** the *** (*** **** ********* ****** and *** *********** ***) ** ***** for ***** "********** ********* *** ***** affected ******** ** ********** **** ******* communications ********* *** ********".
Beyond ** ********** *************
**** **** **** ****** *** ************* of ** ********** **********, **** ******* undermining *** ******** *** ********** ** the ****** ********* ** *** **. The ******* *** ** ********** ********** such **** *** ********** *** **** difficult ** **** ****** *** ***** and ********* ** ** ******** ** the ****** ******.
***** **** ** ************* *** *** US ***** ************ ********, ** ******* a ************** ****** *** *** ********* *** **** ****** **** ********** and ******* *** *** *****'* ***** surveillance *************.
Impact *****: ******** *** ******* ********
***** *** **** *** ****** **** filled **** *********** *** *******, *** example *****, ** *****, **** *** ******** ** *** opposite. *** ** ********** *** *********** and ******** *** ************ ** ***** products. ****** ***** ** * ***** reversal, *** ************** *** *********** ** this ****** ***** *** **** ******* decrease ***** ***** *********' ** ******** but ******** ***** ******* ****** ** the **, **** **** *** *** has **** ** ******* *********.
***. ***** ** ** ************ *********** to *** ****** ** *** **** ban. *** ********* **** ** ***** recent *******:
** **** ** ****** ** *** United ******* ***** * ******** *** of ***** **** *********' ********* ** used. ** ** **** ** **** that **** *************? ***, ** **** office ** **** ** *** **** entity, **** ****** ** **** ** the ***** **********, '***' ** **** office ** ********** '***' **** *** need ** ********* *****.
**** ******* **** ** ***** ** no ****** *** ** *** **** equipment ** *** ******* *******:
**** ***** ********** ***** *** ********** is ******* ** * ******* **** as ********, ***** *** ******** ******** provider, *** ********** ** ******** **** covered ******* *** ***** **************? ****, if **** ********** **** **** ******** infrastructure, ****'* *** *** ** ******* telecom. *** ** *** **** ***** it, ** **** ********** ******* ***** up **** ***********, *** **** ** represent ** *** ********** **** *** use ******* *******
** *****'* **** ** ** ********. In *** ** ** ***** ** well **** ********** ** ****** ******** access **** ** ********** *** ** use ****** ************** (*.*. **** *** connections ********* ** *** ***** ** exchange ** ****** ********* ****** *****, 3 *** ** *** * ****** operators *** ****** ** ***** *********, 10% ** *********** *** ******).
****** **** ** *************.
******:*** ***** **** *** **** ********* and ** **** *** ****** *** Hikvision/Dahua *********:***** **** **** *** ****** ********* Dahua *********
**** *** *** ********** ** ******** ******* ***** **** being ***** ** ******* ******** *** equipment. *** *******, * ****** ****** spend * *** ***** ** ****** HiSilicon-based *******. *******, ** *** ***** the ***** ** **** *********-******* **** an ********** **** "****" ********* ******* elsewhere.
*** **** ******** *********, ***** **** ***** ****** ********* ******* the **, *** **** *** ** prohibited **** *********-****** ********* *** *** cannot ******* ****** ********* *** ***** contracts.
**** ** **** **** ******** ******** ********* ******, *** ***** **** ************ **** ***** a ***** ********** *** ****** ******* agency ********* (*.*. *** ****) - regardless ** *** ************ ******** ** the ****** *********.
****, ** ** ********* * ********* camera * **** ** *** ***. We ************ *** ** ** *** NVR ** *** ******* *** **** sure *** ****** ** *******. ** we **** ** ** **** *** replace **** ****** ** ** **** to ** ******** **** *******?
****, **** ****** *** ** *** home ** *** *** ** * large *******. **** **** ****** ***** problems ** **** ******* ***** ** get ******* *********?
** ******* ** *** ******** *** system *** *** ***** "***********" ** a ****** **** ***** ***** *** are * **** ** ****** *********/******** if *** ** *** ******* *** camera.
** * **** ** ****** *********/********, you ***'* ** **** ** *********** in *** ********* ****** ******** ** federal ****** ********.
*********** *** **** ***** ** **** to **** **** *** ****** ** long ** **'* *** * ******* contract *** ****** ** ************.
**** **** *****, ******** **** *** me ****!
*** ****** ******** *** * ********** in **** **** ** **** ************** of *** ****. ** ** ********* than **** ****** ** *** *** and ******** ********* *** **** **** interpreting ****, ** ****.
** ** ********* **** **** ****** in *** ***
#**, *** *** ***** **** ******** people ** *** *** *** *** citations ** **** **********?
*******'* ***** ***** *********** ****** *** *** ********* ** ******* **** -*** ***** ********: *** ***** ** Hikvision, ** ** ********** *********. *'** ****** **** **** ** help *** *** ******:
*******, *** **** ******* ****** **** "maintenance" ** * ******* "****" ** considered "******* ********" *** **** ** disclosed (*.*. ******* ** ************):
***, *** **** **** **** ********** maintenance ** * ****** **** *** sold ** ****** *********** **** **** one ** *** ****** ********* ** a ****** **** * ******* ** "using". *** *** **** ************ **** yourselves ** *** *** ******* ********'* involved ** ******?
** ** **** **************, ** ********** cannot ******* ** *** ********** ******** who *** * *** ****** ** they **** ** ******** ********** *********? I'm **** *** ****** *** ***** in ****.
*** ***** ***** **** ** ******** comment, ** *** ***** **** *** the ****** ** *** ***? * believe *** ****** ** ** ******* the ********** **** ******* **** ********* with ********** **** *** **** *************** due ** *** "***" ** *** equipment **** *** ** *** ****** companies.
** *** ***** **** *** *** intent ** *** ***? * ******* the ****** ** ** ******* *** government **** ******* **** ********* **** businesses **** *** **** ***************
******* ** *** ***** ***** **** today, *** ** ** ******* ** the ****, *** ****** ** ** least *** ***** ****** ** *** broader **** **** ********* ************* ***** to *** ** **********. ** ***** today's ***** ***** ********:
*********** ** ******* ***************** *** ***** surveillance ******** ** *********,***** ******** ******* ***** ********** ****using ********** ***** to enter into contracts (or extend or renew contracts) with entities that use covered telecommunications equipment or services. This prohibition ******* **** ** *** ******** ** *** ******** to procure or obtain, any equipment, system, or service that uses covered telecommunications equipment or services. [bold added]
** ***'* **** *** ****** *** non-public ******** ** *** ***** ***** but **** * *********** ** *********** with ******** ***** ******* ***** ** a ****** ********* ** ***** *** Hikvision ***** ******** ** *** **, beyond * ****** ************** ** ************* vulnerabilities *** *******, ** ***** ***** and ********* ** *** ***** ***** or *** *********** ******* ** *** White *****.
** ********** ****** ******* ** *** Interlogix ******** *** *** * *** camera ** **** **** ** ******** government *********? *'* **** *** ****** the ***** ** ****.
*** ***** ** ****, ***** *** White ***** **** ***** *****, ***** be *** ** ********** ** **** doing ******** **** ***** *** *********. Again, * ***'* **** ***** ****** but ****'* *** ********** ******* ** such * ******.
******:*** ***** **** *** **** ********* and ** **** *** ****** *** Hikvision/Dahua *********:***** **** **** *** ****** ********* Dahua *********
**** *** *** ********** ** ******** ******* ***** **** being ***** ** ******* ******** *** equipment. *** *******, * ****** ****** spend * *** ***** ** ****** HiSilicon-based *******. *******, ** *** ***** the ***** ** **** *********-******* **** an ********** **** "****" ********* ******* elsewhere.
*** **** ******** *********, **** ***** you *** ***** ** ******** **** the *******, **** ** *********-****** *********, as **** ** *** *** *** providing ******* ********* *** ********. *** Hikvision ****** *** ********* *** ** effect.
** *** **** *********** *** ********* equipment *** ***** **** ************ **** being * ***** ********** *** ****** federal ****** ********* ******** ******** ********* ******.
***** **** **** ***** ** ********* like * *** ******? ** * school *** ********* ********* *** **** blocked **** ********* ******?
** * ****** ******** ******* ******* it ****** *** **** ******* ** contracts **** ********* **** *** ********* equipment. *******, ***** ** ** ****** banning * ****** **** ** ** existing ********* **** **** ******* ******* funding. ***** ****** ** **** ******* when * *** ***.*** ** ********, when **** ******* ** **** ******.
UPDATE: the final rule has been published and it does not expand the Hikvision/Dahua blacklist:***** **** **** *** ****** ********* Dahua *********
**** *** *** ********** ** ******** ******* ***** **** being ***** ** ******* ******** *** equipment. *** *******, * ****** ****** spend * *** ***** ** ****** HiSilicon-based *******. *******, ** *** ***** the ***** ** **** *********-******* **** an ********** **** "****" ********* ******* elsewhere.
** **** ***'* *** *** ******* on ********* **** ********* **** "***" the *********, *** ***** ** ******* stopping **** **** ***** *** ***** to ******** **** *********?
*** ***** ** ******* ******** **** from ***** *** ***** ** ******** said *********?
****'* ******** **** ** ******** ***** the **** *** ********* ****** *** of ******* ***** ** ***** *** Hikvision *********. **** *** **** ****:
**** (**** **** *) **** **** effect ***** ****** ********** **** *** White ***** ******.
****, ** **** **** *********** ** previous ***** **** **** **** ** such ********* ** ** **** **** moving ******* **** *****?
**** **** ** **** ****, ** grants, ** ** ****** ******* **** today.
**#* ****** *** **** ******* - just *** *****'* ** ********* ****** on **** ** *** ***** **** has **** ******** *** ** **** not, ** ****, *** ******* ***** from ***** ***** ** ******** ********** **** **** *** ****** ********* Dahua *********
*'* *** ********* ** ******** ******** but *** ******** **** *** *********** that ***** *** ** **** ************** is ******* **** *** *******. ***** & *** ***** ***** ******** ***** it ** ******.
**** ******* ** *** ***** ********* that *** *** *** *** *****..*** gonna **** ** **** ** *** not ******* ********* ** **** ********* because **** **** *** ******* **** any ** ***** ****** ********* *** Honeywell *** ** ****** **** * thermostat ** *** ********** ******* **** have * ********* ** ***** **** list ** ******** **** *** *** of ***** ****** *********? **** ** going ** *** ****** *****. *** HiSilicon **** ** **** ** **** cameras ** *** *** **** *** there ****** ** ** *** ** telling. ******* **** ****** ****** ***** compete **** *******? ** **** * lot ** ***** ********** ** * tough ********* ** *** ****** ***** of *** *.*. ******* ***** ******* are ************ ****** *****. **** ***** to ***** ** *** ** *** table *** ***** ** **** ******* the **** ** ********* *** ******** to * ***** ******.\
* ***'* ** **** ****** ** you ********* ****-**-**** **** *** **** the ******. *** ****** *** **** a **** ** *** *** ******* anymore. *** **** **** *** ******* sector ***** **** ** ** **** doing ******* ******** ***** **** *** U.S. ***'*.
** **..
**** ** ****. ** ****, ** fact, **** ** **** ** ********** to ******* ****** ***** ** ****** "examples" *** ** ****** *** ****** it ********* ** **** *** **** media. ***** *** ******** ******** ** millions ** ******* ** ******** ******** in ************* **** **** ******* ***** on * ********** *****.
******** ******** ** ******** ** ******* of ******** ******** ** ************* **** take ******* ***** ** * ********** basis.
*** **** **** *** ****** ****** is, ******** **** *** ***** *** "take ******* ***** ** * ********** basis" *** ********** ** *** ***** amount, **'* ********. ** ***** ** mostly ******* ** ** ***** ** a *********** ****** ****** ** **** Hikua *** ********** *********. ***.
*** **** ***** *********** *** **** of *** ********** ******** **********, *** in *** ********** **** ***** *********, the *********** ******** *** ****** *** documentation **** *** ******** ********* ********, and ** **** ** ******* **** we ** *** ******* ** ******* blacklisted *********. **** *** *********** **** add * *** ** **** ** COs *** ******* ********** *********** ***** to ***** *** ***** ** *********** meet ***** ************. ******** ***** ** slow **** *** *********** *****, ** if ** ****'* **** ******!
**** **** ****** ********* ************ **** use **** *********? **** **** *********, count ** ******* *******? ******** ***** to ** **** ******** ***** ******* this ******* ** **** ** ***. For **, *** ****** ***** ** the ****** **** **** ***** **** up ** **** ** ********.
** * ******* ****, **** ***** hospitals **** ******* ******** *************?
** **** **** ********** ** **** Hikvision *** ***** ***** **** ****** the ******* *** ** ****** ** endusers. ** **** ** *** ***** products *** **** **** ****** ***** true ******. *** ***** ** *** still ******* *** **** ** *** bottom **** ****. **** ********* *** price. **** **** *****.
* **** **** ** ****. ******! New ****** ****** **! ** ******* I **** ** *******.
****************. **** ******** *** ***** ********** Clause ** *** **** *********. ** the ******* ***** **** ***** ***** County *. ******** ******* ******** ******* (1886) **** **** ******* ************** *********** to ************. **'* ******* ******* **** haven't **** ******* **** *** **** use ** ** ****** *********. *** we *********** ******* ** **** ***** than * **** **** **** *** breathed ** * ********* ******? **** if ** *** ** *** ******* of ****** ******* **** **** * Dauha ****** **** ** * ****** system *** **** **** * ***** Dauha ****** *** * ****** ** up ** **** *** ******? ******'* don't **** ********* ***** *** *** this. ** *** *** ***** *** so ***, **** *** **** *** everyone ** **'* *****. ***'* **** winners *** ******. ** ****'* ** war **** ***** *** **** **** I *******? ** ***** **** * trade **** **** ***** *****? **** about ** *** ** ** ** house? *** ** ***** *****. **** of ***** *** **** *******. *** they ****? **** ************** **** *** one *** ****** ******** ********* ****** and **** ** ****** **** ***** like ******* ** * ****.
**** ***** **** **** *** ***** way ** ** **** ********* ***** technically ** ******. **** ** ******* has **** ** ** *** *** Honeywell ****** ** **** * *** non **** ** ****** **** ******* one ******* **** **** **** ****** with *** ****** ******** ** **** correctly ** * ********** ***** ******? Ban ** ** ******* ********** *** be **** **** **.
"** ****'* ** *** **** ***** the **** **** * *******? ** still **** * ***** **** **** China *****?"
**, *** **** *** ** *** with ** - *** ****** ******** type. ******* *** *****, *** *********** one **** ** * **** ** avoid ********* ***** ** ** *** late. ***, **** *** *** *** only ****.
*** ***** ***** ********* ******. ***** 9-11 **** **** ******** * ***** of ********* ** **** **** ********* in **** ****. **** *** *** powers ***. **** *** ******* ***. Kind ** **** ********, ***? *** this **** *** ** ****** ******* in ** ******* ********** *** *** "Pandemic", ***** ********* **** ****** ** the **********. *****'* **** *** * am ***** ** ******.
* ****** *** **** **** ****** that "***** ******" ******* ** ******* County ****** ******* (*******) ********* ******* this ****.
** ** ***** **** *** **** not **** ** **** ********* **** companies **** **** ***************. *** **** would ** **** ***** ********* ***** have *********** ** ***** ******* **** might ** ** ******** ** *** Chinese ********* *****. *** ********** *************, specifications, *********, ** ***** **** *** be **** ******* ** ** ****** using *** **** *** ****** *********** or ** ***** ******** *** ***** benefit (***).
UPDATE: the final rule has been published and it does not expand the Hikvision/Dahua blacklist, in a reversal from what the White House had stated yesterday and proposed back in January. IPVM discusses the final rule in our latest post, ***** **** **** *** ****** ********* Dahua *********
**** *** *** ********** ** ******** ******* ***** **** being ***** ** ******* ******** *** equipment. *** *******, * ****** ****** spend * *** ***** ** ****** HiSilicon *******. *******, ** *** ***** the ***** ** **** *********-******* **** an ********** **** "****" ********* ******* elsewhere.**** *** ****** ******* **** **** *** ********.
** ***** * **** ** **************** comments ***** **** ******** *** ** 889(a)(1)(B) ****** *********? **** ***** ***** of ************* ***** **** ** **** some ***** **** *** ***** ** any *** ********** **** ******* *********. Is ** *** ********,** **** ******** ******* ************, ** ******** **** personal ******* **** *** **** ******** in ******* ******* **** *** ***?
*** "**** ***********" ****** ** *********** now **** **** ****.
***** **** ***** ** * ************* company **** *****'* *** *** ****** Hikvision/Dahua/Huawei ********* ********* ****** *** ****** States...but *** ************** ** (**** ** *****)?