Dahua, Hikvision, Huawei US Ban Rules Released

By John Honovich and Charles Rollet, Published on Aug 08, 2019

The US government has released rules on how the 2018 NDAA ban of Dahua, Hikvision, and Huawei will be implemented when it takes effect in 5 days.

Dahua, Hikvision, Huawei US Ban Rules Released

While the release of the rule itself has been widely reported, the actual details within the rules have not. Inside this note, we examine the 44-page rules document, addressing key question such as:

  • Why this ruling covers video surveillance products that contain Huawei Hisilicon chips
  • How solicitations that are already open or are part of an existing contract are handled
  • Why commercial off the shelf products will not be exempted from the ban
  • How contractors will need to pledge no banned equipment is provided
  • How the limited waiver process works
  • How violations will be reported
  • What penalties exist for violating these rules

Context

This interim Federal Acquisition Regulation applies to section (a)(1)(A) of Section 889 of the NDAA - there is no rule yet for the 'blacklist' clause, which has been spun off and will be implemented one year from now. It is an 'interim' rule because it has not been published in the Federal Register yet. (CORRECTION: this is not accurate, as the rule is now on the Federal Register, but remains "interim". The "interim" moniker refers to the fact that the rule remains open for minor suggestions for 60 days, see below).

Once in the Federal Register, "interested parties" may submit suggestions for changes within a 60-day period. (Such modifications are typically minor - major changes would need "a supplemental proposed rule", the Federal Register's website states.)

Huawei HiSilicon Included

Products using Huawei HiSilicon chips are covered as section 4.2101 defines the ban to include:

Hisilicon's SOCs ("System on a chip") are an essential component of IP cameras and NVRs that use them as they host the operating system and core code necessary to run the camera. Below is an image example of Hisilicon chips on a Honeywell camera:

Get Notified of Video Surveillance Breaking News
Get Notified of Video Surveillance Breaking News

honeywell use hisilicon

This will have a significant impact but should come as no surprise to those following the details. For example, this is consistent with what the Congressional committee which drafted the NDAA told IPVM last December:

“If a company has an end item with Hisillicon chips that they sell to anyone, they will be unable to do business with the federal government.”

Many manufacturers, beyond Dahua and Hikvision, use Huawei Hisilicon chips. For example, China's third-largest manufacturer Uniview generally uses Hisilicon. Many lower-end Hanwha cameras were using Hisilicon but Hanwha is now in the process of phasing them out. Most 'cheap' or inexpensive cameras use Hisilicon, etc. One notable exception is Avigilon who says they do not use any Hisilicon.

We would expect the US Security Industry Association (SIA) to fight this, as many of their manufacturers profit greatly from low-cost Hisilicon chips. However, claiming that SoCs are not 'necessary for the proper function or performance' of a video surveillance device is simply technologically wrong. On the other hand, they have done this before when they successfully campaigned for IP cameras to lose Buy America protection by arguing that 'IP cameras are capable of being employed without using the lens and image sensor'.

COTS Items Included

The rule states that "it is in the best interest of the Government to apply this rule to contracts for theacquisition of COTS items" [commercial off-the-shelf items], citing an "unacceptable level of risk":

Most video surveillance products bought by the US government are 'COTS' in that they are widely commercially available (e.g. Axis, Dahua, Hanwha, Hikvision IP cameras, etc. are widely sold online).

Open Solicitations and Ongoing Contracts

Contractors must include an NDAA notice - which discloses banned equipment - for all "solicitations issued on or after August 13".

Even if the government requested solicitations before the 13th, if the contract is awarded afterwards, the notice must be included:

Even with ongoing contracts, the NDAA notice must be included, barring further procurement of covered products:

Pledge Not Supplying Banned Items

In their NDAA notices, contractors must pledge not to supply covered equipment:

Note: while the line above says 'telecommunication', the FAR itself defines video surveillance as part of 'covered telecommunications equipment' (see excerpt image).

If they are including covered equipment, contractors must report it to the contracting officer or, for DoD contracts, directly to the DoD website:

Contractors must also disclose key details about the covered equipment, including whether "the entity was the OEM or a distributor":

Waivers

Waivers allowing contractors to supply covered equipment are obtainable "on a one-time basis" from "[federal] agency heads".

However, these waivers can only be granted if there is a "compelling justification for the additional time [necessary] to implement" the NDAA ban and the contractor submits a "phase-out plan":

The only other way to get a waiver is if the Director of National Intelligence "determines the waiver is in the national security interests of the United States".

Penalties

Generally, violating Federal Acquisition Regulations carries consequences such as "cancel[ing] the procurement" and "disqualify[ing] an offeror"; serious violations can even be referred to "appropriate criminal investigative agencies."

6 reports cite this report:

Chilean Official Investigated for Motorola And Hikvision Contracts on Sep 17, 2020
A corruption investigation is underway in Chile after a crime prevention...
Hikvision Global News Reports Directory on Aug 13, 2020
Hikvision has received the most global news reporting of any video...
Trade Groups Request NDAA Blacklist Delay Citing Coronavirus on Apr 06, 2020
Two trade groups representing government contractors have asked Congress to...
IFSEC Report: US Ban Hurting Hikvision In Europe on Sep 04, 2019
Prominent UK publication IFSEC Global has issued a new report finding that US...
How To See If Your Camera Uses Huawei Hisilicon Chips on Aug 30, 2019
Rarely do manufacturers disclose what SoCs (System on a Chip) they use, even...
Ban of Dahua and Hikvision Is Now US Gov Law on Aug 13, 2018
The US President has signed the 2019 NDAA into law, banning the use of Dahua...
Comments (24) : Members only. Login. or Join.

Related Reports

Ban Rules Released: Use Dahua or Hikvision, No US Government Contracts on Jul 13, 2020
The US government has released the rules implementing the "Prohibition on...
White House Expands Dahua Hikvision Blacklist To Federal Funding [Final Rule Reverses] on Aug 13, 2020
The White House is expanding the NDAA to blacklist anyone who "uses" banned...
Final Rule Does Not Expand Hikvision Dahua Blacklist on Aug 14, 2020
The final White House rule (200.216) has been added and contrary to the...
Honeywell Warns of Huawei, Advocates Futureproofing on Aug 31, 2020
For years, Honeywell has profited from OEMing Dahua and using Huawei...
The Guide To The NDAA Video Surveillance Ban / Blacklists on Aug 24, 2020
This 25-page guide provides a reference to the NDAA ban and blacklist. The US...
Sunell is The First China Manufacturer to Market NDAA Compliance on Jul 30, 2020
Most China manufacturers are going to be impacted by the NDAA 'Blacklist...
Huawei HiSilicon Shortage Impacts Surveillance Manufacturers on Aug 14, 2020
Huawei acknowledged problems and challenges for its HiSilicon chip business,...
DoD Confirms No Blacklist Delay for Video Surveillance Sellers on Aug 19, 2020
The Department of Defense has confirmed to IPVM that the waiver granted does...
Panasonic i-PRO Hid Huawei, Does Damage Control on Aug 21, 2020
Panasonic i-PRO hid their usage of Huawei from the public, continues to...
Hanwha and Hikvision Selling H.265 Without HEVC Licensing on Aug 19, 2020
IPVM has confirmed that Hanwha and Hikvision do not have H.265 licenses from...
US GSA Explains NDAA 889 Part B Blacklisting on Jul 31, 2020
With the 'Blacklist Clause' going into effect August 13 that bans the US...
NDAA Compliant Video Surveillance Whitelist on Aug 10, 2020
This report aggregates video surveillance products that manufacturers have...
Honeywell 30 Series and Vivotek NVRs Tested on Oct 21, 2020
The NDAA ban has driven many users to look for low-cost NVRs not made by...
Warning: Panasonic i-PRO Deceives About NDAA Compliance on Aug 18, 2020
IPVM has determined that Panasonic i-PRO has deceived about its NDAA...
WDR Cheat Sheet and Camera Tracking - 30 Manufacturers on Aug 26, 2020
Manufacturers are regularly cryptic about what WDR support they actually...

Recent Reports

Bedside Cough and Sneeze Detector (Sound Intelligence and CLB) on Oct 28, 2020
Coronavirus has increased interest in detecting symptoms such as fever and...
Fever Tablet Thermal Sensors Examined (Melexis) on Oct 28, 2020
Fever tablet suppliers heavily rely on the accuracy and specs of...
Verkada Fires 3 on Oct 28, 2020
Verkada has fired three employees over an incident where female colleagues...
Recruiters Online Show LIVE Thursday! on Oct 27, 2020
IPVM's 7th online show resumes Thursday with 12 recruiters presenting...
Eagle Eye Networks Raises $40 Million on Oct 27, 2020
Eagle Eye has raised $40 million aiming to "reinvent video...
Hikvision Q3 2020 Global Revenue Rises, US Revenue Falls on Oct 27, 2020
While Hikvision's global revenue rises driven by domestic recovery, its US...
VICE Investigates Verkada's Harassing "RawVerkadawgz" on Oct 26, 2020
This month, IPVM investigated Verkada's sexism, discrimination, and cultural...
Six Flags' FDA Violating Outdoor Dahua Fever Cameras on Oct 26, 2020
As Six Flags scrambled to reopen parks amid plummeting revenues caused by the...
ISC Brasil Digital Experience 2020 Report on Oct 23, 2020
ISC Brasil 2020 rebranded itself to ISC Digital Experience and, like its...
Top Video Surveillance Service Call Problems 2020 on Oct 23, 2020
3 primary and 4 secondary issues stood out as causing the most problems when...
GDPR Impact On Temperature / Fever Screening Explained on Oct 22, 2020
What impact does GDPR have on temperature screening? Do you risk a GDPR fine...
Security And Safety Things (S&ST) Tested on Oct 22, 2020
S&ST, a Bosch spinout, is spending tens of millions of dollars aiming to...
Nokia Fever Screening Claims To "Advance Fight Against COVID-19" on Oct 22, 2020
First IBM, then briefly Clorox, and now Nokia becomes the latest Fortune 500...
Deceptive Meridian Temperature Tablets Endanger Public Safety on Oct 21, 2020
IPVM's testing of and investigation into Meridian Kiosk's temperature...
Honeywell 30 Series and Vivotek NVRs Tested on Oct 21, 2020
The NDAA ban has driven many users to look for low-cost NVRs not made by...