Dahua, Hikvision, Huawei US Ban Rules Released

By: John Honovich and Charles Rollet, Published on Aug 08, 2019

The US government has released rules on how the 2018 NDAA ban of Dahua, Hikvision, and Huawei will be implemented when it takes effect in 5 days.

Dahua, Hikvision, Huawei US Ban Rules Released

While the release of the rule itself has been widely reported, the actual details within the rules have not. Inside this note, we examine the 44-page rules document, addressing key question such as:

  • Why this ruling covers video surveillance products that contain Huawei Hisilicon chips
  • How solicitations that are already open or are part of an existing contract are handled
  • Why commercial off the shelf products will not be exempted from the ban
  • How contractors will need to pledge no banned equipment is provided
  • How the limited waiver process works
  • How violations will be reported
  • What penalties exist for violating these rules

Context

This interim Federal Acquisition Regulation applies to section (a)(1)(A) of Section 889 of the NDAA - there is no rule yet for the 'blacklist' clause, which has been spun off and will be implemented one year from now. It is an 'interim' rule because it has not been published in the Federal Register yet. (CORRECTION: this is not accurate, as the rule is now on the Federal Register, but remains "interim". The "interim" moniker refers to the fact that the rule remains open for minor suggestions for 60 days, see below).

Once in the Federal Register, "interested parties" may submit suggestions for changes within a 60-day period. (Such modifications are typically minor - major changes would need "a supplemental proposed rule", the Federal Register's website states.)

Huawei HiSilicon Included

Products using Huawei HiSilicon chips are covered as section 4.2101 defines the ban to include:

Hisilicon's SOCs ("System on a chip") are an essential component of IP cameras and NVRs that use them as they host the operating system and core code necessary to run the camera. Below is an image example of Hisilicon chips on a Honeywell camera:

Get Notified of Video Surveillance Breaking News
Get Notified of Video Surveillance Breaking News

honeywell use hisilicon

This will have a significant impact but should come as no surprise to those following the details. For example, this is consistent with what the Congressional committee which drafted the NDAA told IPVM last December:

“If a company has an end item with Hisillicon chips that they sell to anyone, they will be unable to do business with the federal government.”

Many manufacturers, beyond Dahua and Hikvision, use Huawei Hisilicon chips. For example, China's third-largest manufacturer Uniview generally uses Hisilicon. Many lower-end Hanwha cameras were using Hisilicon but Hanwha is now in the process of phasing them out. Most 'cheap' or inexpensive cameras use Hisilicon, etc. One notable exception is Avigilon who says they do not use any Hisilicon.

We would expect the US Security Industry Association (SIA) to fight this, as many of their manufacturers profit greatly from low-cost Hisilicon chips. However, claiming that SoCs are not 'necessary for the proper function or performance' of a video surveillance device is simply technologically wrong. On the other hand, they have done this before when they successfully campaigned for IP cameras to lose Buy America protection by arguing that 'IP cameras are capable of being employed without using the lens and image sensor'.

COTS Items Included

The rule states that "it is in the best interest of the Government to apply this rule to contracts for theacquisition of COTS items" [commercial off-the-shelf items], citing an "unacceptable level of risk":

Most video surveillance products bought by the US government are 'COTS' in that they are widely commercially available (e.g. Axis, Dahua, Hanwha, Hikvision IP cameras, etc. are widely sold online).

Open Solicitations and Ongoing Contracts

Contractors must include an NDAA notice - which discloses banned equipment - for all "solicitations issued on or after August 13".

Even if the government requested solicitations before the 13th, if the contract is awarded afterwards, the notice must be included:

Even with ongoing contracts, the NDAA notice must be included, barring further procurement of covered products:

Pledge Not Supplying Banned Items

In their NDAA notices, contractors must pledge not to supply covered equipment:

Note: while the line above says 'telecommunication', the FAR itself defines video surveillance as part of 'covered telecommunications equipment' (see excerpt image).

If they are including covered equipment, contractors must report it to the contracting officer or, for DoD contracts, directly to the DoD website:

Contractors must also disclose key details about the covered equipment, including whether "the entity was the OEM or a distributor":

Waivers

Waivers allowing contractors to supply covered equipment are obtainable "on a one-time basis" from "[federal] agency heads".

However, these waivers can only be granted if there is a "compelling justification for the additional time [necessary] to implement" the NDAA ban and the contractor submits a "phase-out plan":

The only other way to get a waiver is if the Director of National Intelligence "determines the waiver is in the national security interests of the United States".

Penalties

Generally, violating Federal Acquisition Regulations carries consequences such as "cancel[ing] the procurement" and "disqualify[ing] an offeror"; serious violations can even be referred to "appropriate criminal investigative agencies."

5 reports cite this report:

Hikvision Global News Reports Directory on Jun 18, 2020
Hikvision has received the most global news reporting of any video...
Trade Groups Request NDAA Blacklist Delay Citing Coronavirus on Apr 06, 2020
Two trade groups representing government contractors have asked Congress to...
IFSEC Report: US Ban Hurting Hikvision In Europe on Sep 04, 2019
Prominent UK publication IFSEC Global has issued a new report finding that US...
How To See If Your Camera Uses Huawei Hisilicon Chips on Aug 30, 2019
Rarely do manufacturers disclose what SoCs (System on a Chip) they use, even...
Ban of Dahua and Hikvision Is Now US Gov Law on Aug 13, 2018
The US President has signed the 2019 NDAA into law, banning the use of Dahua...
Comments (24) : Members only. Login. or Join.

Related Reports

White House Proposes Blacklist of Dahua, Hikvision Users on Feb 04, 2020
The White House is proposing to blacklist Hikvision and Dahua users from...
Ban Rules Released: Use Dahua or Hikvision, No US Government Contracts on Jul 13, 2020
The US government has released the rules implementing the "Prohibition on...
Uniview Heat-Tracker Temperature Screening Series Examined on Apr 22, 2020
Uniview is marketing #UNVagainstCOVID19 with their Heat-Tracker series,...
Milestone Presents XProtect On AWS on May 04, 2020
Milestone presented its XProtect on AWS offering at the April 2020 IPVM New...
Glossary / Acronyms for Video Surveillance on Feb 10, 2020
This directory provides definitions and explanations for over 90 common video...
IPVM Rejects Feevr's Improper Threats And Demands on May 04, 2020
IPVM categorically rejects Feevr's improper threats and demands submitted...
Genetec Security Center 5.9 Release Examined on Feb 06, 2020
Genetec released the next major version of Security Center, less than a year...
US DoD Declares "Can No Longer Do Business" With Contractors Using Dahua, Hikvision, Huawei on Apr 08, 2020
The US Department of Defense has confirmed to IPVM that they fully support...
Trade Groups Request NDAA Blacklist Delay Citing Coronavirus on Apr 06, 2020
Two trade groups representing government contractors have asked Congress to...
UK ICO Approves Unconsented Facial Recognition At Security Conferences on Feb 05, 2020
The UK's data protection agency has declined IPVM's GDPR complaint against...
FDA Gives Guidance on 'Coronavirus' Thermal Fever Detection Systems on Mar 30, 2020
The US FDA has given IPVM guidance on the use of thermal fever detection...
FDA "Does Not Intend to Object" To Unapproved Fever Detection Cameras If No 'Undue Risk' on Apr 17, 2020
The US FDA has declared it will not go after the many companies marketing...
Access Control Course Spring 2020 - Register Now - Last Chance on Apr 21, 2020
IPVM offers the most comprehensive access control course in the...
Avigilon Open Analytics Tested on Apr 16, 2020
After years of effectively closed analytics, Avigilon decided in late 2018 to...
Leica Presents AI LIDAR / Thermal / Visible Camera (BLK247) on May 06, 2020
Leica presented its AI multispectral BLK247 camera at the April 2020 IPVM New...

Recent Reports

Indian Government Restricts PRC Manufacturers From Public Projects on Aug 04, 2020
In a move that mirrors the U.S. government’s ban on Dahua and Hikvision...
Directory of 199 "Fever" Camera Suppliers on Aug 04, 2020
This directory provides a list of "Fever" scanning thermal camera providers...
Face Masks Increase Face Recognition Errors Says NIST on Aug 04, 2020
COVID-19 has led to widespread facemask use, which as IPVM testing has shown...
Dahua Loses Australian Medical Device Approval on Aug 04, 2020
Dahua has cancelled its medical device registration after "discussions" with...
Google Invests in ADT, ADT Stock Soars on Aug 03, 2020
Google has announced a $450 million investment in the Florida-based security...
US Startup Fever Inspect Examined on Aug 03, 2020
Undoubtedly late to fever cameras, this US company, Fever Inspect, led by a...
Motorola Solutions Acquires Pelco on Aug 03, 2020
Motorola Solutions has acquired Pelco, pledging to bring blue back and make...
False: Verkada: "If You Want To Remote View Your Cameras You Need To Punch Holes In Your Firewall" on Jul 31, 2020
Verkada falsely declared to “3,000+ customers”, “300 school districts”, and...
US GSA Explains NDAA 889 Part B Blacklisting on Jul 31, 2020
With the 'Blacklist Clause' going into effect August 13 that bans the US...
Access Control Online Show July 2020 - On-Demand Recording of 45+ Manufacturers Presentations on Jul 30, 2020
The show featured 48 Access Control presentations, all now recorded and...
Face Detection Shootout - Dahua, Hanwha, Hikvision, Uniview, Vivotek on Jul 30, 2020
Face detection analytics are available from a number of manufactures...
Sunell is The First China Manufacturer to Market NDAA Compliance on Jul 30, 2020
Most China manufacturers are going to be impacted by the NDAA 'Blacklist...
Ink Labs Relabels China YCX Fever Camera And Steals Dahua's Marketing on Jul 30, 2020
A US company marketed a 'thermal temperature scanner' as its own, selling...
Genetec and Dahua-Backed Intelbras Split Examined on Jul 29, 2020
China is the cause of the breakup between Canada's and Brazil's largest video...
This YouTuber is Now Selling ThermoHealth Temperature Screening on Jul 29, 2020
An enterprising 20-year old is mass marketing medical devices on Facebook and...