The Information Technology Industry Council just filed formal opposition to the FCC's proposal to add optical modules to the Covered List. Headlines will frame this as a supply chain dispute. That's the surface. The real issue is whether the FCC can ban an entire product category without specific evidence against specific entities. That's a question with consequences far beyond one component. And the market knows it.
This isn't a niche regulatory squabble. It's a test case for the 'category-based' approach to security regulation. If the FCC succeeds in placing optical modules on the Covered List, no network component is safe from similar treatment next. That's not hyperbole. That's a roadmap.
The Covered List comes from the Secure Equipment Act of 2021. The FCC maintains a list of communications equipment that poses a national security risk. Federal funds cannot be used to purchase covered items. Initially, the list named specific entities: Huawei, ZTE, and the like. That was a targeted approach. Now, the FCC wants to expand the list to include entire product categories manufactured by foreign adversaries. Optical modules are the first test case. They won't be the last. Switches. Servers. Power modules. Every critical component is a candidate.
ITI's opposition is straightforward. They argue the FCC should focus on entities or products with a clear link to foreign adversaries, not sweep entire technology categories into the list. That would exclude credible companies from the federal market just because they're in the same industry as a bad actor.
Let me be clear about the regulatory mechanics. The FCC's move is based on the Secure Equipment Act. The Act's legislative intent is clear: it targets specific Chinese firms like Huawei and ZTE. Congress did not intend for the FCC to ban entire product categories. But the FCC is interpreting its authority broadly, turning an entity-based list into a category-based one. This is a significant expansion of administrative discretion.
There's a legal question lurking here. The 'Major Questions Doctrine' from West Virginia v. EPA requires clear Congressional authorization for rules of 'vast economic and political significance.' An optical module ban would hit a multi-billion dollar global supply chain. That's a major question. If the FCC moves forward, the industry will challenge this on that basis.
The supply chain issue is also a global one. Optical module manufacturing is concentrated in China: Innolight, Eoptolink, and Accelink. US companies like Coherent and Lumentum exist, but they don't have the capacity to fill the gap. A category-wide ban would create a serious supply gap. And this isn't just a US issue. A 'category-based' approach could set a precedent that spreads to US allies. The US will push the EU, Japan, and Korea to adopt similar measures. That's how these initiatives become a coordinated, alliance-wide policy.
Here's the deeper problem: this isn't just about federal procurement. The chill effect will extend far beyond government contracts. Major cloud providers and telecom operators will preemptively avoid Chinese modules. They won't wait for the list to be finalized. They will see the regulatory risk and move to diversify their suppliers before the rule is even published. That means the policy impact will be felt before the rule is even final. That's the real problem. The mere threat of a ban is already reshaping supply chains.
I've seen this dynamic before, in the crypto markets. When regulators start acting like they have a blank check, they don't stop at the original target. I was running a yield strategy during the LUNA/UST collapse. The seigniorage model failed, and the immediate reaction was to ban all algorithmic stablecoins. That's the same logic. The specifics of the failure were ignored in favor of a broad category-wide ban. The result was market dislocation that went far beyond the original problem.
The regulatory logic here is the same. The FCC is responding to a genuine threat from specific Chinese entities. But its response is to cast a net so wide that it catches legitimate companies, global supply chains, and entire industries in the process. That's not security. That's collateral damage.
There's a better path. ITI's 'precision risk approach' is the right one. Instead of a blanket ban, focus on identifiable entities with a proven link to the foreign adversary. For the rest of the market, build a certification program. A 'trusted supplier' model. Third-party audits. Supply-chain transparency. This would allow credible companies to remain in the market while addressing the real risk. It would keep the pressure on the actual bad actors without damaging the broader ecosystem.
The optics module makers have a few options. They can move production to Southeast Asia. They can set up new factories in Thailand or Vietnam. But the FCC can look at the ultimate beneficial ownership, so the real structure matters. If the entity is still controlled by the Chinese parent, the move might not provide the desired outcome. That's a key vulnerability.
One thing is clear: the time to act is now. The FCC is in the public comment phase. That's the moment to make a stand. Waiting for the final rule is too late. Once the rule is final, the market will respond even if the rule is later overturned on appeal. The damage will be done.
I've seen this story before in DeFi. A security issue arises. Regulators respond with a blanket approach. The result is that compliant players are caught up in the same restriction, and the market is worse off. The path forward is a precision approach. A targeted response to the actual threat. It's not a question of whether we'll see more regulation. It's a question of whether that regulation will be smart or will be a blunt instrument.