Know what “NDAA compliant” means—and what it does not.

Section 889 is about covered technology in federal acquisition.

FAR 52.204-25 implements prohibitions from Section 889 of the FY 2019 National Defense Authorization Act. The clause defines covered telecommunications equipment and services and applies two related federal contracting restrictions.

• Section 889(a)(1)(A): restricts federal procurement or obtaining of equipment, systems, or services that use covered technology as a substantial or essential component or critical technology.
• Section 889(a)(1)(B): restricts federal agencies from entering, extending, or renewing a contract with an entity that uses covered technology in the defined way, even when that use is not in performance of the federal contract.
• Exceptions and waivers exist: the FAR text—not a marketing badge—controls whether an exception or approved waiver applies.

The rule’s definition currently identifies Huawei and ZTE telecommunications equipment, and certain Hytera, Hikvision, and Dahua video-surveillance or telecommunications equipment for specified public-safety, government-facility, critical-infrastructure, and national-security purposes, including subsidiaries and affiliates. It also allows additional connected entities to be identified through the statutory process.

Supply-chain decisions can affect eligibility, risk, and future projects.

Government agencies, federal contractors, schools, critical-infrastructure operators, grant recipients, and private organizations with procurement policies may require NDAA-aligned equipment. Even when a private purchase is not legally subject to Section 889, buyers may prefer a documented supply chain to support customer requirements or avoid replacing a system later.

The concern is not that every product from one country behaves the same. The federal framework identifies specified covered entities and technology because of national-security and supply-chain risk determinations. Accurate procurement depends on legal identity, producer, subsidiaries, affiliates, components, services, and the intended use—not a broad assumption based only on marketplace language or country of origin.

Related federal programs are not interchangeable.

The FCC maintains a Covered List under the Secure and Trusted Communications Networks Act. Congress also enacted the Secure Equipment Act, and the FCC adopted equipment-authorization rules addressing covered equipment. These actions relate to national-security risk and equipment authorization, but an FCC identifier, emissions compliance, and NDAA procurement status answer different questions.

Avoid six common NDAA misunderstandings.

Use a documented, system-level review.

1. Identify every camera, recorder, switch, radio, encoder, software platform, and material service by manufacturer and model.
2. Obtain the manufacturer’s current Section 889 or NDAA declaration and model datasheets.
3. Check the current FAR clause, definitions, FCC Covered List, and any agency-specific or grant-specific terms.
4. Review subsidiaries, affiliates, private-label/OEM relationships, and substantial or essential components where applicable.
5. Keep the bill of materials, declarations, datasheets, invoices, and serial records with the project file.
6. For a federal contract, grant, or regulated project, obtain a determination from the contracting officer, authority, or qualified counsel rather than relying only on a retailer page.

Manufacturer documentation supports informed selection.

Luminys publishes a company compliance statement covering its branded product line. Elite Security Direct also displays model identifiers, manufacturer records, datasheets when published, and extracted credential tags in the product evidence index. Specifications and legal status can change, so the current manufacturer record and applicable government source remain controlling.