Section 889 Compliance: The Banned-Equipment Rule That Kills Registrations

Section 889 has quietly disqualified more small businesses from federal contracting than almost any other single compliance rule — not because the underlying requirement is complicated, but because contractors skip the annual SAM.gov certification, get it wrong, or don’t realize it applies to their entire company, not just their federal-facing operations. Here’s what it actually requires and how to avoid it killing your registration.

What Section 889 Actually Bans

Section 889 of the NDAA contains two separate prohibitions, phased in on different dates:

• Part A (effective August 2019): Federal agencies can’t directly purchase equipment, systems, or services that use “covered telecommunications or video surveillance products” as a substantial component or critical technology.
• Part B (effective August 2020) — the one that trips up most small businesses: Agencies can’t contract with any company that uses covered equipment or services anywhere in its operations, whether or not that use has anything to do with the federal contract itself. This is the part that catches businesses off guard — a security camera system in your own office, unrelated to any government work, can disqualify you.

The Five Named Companies

The ban specifically targets five Chinese entities and their affiliates and subsidiaries: Huawei Technologies, ZTE Corporation, Hytera Communications, Hangzhou Hikvision Digital Technology, and Dahua Technology. The prohibition specifically covers video surveillance equipment used for public safety, government facility security, critical infrastructure monitoring, or national security purposes — which in practice means most commercial security camera and DVR/NVR systems from these brands, sold under many different private-label names, not just the brands themselves.

The SAM.gov Certification You Have to Renew

Contractors must perform a “reasonable inquiry” into their own supply chain and equipment use — reviewing existing knowledge rather than commissioning a formal audit — and then submit an annual representation through SAM.gov stating whether they provide or use covered telecommunications equipment or services. This isn’t a one-time certification: it has to be kept current, and a lapsed or incorrect representation is a common, entirely avoidable way small businesses find their SAM.gov registration flagged or their bid disqualified.

The Two Exceptions

Two narrow exceptions keep the rule from being absolute:

• Backhaul, roaming, or interconnection arrangements: services that merely connect to third-party networks through standard telecom interconnection, recognizing that modern networks inherently interconnect with systems you don’t control.
• Passive, non-routing equipment: telecommunications equipment that cannot route or redirect user data traffic and provides no visibility into user data — essentially equipment that’s a dumb conduit with no data-inspection capability.

These exceptions are narrow and fact-specific — don’t assume a piece of equipment qualifies without checking its actual capabilities against the exact exception language, ideally with input from whoever manages your IT infrastructure.

The Audit Most Small Businesses Never Do

Because Part B applies company-wide, the practical first step is a genuine inventory: walk your own office, warehouse, and any remote sites, and check the actual brand and model of every security camera, DVR/NVR, network switch, and telecom device in use — not just what’s deployed on a government contract. Many small businesses installed a budget-friendly camera system years before anyone was thinking about federal compliance, often under a private-label brand that obscures the underlying manufacturer. If you don’t recognize a brand on your own equipment, look up its actual OEM before assuming it’s clear — several private-label security camera brands sold through general retailers are rebadged Hikvision or Dahua hardware. If you’re unsure whether a piece of company equipment falls under the ban, the safer move is the same one that applies to CUI classification elsewhere in federal compliance: when genuinely in doubt, treat it as covered until you’ve confirmed otherwise, rather than assuming your equipment is clear because nobody flagged it before.

Section 889 Sits Alongside Your Other SAM.gov Obligations

The annual Section 889 representation is just one of several certifications you’re responsible for keeping current in SAM.gov — if you haven’t been through the registration process recently, our SAM.gov registration guide covers what the full process actually involves, and our common SAM.gov registration mistakes piece covers the errors that most often trip up small businesses at renewal time, Section 889 included. It’s also worth keeping this rule mentally separate from your CMMC and cybersecurity compliance obligations, and from the specific DFARS cybersecurity clauses that apply to defense work — Section 889 is a supply-chain equipment ban, not a data-protection standard, and contractors sometimes conflate the two when they’re really tracking two entirely different compliance regimes with two entirely different failure modes.

Key Takeaways

• Section 889 Part B bans contracting with any company that uses covered telecom or video surveillance equipment anywhere in its operations — not just on federal work.
• The five named companies are Huawei, ZTE, Hytera, Hikvision, and Dahua, plus their affiliates and subsidiaries, including many private-label rebrands.
• Contractors must submit an annual “reasonable inquiry” representation through SAM.gov — an outdated or incorrect representation is a common, avoidable cause of registration or bid problems.
• Two narrow exceptions exist for interconnection arrangements and passive, non-data-inspecting equipment — check actual equipment capabilities before assuming either applies.
• Audit your entire office and facility equipment, not just what’s deployed on government work, since Part B applies company-wide; watch for rebranded/private-label equipment from banned manufacturers.

FAQ

Does Section 889 only apply to equipment used directly on my federal contract?
No — that’s the most common misunderstanding. Part B applies to covered equipment used anywhere in your company’s operations, including systems that have nothing to do with government work, like an office security camera system.

How do I know if my security cameras are actually a banned brand?
Check the actual manufacturer, not just the storefront brand name — many budget camera and DVR systems sold under other names are manufactured by Hikvision or Dahua. Look up the specific model number’s true OEM if you’re not certain, since private-label rebranding is common in this equipment category.

What happens if I certify incorrectly on SAM.gov?
An inaccurate representation can expose you to False Claims Act risk in addition to registration or eligibility problems, since it’s a formal certification the government relies on. If you discover an error after certifying, correct it promptly rather than leaving it in place.