The FCC's Optical Module Gambit: When Security Lists Become Industrial Policy

The code whispered secrets the whitepaper buried. This time, the whitepaper is a federal register notice, and the code is the supply chain itself. The Information Technology Industry Council (ITI) has formally opposed the FCC's proposal to place all foreign-manufactured optical modules on its Covered List. The move, framed as a national security imperative, is a textbook case of regulatory mission creep. It is not about Huawei or ZTE anymore. It is about every fiber optic transceiver plugged into a data center switch, regardless of who made it or where. Let's be precise about what is happening. The Secure Equipment Act of 2021 gave the FCC authority to maintain a list of equipment deemed a national security threat. The first list, published in 2022, named specific entities. The proposed expansion targets a product category. This is a fundamental shift in regulatory logic. It moves from punishing bad actors to banning entire classes of goods. The ITI, representing the who's who of American tech, is pushing back. Their argument is simple: focus on entities with clear ties to foreign adversaries, not on trusted companies' entire product lines. This is where the anatomy of the decision gets interesting. The FCC's legal authority under the Secure Equipment Act is not a blank check. The statute's legislative history is clear. Congress was focused on Huawei and ZTE. The intent was to sever the federal government's procurement ties to specific, identified threats. The proposed rule on optical modules stretches that mandate to its breaking point. It is an administrative interpretation that expands the law's reach far beyond its original design. This is the kind of overreach that the Supreme Court's Major Questions Doctrine was designed to catch. The economic and political significance of banning a foundational component of the global internet infrastructure is immense. If the FCC can do this to optical modules, what stops them from adding switches, servers, or power supplies next? The supply chain reality makes this even more complex. Optical modules are not like a proprietary router from a single vendor. They are commoditized components. The market is dominated by Chinese firms like Innolight and Eoptolink, which together hold a significant share of global revenue. American firms like Coherent and Lumentum are major players, but they cannot absorb the demand overnight. A blanket ban would create a supply vacuum. Federal projects would face delays. Costs would spike. The FCC's own stated goal of securing the network would be undermined by the collateral damage to network deployment and maintenance. Read the function calls, not the press release. The ITI's opposition is not just about legal principle. It is about the chilling effect. Even the threat of a ban is reshaping procurement behavior. Companies are preemptively diversifying away from Chinese suppliers. They are building compliance teams and tracing supply chains to the component level. This is a hidden tax on innovation. The cost of compliance is not just the price of a new supplier. It is the cost of auditing, legal review, and the risk of getting it wrong. The FCC's proposal, even if it fails, has already achieved a form of industrial policy. It has accelerated the decoupling of the US tech supply chain from China. Between the lines of the ABI lies the intent. Here, the intent is clear. The FCC is testing the waters. Optical modules are a test case. If they can successfully ban a generic component category, the precedent is set. The next targets could be anything. This is why the industry is pushing back so hard. They see the trajectory. The ITI's suggestion of a 'certified trusted supplier' program is a constructive alternative. It would allow compliant foreign manufacturers to prove their products are safe, creating a pathway to market access without a blanket ban. This is a smarter approach. It uses the FCC's security concerns as a baseline, but it does not sacrifice the benefits of global trade and competition. Logic does not lie, but architects often do. The FCC's proposal is a solution in search of a problem. The original Covered List targeted specific, identified threats. The new proposal targets a technology. This is a distinction with a difference. The former is a scalpel. The latter is a sledgehammer. The ITI's opposition is a necessary corrective. It forces the FCC to justify its expansion of authority with evidence, not just assertion. It forces a debate about the proper scope of national security regulation in a globalized economy. My own experience auditing the 0x protocol whitepaper in 2017 taught me that technical rigor beats hype. The same principle applies here. The FCC's proposal is a form of regulatory hype. It sounds tough on national security, but it is sloppy in its execution. It fails to distinguish between a threat and a component. It fails to account for the complexity of the supply chain. It fails to consider the economic consequences. The ITI's response is the technical audit the FCC needs. It is a detailed, reasoned argument that exposes the flaws in the agency's logic. The contrarian angle is that the ITI's opposition is not purely altruistic. It is also about protecting the interests of its members. Large tech companies like Apple, Google, and Microsoft are major buyers of optical modules. A ban would disrupt their supply chains and increase their costs. They have a financial stake in the outcome. This does not invalidate their arguments, but it does color them. The FCC should weigh the industry's self-interest against the national security concerns. The industry's arguments are strong, but they are not disinterested. What the bulls got right is that the threat is real. The US government has legitimate concerns about the security of its communications infrastructure. The compromise is not between security and trade. It is between smart security and dumb security. Smart security targets specific threats. Dumb security bans entire categories. The FCC should choose smart security. It should work with industry to develop a certification program that allows compliant products into the market. It should focus its enforcement on entities that pose a genuine risk. This is the path that protects both national security and the benefits of global trade. The takeaway is a question. Will the FCC listen to reason, or will it double down on a flawed approach? The next 12 to 18 months will tell. The industry is watching. The world is watching. The decision will set a precedent for how the US regulates technology in the name of security. It will determine whether the Covered List remains a targeted tool or becomes a blunt instrument of industrial policy. The code of the supply chain is complex. The FCC's rulemaking should be equally nuanced. Anything less is a failure of governance.