What the NDAA Drone Ban Actually Restricts (and What It Doesn’t)

Ask most drone owners what “the DJI ban” restricts, and you’ll get a confident, often wrong, answer. That’s not really their fault — there are actually three separate, overlapping restriction mechanisms that got triggered around the same period, they affect different things, and most coverage conflates them into a single event. Understanding what each one actually does matters if you’re a buyer trying to figure out what’s real.

Mechanism One: A Customs Detention Rule, Not a Ban

Starting in October 2024, US Customs and Border Protection began detaining DJI shipments under the Uyghur Forced Labor Prevention Act — a law targeting goods linked to forced labor in Xinjiang. DJI has disputed this, noting its manufacturing is based in Shenzhen and Malaysia, not Xinjiang, and that it isn’t on the UFLPA Entity List itself. Regardless of the merits, the detentions caused US inventory to run low through much of 2025 — a supply disruption that predates, and is legally unrelated to, the FCC and Defense Department actions that followed.

Mechanism Two: A Federal Procurement Ban

Separately, the Department of Defense maintains what’s known as the 1260H list of Chinese military-linked companies, which as of late 2025 named DJI, Autel Robotics, Aerospace CH UAV, and Chengdu JOUAV among others. Effective December 22, 2025, the American Security Drone Act prohibited federal agencies and federally funded contractors — universities included — from procuring or operating drones from any 1260H-listed manufacturer. This restricts government and federally funded purchasing. It does not touch what a private citizen or private business can buy and fly.

Mechanism Three: The FCC Covered List, and the Legislative Accident That Widened It

This is the mechanism people actually mean when they say “the DJI ban,” and it’s also the one with the strangest origin story. Section 1709 of the FY2025 NDAA — titled, dryly, “Analysis of Certain Unmanned Aircraft Systems Entities” — required a national security agency to determine, within one year of enactment, whether DJI and Autel posed an unacceptable security risk. If no agency reached a determination by the deadline, the law specified that the FCC would be required to add their equipment to its Covered List automatically.

No agency was ever assigned to conduct that review. The trigger fired by default — a legislative gap rather than a deliberate finding of wrongdoing, a distinction DJI itself has repeatedly emphasized in public filings. Equipment on the Covered List becomes ineligible for new FCC authorizations, which every radio-emitting device — drones very much included — legally needs to be sold in the US.

What actually surprised the industry wasn’t that DJI and Autel were affected — that had been expected for months. It was that the FCC’s December 22, 2025 Public Notice went further than Section 1709 technically required, adding an entire category of foreign-produced UAS and “UAS Critical Components” to the Covered List by country of origin, not just by named entity. That means the restriction, as implemented, reaches beyond DJI and Autel to foreign-made drones and components more broadly — a materially bigger action than the statute on its own demanded.

What This Doesn’t Do

This is the part worth being direct about, because it’s where most confusion sits. The Covered List restricts new FCC equipment authorizations going forward — it does not retroactively disable drones people already own. DJI’s flight control systems operate locally, air-gapped from company servers; there is no remote kill switch, and a drone bought before the ban keeps flying exactly as it did before, firmware updates for existing units notwithstanding. Some previously granted authorizations issued right before the December 22 deadline have quietly been revoked by the FCC’s Office of Engineering and Technology, and the agency has stated it retains authority to revoke others — but this is a narrower and more targeted action than “your drone will stop working.”

There’s also an active release valve: the Department of War has granted Conditional Approvals allowing named equipment to continue receiving FCC authorizations through the end of 2026, contingent on manufacturers presenting a credible plan to onshore production — and a blanket waiver issued in January 2026 permits security-patch firmware updates for already-authorized covered equipment.

It’s Not Settled Law Yet

Both DJI and Autel are actively challenging these actions in federal court — DJI in the Ninth Circuit over the Covered List designation and in the DC Circuit over the 1260H designation, Autel with a filing that directly argues the FCC acted on classified evidence it was never allowed to see, alongside technical complaints originally aimed at DJI rather than at Autel specifically. Whatever the practical restrictions are today, they remain genuinely contested, and a court ruling in either direction could change this picture again before the end of 2026.

For a buyer trying to plan around this rather than just react to headlines: figure out which of the three mechanisms actually applies to your situation — a customs supply issue, a federal-procurement restriction, or the FCC’s authorization freeze — because the answer to “am I actually affected” is genuinely different depending on which one you’re asking about.

The Timeline, in Order

Laid out chronologically, the sequence explains a lot of the public confusion: October 2024, CBP begins UFLPA-related shipment detentions, unrelated to any of what follows. Sometime in 2025, the FY2025 NDAA is enacted, starting Section 1709’s one-year clock. December 22, 2025, the deadline passes with no agency determination made, and the FCC’s Public Notice adds not just DJI and Autel but all foreign-produced UAS and critical components to the Covered List — the same day the American Security Drone Act’s federal procurement prohibition on 1260H-listed manufacturers takes effect. January 2026, the FCC’s Office of Engineering and Technology quietly revokes some equipment authorizations granted just before the deadline, and later that month issues a blanket waiver permitting security-patch firmware updates. Through the first half of 2026, the Department of War grants Conditional Approvals extending certain authorizations to the end of 2026 contingent on onshoring commitments, while DJI and Autel pursue parallel legal challenges in the Ninth Circuit and DC Circuit.

What This Has Actually Done to the Market So Far

The practical industry impact has been real, even short of a full sales ban. DJI has paused some direct US sales and distribution channels, citing the regulatory uncertainty itself as the problem rather than any specific finding against its products — new models and firmware updates face genuine risk of not receiving the FCC certifications they’d need going forward, even though currently owned equipment keeps operating. Some state and local governments have moved faster than the federal process, passing their own restrictions on DJI equipment for public safety or government use independent of how the federal litigation resolves — which DJI itself has argued creates exactly the kind of inconsistent, jurisdiction-by-jurisdiction patchwork that a coordinated federal security review was supposed to avoid in the first place.