Title: The FCC's Optical Module Gambit: When "Covered" Becomes a Category, Not a Company
The Information Technology Industry Council (ITI) — the trade body speaking for the likes of Apple, Google, and Microsoft — filed formal comments with the FCC opposing the agency's proposal to add foreign-made optical modules to its Covered List. At face value, this is a routine regulatory skirmish. But the details reveal something more unsettling.
Here's the anomaly: The FCC is not targeting Huawei or ZTE. It is moving to blacklist a product category — not a specific actor. That is a shift in regulatory mechanics, and it matters.
I've spent the last 26 years reading protocol changes and supply chain threat models as if they were smart contract code. When a regulator suddenly changes the "logic gates" of market access, I pay attention. The ITI's opposition isn't just noise from a trade group — it's a signal that the FCC is rewriting the rules of what constitutes a "security threat" in American networks.
The new rulemaking would ban the purchase of optical modules made by foreign entities using federal funds. The ITI argues the FCC should instead focus on "entities or products with a clear nexus to foreign adversaries" rather than sweeping in entire categories of technology from credible companies. That is the core legal flashpoint. But the deeper issue isn't legal, it's architectural.
The Covered List comes from the Secure Equipment Act of 2021, which requires the FCC to maintain a list of communications equipment deemed a national security threat. The first version, published in 2022, named specific companies like Huawei and ZTE. In 2024, the FCC floated the idea of expanding beyond named entities to include whole categories of components — starting with optical modules.
These modules are the digital arteries of the internet. Every data center, every 5G tower, every fiber optic cable — they all run on them. They are cheap, standardized, and manufactured overwhelmingly in China. Major players like Innolight, Eoptolink, and others produce over 50% of the world's supply. The US-based Coherent and Lumentum are in the game but lack the scale to replace Chinese output overnight.
Code does not lie, but it does hide. The FCC's draft rules are a classic example of the "major questions doctrine" problem. In West Virginia v. EPA (2022), the Supreme Court ruled that agencies need explicit congressional authority for decisions with major economic and political significance. Banning an entire product class — one with a global market in the tens of billions — is exactly that kind of decision. The FCC is likely relying on the Secure Equipment Act's delegation to "cover" threats. But that's a stretch.
I built my career on auditing the unstated assumptions in code. This proposal is the legal equivalent of a smart contract bug: it looks valid on the surface but has a fatal flaw in the logic. The flaw is the assumption that "foreign" equals "threat."
The Core: Unpacking the Hidden Costs
1. Supply Chain Transparency is a Myth The real threat to the industry isn't the ban itself — it's the compliance burden. Optical modules are embedded components. They go into switches, routers, and servers. By the time a module reaches a federal data center, it's passed through a multi-tiered distribution chain. The module has no "final provenance" easily available to the IT department. The FCC is asking for a BOM-level (Bill of Materials) traceability that the industry has never had. The result: a compliance regime that demands the impossible, or worse, a push toward "clean" suppliers that don't exist in sufficient volume.
2. The Arbitrage Window is Closing Before this rule, there was a cost arbitrage — Chinese manufacturing was cheap, reliable, and fast. U.S. carriers and data center operators built their networks on this cost advantage. The FCC's proposal is a death sentence for that model. If the rule passes, the US will need to rebuild a domestic optical module ecosystem from scratch. That's a 3-5 year capital cycle in a market that moves on 18-month product cycles. The "market gap" will be filled by (a) premium prices, (b) project delays, or (c) an underground supply chain that is even more opaque. Redundancy is the enemy of scalability.
3. The "Certified Supplier" Loophole ITI's suggestion for a "targeted risk approach" is a polite way of asking for a certification scheme. This is the classic "Trusted Supplier" model that the EU has used for 5G. It creates a two-tier market: certified (expensive) and non-certified (cheap). In the current bear market, every company will be looking at the bottom line. They'll be tempted to buy the cheap modules and hide them. That's a compliance time bomb.
The Contrarian Angle: The Bigger Threat Isn't the Ban — It's the Chilling Effect
I've been watching this space since the 2017 ICO era. I've seen regulators announce bans, and I've seen the market move before the rule is even finalized. This is the "chilling effect" scenario. Even if the FCC never finalizes the rule, the mere discussion of it will cause:
- US carriers and cloud providers to voluntarily stop buying Chinese modules to avoid future legal risk.
- Chinese manufacturers to shift their supply chains to Southeast Asia (Thailand, Vietnam) to avoid the "Made in China" label, but that won't stop the FCC — they'll check beneficial ownership.
- A wave of preemptive compliance — companies will spend millions on new compliance teams and supply chain audits for a rule that hasn't passed yet.
This is the "political" cost. The rule is a tool, not just a law. It's a hammer for a geopolitical agenda.
The Legal Battle: A Slow-Motion Court Case
ITI's opposition is the first step in a long administrative dance. They'll file a reconsideration petition, then a lawsuit in the DC Circuit, citing the APA. The court will look at whether the FCC acted "arbitrary and capriciously" or "beyond its statutory authority." The legal fight will last 2-3 years. During that time, the FCC can issue a "stay" on the rule, but the chilling effect will already be permanent.
The likely outcome: the FCC will back down and narrow the rule to target specific Chinese companies, not the entire category. But that's just a tactical retreat. The precedent will be set: the FCC can do category-wide bans if it wants. The next iteration will be even bolder — it will be for "transceivers" or "servers" or "any component with a Chinese chip."

The Takeaway: Volatility is the price of entry, not the exit.
The real question is not whether optical modules will be on the list. It's whether you are prepared for the supply chain to become a political football. In this bear market, survival means not being the one holding a non-compliant inventory when the rule hits.
My advice: If you are a data center operator or a hardware integrator, treat this as a risk management exercise. Do a deep audit of your own supply chain now. Diversify your sources. Start a "no-China" pathway for critical network components. The cost of this audit is a fraction of the cost of a halted network deployment.
And if you're a trader, watch the political signals. The FCC's next comment window is the "real oracle" — the market will show its hand on the day they announce the final rule. The gap between the "code" and the "law" is where the alpha is. Code does not lie, but it does hide. And here, the FCC is hiding in plain sight.