FCC Flags California IT Firm as National Security Risk: What You Need to Know About the Digitalsystem Technology Ban

FCC Flags California IT Firm as National Security Risk: What You Need to Know About the Digitalsystem Technology Ban

The landscape of American cybersecurity shifted recently as the Federal Communications Commission (FCC) took the significant step of designating a California-based IT firm, Digitalsystem Technology, as a national security risk. While the "Covered List" has historically been populated by massive overseas conglomerates like Huawei and ZTE, this latest addition highlights a growing scrutiny of domestic firms with deep ties to foreign jurisdictions.

Headquartered in the Los Angeles area, Digitalsystem Technology provides essential enterprise services, including data center management, networking, and VoIP conferencing. However, as of late 2024, the firm has been officially labeled an “unacceptable risk to the national security of the United States.”

This decision isn't just about one company; it reflects a broader strategy by the US government to insulate critical infrastructure from foreign influence. For business owners and tech-savvy consumers, understanding the nuances of this case is vital for maintaining digital sovereignty in an increasingly interconnected world.

The Digitalsystem Technology Case: A Domestic Security Breach?

The FCC’s denial of Digitalsystem’s application to supply international telecommunications services was not a snap judgment. It followed a rigorous recommendation from a White House committee—often referred to as "Team Telecom"—which assesses foreign participation in the US telecommunications sector.

The committee’s findings were stark. They argued that the services Digitalsystem intended to provide could be "exploited by the PRC [People’s Republic of China] and Hong Kong-based threat actors to the detriment of US interests." This is a significant claim, as it suggests that the very tools used for daily business communication—VoIP and data center management—could serve as backdoors for espionage.

One of the most critical aspects of this case is the ownership structure. The FCC report highlights that CEO Hu “Alan” Xie, a Chinese citizen, owns 70% of the company. While the remaining 30% is held by a US citizen, the majority control resting with a PRC national triggered immediate red flags under current US security protocols.

The "Covered List" and the Precedent of National Risk

Being placed on the FCC’s Covered List is effectively a "blacklisting" from the US telecommunications market. This list was established under the Secure and Trusted Communications Networks Act of 2019, aimed at removing "untrusted" equipment from US networks.

When a company is added to this list:

  1. They are blocked from receiving regulatory authorization to sell new products in the US.
  2. Federal subsidies (such as the Universal Service Fund) cannot be used to purchase their equipment or services.
  3. They are publicly identified as a threat to national infrastructure.

Digitalsystem now joins the ranks of Huawei, ZTE, and Dahua. This move signals that the FCC is no longer just looking at where a company is headquartered, but who controls it and what legal obligations those controllers have to foreign governments.

The Role of the 2017 Chinese National Intelligence Law

The core of the US government’s argument rests on a specific piece of legislation: the Chinese National Intelligence Law passed in 2017. This law is frequently cited in FCC filings and national security assessments as a "smoking gun" for potential espionage.

The law mandates that all Chinese organizations and citizens "support, assist, and cooperate with the state intelligence work." Because CEO Hu “Alan” Xie is a citizen of the PRC, the White House committee argued that the Chinese government has jurisdiction over him. Even though he resides in the United States, the report suggests he could be compelled to cooperate with Chinese intelligence efforts.

This creates a "forced cooperation" scenario. From the perspective of US regulators, it doesn't matter if a CEO has no intention of committing espionage; the legal framework of their home country creates a vulnerability that cannot be mitigated through standard business contracts.

Transparency and the "Candor" Problem

Beyond the geopolitical concerns, the FCC and the White House committee flagged Digitalsystem for a lack of transparency. The report noted that "mitigation measures are infeasible in light of the inconsistent and changing responses by Digitalsystem."

In the world of high-stakes telecommunications, trust is the primary currency. When a company provides ambiguous answers regarding its business plans or its relationship with sister companies in jurisdictions like Hong Kong, it undermines the "candor and reliability" required of a national security partner.

For those looking to build their own systems, avoiding these pitfalls is essential. Whether you are a small business or a home user, vetting your providers for transparency is a key step. For more on building a reliable foundation, see our guide on How to Choose Your First General Home Setup: A Comprehensive Starter Guide.

Protecting Your Data in a High-Risk Environment

The Digitalsystem case serves as a wake-up call for any organization relying on third-party IT services. If a company managing your data center or VoIP calls is compromised—whether by choice or by legal compulsion—your most sensitive information is at risk.

To mitigate these risks, users should look toward robust endpoint security and encrypted communication channels. Relying on verified, transparent security suites is a first line of defense.

McAfee Total Protection 3-Device...

McAfee Total Protection provides a comprehensive layer of security that includes identity monitoring and a secure VPN. In an era where "trusted" firms can be flagged for security risks, having an independent layer of protection on your devices ensures that even if a network provider is compromised, your personal data remains encrypted and monitored.

Practical Steps for Digital Sovereignty

How can individuals and small businesses protect themselves when even domestic firms are being flagged? The answer lies in decentralization and proactive hardware security.

1. Implement Hardware-Level Privacy

Software-based security is essential, but hardware-level protection offers a more robust barrier against network-level threats. If you are concerned about the integrity of your ISP or the networking firms managing your data, a decentralized approach can help.

Deeper Connect SE Smart Decentra...

The Deeper Connect SE is a decentralized VPN (DPN) and firewall that operates at the hardware level. Unlike traditional VPNs that rely on a central server (which could be subject to the same jurisdictional pressures as Digitalsystem), a DPN uses a peer-to-peer network. This makes it significantly harder for any single government or entity to intercept your traffic.

2. Audit Your Service Providers

Take a close look at the companies managing your VoIP and networking. Are they transparent about their ownership? Do they have a history of cooperation with US regulatory bodies? Avoiding "black box" companies is a critical part of modern digital hygiene. For those just starting out, being aware of Common Mistakes to Avoid with General Home Setups and Product Selections can save you from high-risk investments.

3. Use Secure, Independent VPN Services

If hardware solutions are too complex for your current setup, a reliable software VPN is a must. It masks your IP address and encrypts your data, ensuring that even if a firm like Digitalsystem were managing the underlying network, they would see only encrypted gibberish.

Bulldog VPN

Bulldog VPN offers an accessible way to secure your connection, especially when using public Wi-Fi or networks where the infrastructure provider's integrity may be unknown.

The Future of US-China Tech Relations

The FCC’s decision regarding Digitalsystem Technology is likely not the last of its kind. As the US continues to decouple its critical tech infrastructure from Chinese influence, we can expect more domestic firms with foreign ties to face intense scrutiny.

This "zero-trust" environment means that the burden of proof is increasingly on the companies to demonstrate they are not beholden to foreign intelligence laws. For the consumer, it means that "Made in the USA" is no longer a sufficient guarantee of security if the majority ownership and control reside elsewhere.

By staying informed and utilizing tools like decentralized routers and comprehensive security suites, you can navigate this complex landscape without sacrificing your privacy or your peace of mind. As we've seen with the explosive growth of services like Starlink and the ongoing battles over satellite mobile service, the infrastructure of our world is changing fast. Protecting your piece of it starts with the choices you make today.

Back to blog

Leave a comment