United States: President Trump Declares National Emergency To Secure The Information And Communications Technology And Services Supply Chain

Key Points

  • On May 15, 2019, President Trump issued a long-awaited E.O. designed to curtail the use of telecommunications items and services from certain countries and persons in U.S. networks. The E.O. does not impose immediate restrictions on persons subject to U.S. jurisdiction. Rather, it creates a new regulatory framework that the Department of Commerce (DOC) must implement within 150 days.
  • Once implemented, the new regime will broadly allow the government to block any type of transaction that involves information and communications technology or services provided by a "foreign adversary" that, among other considerations, poses an "unacceptable" risk to the national security of the United States or the security and safety of United States persons.
  • The E.O. does not set out which countries or entities fall within the scope of a "foreign adversary," instead leaving it to the DOC to define this and other key terms.
  • Nevertheless, BIS effectively confirmed that the Order is focused on China and, in particular, Huawei Technologies Co. Ltd. ("Huawei"), the world's largest telecommunications equipment producer, by adding Huawei and a large number of specifically-named affiliates to the "Entity List," a list published by DOC's Bureau of Industry and Security (BIS). As a general matter, the Entity List imposes export restrictions and license requirements on listed persons, effectively restricting their access to U.S.-origin items and other items subject to the Export Administration Regulations (EAR). DOC has not yet issued a final rule to give effect to the designations of Huawei and its affiliates. Accordingly, it is not yet clear what the full scope of the export restrictions will be.
  • The breadth of the new Order overlaps with the EAR and the separate foreign investment regime administered by the Committee on Foreign Investment in the United States (CFIUS) – this new regime will create significant compliance challenges for companies in the context of their international business operations. For this reason, companies should begin assessing the potential impact of this new regime and consider engaging with DOC as appropriate, which must publish implementing regulations by October 2019.

Executive Order

Legal Framework

On May 15, 2019, the President issued an Executive Order on Securing the Information and Communications Technology and Services Supply Chain, pursuant to the authority described in the International Emergency Economic Powers Act (IEEPA). This statute allows the President to exercise certain actions to deal with any unusual and extraordinary foreign threat to the national security, foreign policy, or economy of the United States upon the President's declaration of a national emergency with respect to that threat. In the E.O., the President declared a national emergency with respect to the ability of "foreign adversaries" to create and exploit vulnerabilities in information and communications technology and services in order to commit malicious, cyber-enabled acts.

Key Definitions

The E.O. provides a broad definition of the term "foreign adversaries," which includes foreign government or foreign nongovernment persons engaged in a long-term pattern or serious instances of conduct significantly adverse to the national security of the United States or security and safety of United States persons. The Order leaves it to the DOC to identify the countries and persons that fall within the scope of this broad definition. The Order does not mention China, but it is clear from yesterday's parallel action by DOC designating Huawei and certain affiliates on the Entity List that Chinese companies, beginning with Huawei, are the focus of this Order.

The term "information and communications technology or services" is defined equally broadly to mean "any hardware, software, or other product or service primarily intended to fulfill or enable the function of information or data processing, storage, retrieval, or communication by electronic means, including transmission, storage, or display." The Order contemplates that the forthcoming implementing regulations will identify the list of items that warrant particular scrutiny.

Jurisdiction and Prohibitions

The prohibitions of the Order apply broadly to any person, or with respect to any property, subject to the jurisdiction of the United States. Notably, the Order does not impose blanket prohibitions on such persons with respect to their activities with "foreign adversaries." Rather, it creates a regime that is transaction based. Specifically, it authorizes the Secretary of Commerce, in consultation with other agencies, to prohibit any transaction (i.e., any acquisition, importation into the United States, transfer, installation, dealing in, or use of any information and communications technology or service) where the transaction involves any property in which any foreign country or foreign national has any interest, if the Secretary determines that:

  • the transaction involves information and communications technology or services designed, developed, manufactured, or supplied by persons owned by, controlled by, or subject to the jurisdiction or direction of a "foreign adversary"; and
  • the transaction poses:
    • an undue risk of sabotage to or subversion of the design, integrity, manufacturing, production, distribution, installation, operation, or maintenance of information and communications technology or services in the United States;
    • poses an undue risk of catastrophic effects on the security or resiliency of United States critical infrastructure or the digital economy of the United States; or
    • otherwise poses an unacceptable risk to the national security of the United States or the security and safety of United States persons.

The E.O. also allows the Secretary of Commerce—at its discretion—to design or negotiate measures to mitigate national security concerns as a precondition to approval of a transaction or a class of transactions that would otherwise be prohibited.

Implementation of the New Regime

The DOC must issue implementing regulations by October 14, 2019, to define the contours and practical workings of the new regime. Among other areas, the implementing regulations will address the following key points pursuant to the E.O.

  • identify the countries or persons that are considered "foreign adversaries," as well as the persons owned or controlled or subject to the direction of the designated "foreign adversaries";
  • identify particular technologies or countries with respect to which transactions involving information and communications technology or services warrant particular scrutiny;
  • establish a procedure to license transactions otherwise prohibited;
  • establish criteria by which particular technologies or particular participants in the market for information and communications technology or services may be recognized as categorically included in or as categorically excluded from the new prohibitions; and
  • identify a mechanism and relevant factors for the negotiation of agreements to mitigate concerns raised in connection with the new prohibitions.

Finally, the E.O. calls for recurring and final reports to Congress, as well as assessments and reports conducted by the Director of National Intelligence, on the national emergency declared in the E.O.

What Does This Action Mean for Business?

The new regime imposed by the E.O. will create significant compliance challenges for companies, both in and of itself and in relation to other regimes where there is overlapping jurisdiction in terms of the potential activities covered.

Under the current export control regime, the primary jurisdictional question is whether there is an export, transfer, or reexport of an item subject to the EAR to a non-U.S. person. Under the current CFIUS regime, the key question is whether there is a foreign investment in, or acquisition of, a U.S. business. As a result of the E.O., the threshold question for the new regime is broadly whether a person subject to U.S. jurisdiction is engaged in any acquisition, importation, transfer, installation, dealing in, or use of any information and communications technology or services, where the transaction involves any property in which any foreign country or foreign national has any interest.

Entity List Designation of Huawei and Affiliates

Also on May 15, 2019, in an action separate from the issuance of the E.O. but related to U.S. government concerns about national security, DOC announced that it will add Huawei and its affiliates to BIS's Entity List. In a press release, BIS indicated that it had a reasonable basis to conclude that Huawei is engaged in activities that are contrary to U.S. national security or foreign policy interest, specifically citing to alleged sanctions violations, obstruction of justice, and other activities described in the Department of Justice's public superseding indictment of Huawei. In the press release, Secretary of Commerce Wilbur Ross stated that the designations would "prevent American technology from being used by foreign owned entities in ways that potentially undermine U.S. national security or foreign policy interests."

As a general matter, an Entity List designation imposes severe restrictions on the supply of U.S. export controlled items (i.e., "items subject to the EAR") to such designated companies under the EAR. The EAR defines "items subject to the EAR" broadly as all items in, or in transit through, the United States; all U.S.-origin items wherever located; items manufactured outside of the United States incorporating more than de minimis controlled U.S.-origin content; and certain direct products of U.S.-origin technology manufactured outside of the United States. As a result of an Entity List designation, BIS ordinarily requires any person, including U.S. and non-U.S. companies, whether located inside or outside the United States, to obtain a license to export, reexport or transfer items subject to the EAR to the listed company, and imposes a presumption of denial on such license applications.

The Entity List designations of Huawei and its affiliates will become effective once published in the Federal Register. At that time, BIS will specify the full scope of the export restrictions against the companies.

Conclusion and Opportunity to Comment on Rules

As the foregoing suggests, the first hurdle for businesses will be identifying whether a particular "transaction" is subject to review under the new framework. The breadth of jurisdiction of the new regime will require businesses to then examine the business processes associated with the transactions to determine the effects and limitations of the Order and related BIS rules. Following the identification of transactions that could fall within the scope of the prohibitions, businesses will then need to determine whether the prohibitions will apply to the transaction, and if so, how to navigate the new licensing and/or mitigation processes. With BIS already understaffed, it is not clear how or when the licenses will be reviewed or approved—much less how and when pre-conditional mitigation plans will be developed and negotiated. Moreover, for certain transactions, companies will need to contend with the way in which the new regime may overlap with BIS's export control authority and CFIUS's mandate and considering whether multiple approvals may be required for particular transactions.

Given the potential impact of this new regime, companies that have any dealings with China involving information and communications technology or services should create business process flows involving such dealings to identify classes of "transactions" that would impact their business. Once companies assess the impact, they should consider engaging the DOC during the critical five-month period leading up to the deadline for implementing regulations, as the government builds out this new regulatory regime.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

To print this article, all you need is to be registered on Mondaq.com.

Click to Login as an existing user or Register so you can print this article.

Authors
Similar Articles
Relevancy Powered by MondaqAI
 
In association with
Related Topics
 
Similar Articles
Relevancy Powered by MondaqAI
Related Articles
 
Related Video
Up-coming Events Search
Tools
Print
Font Size:
Translation
Channels
Mondaq on Twitter
 
Mondaq Free Registration
Gain access to Mondaq global archive of over 375,000 articles covering 200 countries with a personalised News Alert and automatic login on this device.
Mondaq News Alert (some suggested topics and region)
Select Topics
Registration (please scroll down to set your data preferences)

Mondaq Ltd requires you to register and provide information that personally identifies you, including your content preferences, for three primary purposes (full details of Mondaq’s use of your personal data can be found in our Privacy and Cookies Notice):

  • To allow you to personalize the Mondaq websites you are visiting to show content ("Content") relevant to your interests.
  • To enable features such as password reminder, news alerts, email a colleague, and linking from Mondaq (and its affiliate sites) to your website.
  • To produce demographic feedback for our content providers ("Contributors") who contribute Content for free for your use.

Mondaq hopes that our registered users will support us in maintaining our free to view business model by consenting to our use of your personal data as described below.

Mondaq has a "free to view" business model. Our services are paid for by Contributors in exchange for Mondaq providing them with access to information about who accesses their content. Once personal data is transferred to our Contributors they become a data controller of this personal data. They use it to measure the response that their articles are receiving, as a form of market research. They may also use it to provide Mondaq users with information about their products and services.

Details of each Contributor to which your personal data will be transferred is clearly stated within the Content that you access. For full details of how this Contributor will use your personal data, you should review the Contributor’s own Privacy Notice.

Please indicate your preference below:

Yes, I am happy to support Mondaq in maintaining its free to view business model by agreeing to allow Mondaq to share my personal data with Contributors whose Content I access
No, I do not want Mondaq to share my personal data with Contributors

Also please let us know whether you are happy to receive communications promoting products and services offered by Mondaq:

Yes, I am happy to received promotional communications from Mondaq
No, please do not send me promotional communications from Mondaq
Terms & Conditions

Mondaq.com (the Website) is owned and managed by Mondaq Ltd (Mondaq). Mondaq grants you a non-exclusive, revocable licence to access the Website and associated services, such as the Mondaq News Alerts (Services), subject to and in consideration of your compliance with the following terms and conditions of use (Terms). Your use of the Website and/or Services constitutes your agreement to the Terms. Mondaq may terminate your use of the Website and Services if you are in breach of these Terms or if Mondaq decides to terminate the licence granted hereunder for any reason whatsoever.

Use of www.mondaq.com

To Use Mondaq.com you must be: eighteen (18) years old or over; legally capable of entering into binding contracts; and not in any way prohibited by the applicable law to enter into these Terms in the jurisdiction which you are currently located.

You may use the Website as an unregistered user, however, you are required to register as a user if you wish to read the full text of the Content or to receive the Services.

You may not modify, publish, transmit, transfer or sell, reproduce, create derivative works from, distribute, perform, link, display, or in any way exploit any of the Content, in whole or in part, except as expressly permitted in these Terms or with the prior written consent of Mondaq. You may not use electronic or other means to extract details or information from the Content. Nor shall you extract information about users or Contributors in order to offer them any services or products.

In your use of the Website and/or Services you shall: comply with all applicable laws, regulations, directives and legislations which apply to your Use of the Website and/or Services in whatever country you are physically located including without limitation any and all consumer law, export control laws and regulations; provide to us true, correct and accurate information and promptly inform us in the event that any information that you have provided to us changes or becomes inaccurate; notify Mondaq immediately of any circumstances where you have reason to believe that any Intellectual Property Rights or any other rights of any third party may have been infringed; co-operate with reasonable security or other checks or requests for information made by Mondaq from time to time; and at all times be fully liable for the breach of any of these Terms by a third party using your login details to access the Website and/or Services

however, you shall not: do anything likely to impair, interfere with or damage or cause harm or distress to any persons, or the network; do anything that will infringe any Intellectual Property Rights or other rights of Mondaq or any third party; or use the Website, Services and/or Content otherwise than in accordance with these Terms; use any trade marks or service marks of Mondaq or the Contributors, or do anything which may be seen to take unfair advantage of the reputation and goodwill of Mondaq or the Contributors, or the Website, Services and/or Content.

Mondaq reserves the right, in its sole discretion, to take any action that it deems necessary and appropriate in the event it considers that there is a breach or threatened breach of the Terms.

Mondaq’s Rights and Obligations

Unless otherwise expressly set out to the contrary, nothing in these Terms shall serve to transfer from Mondaq to you, any Intellectual Property Rights owned by and/or licensed to Mondaq and all rights, title and interest in and to such Intellectual Property Rights will remain exclusively with Mondaq and/or its licensors.

Mondaq shall use its reasonable endeavours to make the Website and Services available to you at all times, but we cannot guarantee an uninterrupted and fault free service.

Mondaq reserves the right to make changes to the services and/or the Website or part thereof, from time to time, and we may add, remove, modify and/or vary any elements of features and functionalities of the Website or the services.

Mondaq also reserves the right from time to time to monitor your Use of the Website and/or services.

Disclaimer

The Content is general information only. It is not intended to constitute legal advice or seek to be the complete and comprehensive statement of the law, nor is it intended to address your specific requirements or provide advice on which reliance should be placed. Mondaq and/or its Contributors and other suppliers make no representations about the suitability of the information contained in the Content for any purpose. All Content provided "as is" without warranty of any kind. Mondaq and/or its Contributors and other suppliers hereby exclude and disclaim all representations, warranties or guarantees with regard to the Content, including all implied warranties and conditions of merchantability, fitness for a particular purpose, title and non-infringement. To the maximum extent permitted by law, Mondaq expressly excludes all representations, warranties, obligations, and liabilities arising out of or in connection with all Content. In no event shall Mondaq and/or its respective suppliers be liable for any special, indirect or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in an action of contract, negligence or other tortious action, arising out of or in connection with the use of the Content or performance of Mondaq’s Services.

General

Mondaq may alter or amend these Terms by amending them on the Website. By continuing to Use the Services and/or the Website after such amendment, you will be deemed to have accepted any amendment to these Terms.

These Terms shall be governed by and construed in accordance with the laws of England and Wales and you irrevocably submit to the exclusive jurisdiction of the courts of England and Wales to settle any dispute which may arise out of or in connection with these Terms. If you live outside the United Kingdom, English law shall apply only to the extent that English law shall not deprive you of any legal protection accorded in accordance with the law of the place where you are habitually resident ("Local Law"). In the event English law deprives you of any legal protection which is accorded to you under Local Law, then these terms shall be governed by Local Law and any dispute or claim arising out of or in connection with these Terms shall be subject to the non-exclusive jurisdiction of the courts where you are habitually resident.

You may print and keep a copy of these Terms, which form the entire agreement between you and Mondaq and supersede any other communications or advertising in respect of the Service and/or the Website.

No delay in exercising or non-exercise by you and/or Mondaq of any of its rights under or in connection with these Terms shall operate as a waiver or release of each of your or Mondaq’s right. Rather, any such waiver or release must be specifically granted in writing signed by the party granting it.

If any part of these Terms is held unenforceable, that part shall be enforced to the maximum extent permissible so as to give effect to the intent of the parties, and the Terms shall continue in full force and effect.

Mondaq shall not incur any liability to you on account of any loss or damage resulting from any delay or failure to perform all or any part of these Terms if such delay or failure is caused, in whole or in part, by events, occurrences, or causes beyond the control of Mondaq. Such events, occurrences or causes will include, without limitation, acts of God, strikes, lockouts, server and network failure, riots, acts of war, earthquakes, fire and explosions.

By clicking Register you state you have read and agree to our Terms and Conditions