NDAA-Compliant Drones: The Four Lists Every Buyer Must Clear
"NDAA-compliant" is no longer one checkbox. As of mid-2026, a drone purchase must clear the Blue UAS Cleared List, the FCC Covered List, the DoD 1260H contracting bans, and a patchwork of state laws — each with its own scope and expiration dates.
By Uniqcli Team · · 6 min read

Key takeaways
- A compliant drone purchase now must clear four separate regimes: the Blue UAS Cleared List, FCC Covered List, DoD 1260H bans, and state laws.
- Blue UAS Cleared List management moved from DIU to DCMA's US-X on Dec 3, 2025; the authoritative source is now bluelist.dcma.mil.
- Since Dec 22, 2025 the FCC Covered List bars new equipment authorizations for foreign-produced UAS, but earlier-authorized models stay legal.
- Section 1260H bars DoW contracts with listed Chinese military companies from June 30, 2026, extending to subcontractor supply chains June 30, 2027.
- Several transitional compliance pathways, including legacy Blue List approval, are set to expire January 1, 2027 per OMB Memorandum M-26-02.
On this page
Procurement Guidance
"NDAA-compliant" stopped being one checkbox
The phrase implies a single test a drone either passes or fails. In practice, a compliant purchase now has to clear four separate regimes at once — procurement eligibility, import and sale eligibility, Department of War counterparty rules, and a growing set of state statutes. Each list has a different scope, a different effective date, and in several cases a different expiration date, and there is no single source of truth that reconciles them.
The Blue UAS Cleared List today
The most familiar list changed hands over the past year. Management of the Blue UAS Cleared List formally transitioned from the Defense Innovation Unit to the Defense Contract Management Agency on December 3, 2025 — ahead of the original January 1, 2026 target — following a July 10, 2025 Secretary of War memo titled "Unleashing U.S. Military Drone Dominance." DCMA now runs the list through its new Unmanned Systems–Experimental Command (US-X) at Palmdale, California, and the authoritative source moved to bluelist.dcma.mil.
The list has also been growing. As of November 2025, per DIU's transition release, the ecosystem had certified more than 39 drone systems and over 165 components across DoD and the wider U.S. government, with 81 companies and third-party "Recognized Assessors" participating. Third-party trackers report the cleared list exceeding 50 platforms by early 2026 as DCMA scales its intake process.
There are now three routes onto the list: DoW Sponsorship, the Competitive Process, and the Recognized Assessors process. That third track matters for buyers because, as of July 16, 2025, DIU began recognizing AUVSI's Green UAS certification as an authorized, streamlined pathway directly into Blue UAS Cleared status — widening the funnel of platforms that can reach the list without a full competitive cycle.
Four lists, four different questions
A drone can satisfy one of these and silently fail another. Each answers a distinct question, and passing one is not evidence about the others.
Blue UAS Cleared List (DCMA)
Procurement eligibility. Managed by DCMA's US-X at Palmdale since December 3, 2025, at bluelist.dcma.mil. 39-plus systems and 165-plus components as of late 2025, reportedly past 50 platforms by early 2026.
FCC Covered List
Import and sale eligibility. Since December 22, 2025 all foreign-produced UAS and critical components are on the list, barring new equipment authorizations. Not retroactive — earlier-authorized models stay legal.
DoD Section 1260H list
DoW counterparty eligibility. Under Section 805 of the FY2024 NDAA, the Department of War cannot contract with listed Chinese military companies from June 30, 2026, extending through subcontractor supply chains June 30, 2027.
State statutes
Jurisdictional eligibility. Florida's 2023 law was first; Arkansas, Tennessee, and Mississippi have followed with their own restrictions on covered-foreign-entity or non-domestic drones for public agencies.
The federal restrictions, and why they don't line up
The American Security Drone Act of 2023 reached its core milestone on December 22, 2025, when the procurement and operation prohibition on covered foreign-made UAS took effect for federal agencies. Critically, the law also reaches federal grant and cooperative-agreement recipients — state and local agencies and universities spending federal dollars — effectively pulling them off covered drones as well. At the acquisition-regulation level, FAR clause 52.240-1 has been required in solicitations and contracts issued on or after November 12, 2024.
The FCC's action is a separate track with separate mechanics. On December 22, 2025, the Public Safety and Homeland Security Bureau added all foreign-produced UAS and critical components to the FCC's Covered List — a first-of-its-kind categorical move — naming DJI and Autel per the FY2025 NDAA's statutory deadline. It is not retroactive: models authorized before that date remain legal to import, sell, and operate; only new models are blocked. Effective January 7, 2026, the FCC opened two exemption pathways — Blue UAS Cleared status, and equipment meeting Buy American domestic-content thresholds — plus individualized determinations from the Department of War or DHS.
One consolidation that could have simplified all of this went the other way. In early January 2026, the Commerce Department withdrew a broader proposed rule that would have restricted core internal drone systems and could have made existing DJI drones illegal to operate — a withdrawal reportedly tied to U.S.–China diplomatic considerations. That leaves the FCC Covered List, not a sweeping Commerce ban, as the operative federal restriction, and it leaves the space notably unsettled.
Cross-check every purchase against all four regimes
The compliance risk is no longer buying an obviously banned drone. It is buying one that clears one list and quietly fails another. Run each item before a purchase order goes out.
- Confirm current Blue UAS Cleared status directly at bluelist.dcma.mil — not a cached or third-party copy, since DCMA is actively scaling intake.
- Verify the model has an FCC path: either a pre-December 22, 2025 equipment authorization, Blue UAS Cleared status, a Buy American exemption, or an individual FCC determination.
- For DoD or DoW buyers, screen the manufacturer and its supply chain against the Section 1260H list before the June 30, 2026 and June 30, 2027 contracting cutoffs.
- Check state law for the agency's jurisdiction — a Blue-List drone can still be barred by a Florida-style statute.
- Watch the calendar: several transitional pathways — including legacy Blue List approval, the ASDA Buy American route, and the FCC's two exemptions — are set to expire January 1, 2027 per OMB Memorandum M-26-02.
- For agencies replacing existing Chinese-made fleets, factor federal grant timing, since an estimated 85% of U.S. public-safety drones in active use are still DJI or Autel.
What buyers ask most
Is it illegal for my agency to keep using the DJI drones we already own?
No. Both the FCC Covered List action of December 22, 2025 and the American Security Drone Act are built around procurement and new equipment authorization, not retroactive seizure. Models the FCC authorized before that date remain legal to own, sell, and operate. The restrictions bite on your next purchase, not your existing fleet — though ASDA-covered agencies using federal funds should confirm their specific contract and grant terms, since some carry earlier operational cutoffs.
If a drone is on the Blue UAS Cleared List, are we cleared to buy it under every rule?
Not necessarily. Blue UAS Cleared status is one compliance surface — it satisfies DCMA vetting and is one recognized exemption off the FCC Covered List — but you must still check state restrictions separately and, for DoD or DoW buyers, confirm the manufacturer and its supply chain aren't implicated by the Section 1260H list, whose Section 805 contracting bans phase in June 30, 2026 and June 30, 2027. A Blue-List drone can still fail a state law or a DoW counterparty check.
Can our police department now legally shoot down or jam a drone over a public event?
Only through the still-narrow federal counter-UAS structure. The SAFER SKIES Act reauthorized DOJ and DHS detect-and-mitigate authority through 2028 and created a framework for state, local, and correctional agencies to eventually be trained and equipped for it — but as of mid-2026, independent deployment of mitigation technology generally requires operating under FBI task-force deputization for federally coordinated events. Standalone authority depends on finalized rulemaking and companion legislation such as H.R. 5061 that has not yet become law.
Cross-check the drone buy before you commit
Screening a UAS purchase against the current restriction lists is part of how we quote — send the airframe, payload, and controller lines and we'll confirm what clears before the order is placed.