Uniqcli

InsightsProcurement Guidance

NDAA-Compliant Drones: The Four Lists Every Buyer Must Clear

"NDAA-compliant" is no longer one checkbox. As of mid-2026, a drone purchase must clear the Blue UAS Cleared List, the FCC Covered List, the DoD 1260H contracting bans, and a patchwork of state laws — each with its own scope and expiration dates.

By Uniqcli Team · · 6 min read

Key takeaways

  • A compliant drone purchase now must clear four separate regimes: the Blue UAS Cleared List, FCC Covered List, DoD 1260H bans, and state laws.
  • Blue UAS Cleared List management moved from DIU to DCMA's US-X on Dec 3, 2025; the authoritative source is now bluelist.dcma.mil.
  • Since Dec 22, 2025 the FCC Covered List bars new equipment authorizations for foreign-produced UAS, but earlier-authorized models stay legal.
  • Section 1260H bars DoW contracts with listed Chinese military companies from June 30, 2026, extending to subcontractor supply chains June 30, 2027.
  • Several transitional compliance pathways, including legacy Blue List approval, are set to expire January 1, 2027 per OMB Memorandum M-26-02.
On this page

Procurement Guidance

"NDAA-compliant" stopped being one checkbox

The phrase implies a single test a drone either passes or fails. In practice, a compliant purchase now has to clear four separate regimes at once — procurement eligibility, import and sale eligibility, Department of War counterparty rules, and a growing set of state statutes. Each list has a different scope, a different effective date, and in several cases a different expiration date, and there is no single source of truth that reconciles them.

The Blue UAS Cleared List today

The most familiar list changed hands over the past year. Management of the Blue UAS Cleared List formally transitioned from the Defense Innovation Unit to the Defense Contract Management Agency on December 3, 2025 — ahead of the original January 1, 2026 target — following a July 10, 2025 Secretary of War memo titled "Unleashing U.S. Military Drone Dominance." DCMA now runs the list through its new Unmanned Systems–Experimental Command (US-X) at Palmdale, California, and the authoritative source moved to bluelist.dcma.mil.

The list has also been growing. As of November 2025, per DIU's transition release, the ecosystem had certified more than 39 drone systems and over 165 components across DoD and the wider U.S. government, with 81 companies and third-party "Recognized Assessors" participating. Third-party trackers report the cleared list exceeding 50 platforms by early 2026 as DCMA scales its intake process.

There are now three routes onto the list: DoW Sponsorship, the Competitive Process, and the Recognized Assessors process. That third track matters for buyers because, as of July 16, 2025, DIU began recognizing AUVSI's Green UAS certification as an authorized, streamlined pathway directly into Blue UAS Cleared status — widening the funnel of platforms that can reach the list without a full competitive cycle.

Four lists, four different questions

A drone can satisfy one of these and silently fail another. Each answers a distinct question, and passing one is not evidence about the others.

The federal restrictions, and why they don't line up

The American Security Drone Act of 2023 reached its core milestone on December 22, 2025, when the procurement and operation prohibition on covered foreign-made UAS took effect for federal agencies. Critically, the law also reaches federal grant and cooperative-agreement recipients — state and local agencies and universities spending federal dollars — effectively pulling them off covered drones as well. At the acquisition-regulation level, FAR clause 52.240-1 has been required in solicitations and contracts issued on or after November 12, 2024.

The FCC's action is a separate track with separate mechanics. On December 22, 2025, the Public Safety and Homeland Security Bureau added all foreign-produced UAS and critical components to the FCC's Covered List — a first-of-its-kind categorical move — naming DJI and Autel per the FY2025 NDAA's statutory deadline. It is not retroactive: models authorized before that date remain legal to import, sell, and operate; only new models are blocked. Effective January 7, 2026, the FCC opened two exemption pathways — Blue UAS Cleared status, and equipment meeting Buy American domestic-content thresholds — plus individualized determinations from the Department of War or DHS.

One consolidation that could have simplified all of this went the other way. In early January 2026, the Commerce Department withdrew a broader proposed rule that would have restricted core internal drone systems and could have made existing DJI drones illegal to operate — a withdrawal reportedly tied to U.S.–China diplomatic considerations. That leaves the FCC Covered List, not a sweeping Commerce ban, as the operative federal restriction, and it leaves the space notably unsettled.

Cross-check every purchase against all four regimes

The compliance risk is no longer buying an obviously banned drone. It is buying one that clears one list and quietly fails another. Run each item before a purchase order goes out.

  • Confirm current Blue UAS Cleared status directly at bluelist.dcma.mil — not a cached or third-party copy, since DCMA is actively scaling intake.
  • Verify the model has an FCC path: either a pre-December 22, 2025 equipment authorization, Blue UAS Cleared status, a Buy American exemption, or an individual FCC determination.
  • For DoD or DoW buyers, screen the manufacturer and its supply chain against the Section 1260H list before the June 30, 2026 and June 30, 2027 contracting cutoffs.
  • Check state law for the agency's jurisdiction — a Blue-List drone can still be barred by a Florida-style statute.
  • Watch the calendar: several transitional pathways — including legacy Blue List approval, the ASDA Buy American route, and the FCC's two exemptions — are set to expire January 1, 2027 per OMB Memorandum M-26-02.
  • For agencies replacing existing Chinese-made fleets, factor federal grant timing, since an estimated 85% of U.S. public-safety drones in active use are still DJI or Autel.

Counter-UAS authority moved the other direction

While the buy side fragmented, the counter-drone side expanded. The SAFER SKIES Act, enacted as part of the FY2026 NDAA signed into law in late December 2025, reauthorized DOJ and DHS detect-and-mitigate authority through 2028 after it lapsed during a 2025 government shutdown, and for the first time extended a nationwide framework for state, local, and correctional agencies to be trained and equipped to counter drones threatening public safety and critical infrastructure.

That framework is not yet a green light for independent action. As of mid-2026, state and local agencies generally still cannot deploy mitigation technology on their own; they operate via FBI task-force deputization during federally coordinated events. Pending companion legislation — H.R. 5061 in the 119th Congress — would add national C-UAS training standards and establish the first Counter-UAS Mitigation Law Enforcement Pilot Program, but it has not become law.

The money is already moving. FEMA has issued $250 million in FY2026 grants to 11 states plus the National Capital Region for counter-UAS readiness tied to the 2026 FIFA World Cup and the nation's 250th-anniversary events, with a second $250 million tranche planned to extend C-UAS grant funding to all states and territories under a broader two-year, $500 million program. The net effect is a genuine asymmetry: state and local agencies are being handed broader authority to counter drones than they have clear, standalone authority to buy compliant replacements.

What buyers ask most

Is it illegal for my agency to keep using the DJI drones we already own?

No. Both the FCC Covered List action of December 22, 2025 and the American Security Drone Act are built around procurement and new equipment authorization, not retroactive seizure. Models the FCC authorized before that date remain legal to own, sell, and operate. The restrictions bite on your next purchase, not your existing fleet — though ASDA-covered agencies using federal funds should confirm their specific contract and grant terms, since some carry earlier operational cutoffs.

If a drone is on the Blue UAS Cleared List, are we cleared to buy it under every rule?

Not necessarily. Blue UAS Cleared status is one compliance surface — it satisfies DCMA vetting and is one recognized exemption off the FCC Covered List — but you must still check state restrictions separately and, for DoD or DoW buyers, confirm the manufacturer and its supply chain aren't implicated by the Section 1260H list, whose Section 805 contracting bans phase in June 30, 2026 and June 30, 2027. A Blue-List drone can still fail a state law or a DoW counterparty check.

Can our police department now legally shoot down or jam a drone over a public event?

Only through the still-narrow federal counter-UAS structure. The SAFER SKIES Act reauthorized DOJ and DHS detect-and-mitigate authority through 2028 and created a framework for state, local, and correctional agencies to eventually be trained and equipped for it — but as of mid-2026, independent deployment of mitigation technology generally requires operating under FBI task-force deputization for federally coordinated events. Standalone authority depends on finalized rulemaking and companion legislation such as H.R. 5061 that has not yet become law.

Cross-check the drone buy before you commit

Screening a UAS purchase against the current restriction lists is part of how we quote — send the airframe, payload, and controller lines and we'll confirm what clears before the order is placed.

Ask AI about Uniqcli

Why buyers use Uniqcli

About the author

Uniqcli Team

Uniqcli's newsroom, buying guides and glossary are produced by our in-house team — seven procurement and technology professionals who source, screen and integrate IT and security hardware every day, working with two editors. Practitioners draft from live sourcing and integration work; editors review every piece for accuracy and plain language before it publishes.

More about the Uniqcli Team

Ready to scope your program?

Talk to a Uniqcli engineer, or send a bill of materials for a TAA-verified quote — no payment up front.