Summary: In May 2026 the Federal Communications Commission (FCC) admitted that cutting off software updates to the already existing millions of DJI drones would create more security risks than the December 2025 ban was meant to fix. The FCC has extended the firmware waiver, which means that DJI drones are still able to receive updates until January of 2029. However, the ban on importing DJI drones will still stay in place
In order to understand the FCC drone waiver, you must first understand how the DJI drone ban came to be. DJI is a Chinese drone manufacturing company headquartered in Shenzhen that controls a high percentage of the U.S. consumer drone market. A monopolistic market share held by a foreign competitor raises significant geopolitical and national security concerns.
The primary risk centers on foreign espionage, specifically the unauthorized collection and exfiltration of sensitive video footage, critical infrastructure layouts, and intellectual property to adversarial states.
In October 2025, the FCC began to revoke approvals for technology deemed a national security risk. In December 2025, the FCC added all foreign-made drones and their critical components to the Covered List- a regulatory index of equipment and services that are deemed an unacceptable risk to U.S. national security. Under this designation, new drone models made by foreign manufacturers, like DJI, Autel, and TP-Link, are blocked from receiving the mandatory FCC equipment certification required for import or sale in the United States.
Adding DJI drones to the Covered List automatically blocked them from receiving new firmware patches and security updates. The original terms of the waiver would have cut those updates off entirely by January, 2027, creating a major security loophole that eventually forced the creation of the FCC drone waiver.
The problem resides at the sheer scale. Millions of DJI drones are already owned by hobbyists, commercial operators, public safety agencies, etc. A ban on new imports does not make those aircrafts simply disappear, it just freezes that population in place. Discontinuing security patches for millions of operational devices leaves them permanently exposed and compounds the existing security risk. The Consumer Technology Association, which represents most major U.S. technology firms, recognized this issue and urged the FCC to extend the waiver. The FCC ultimately agreed that blocking security patches could create even more cybersecurity threats that the government is trying to prevent.
The updated FCC drone firmware update waiver, detailed in Public Notice DA 26-454, performs 3 actions:
What the Waive Does NOT Do:
The DJI drone ban was never going to clear the skies. The import ban stopped them from coming in, but it did not ground what is already flying. The May 2026 Waiver has confirmed that the already existing drones will remain active, supported, and continue to receive updates through at least 2029.
While blocking new retail imports does limit the instream of new foreign technology, that is only half of the problem. A facility's immediate threat is what is currently in the air, not what is sitting on shelves. These drones have a life span; through frequent use the existing fleet will eventually shrink. However, lifespan and country of origin does not change the fundamental requirements of airspace defense. No matter what company manufactured the drone, effective security is knowing what is in your airspace and where the pilot is at any given time.
Pinpointing a pilot's exact location is far more critical than organizations realize. A drone without a known pilot location gives you an incident. A drone with a pilot location gives you a response and that means a detection system that works regardless of who manufactured the drone. A system that only catches DJI, or only catches one brand, isn't perimeter defense. It's a gap waiting for the next manufacturer to fly through it.
For correctional facilities, stadiums, critical infrastructure, and any other organization that is responsible for protecting a physical perimeter, the massive DJI fleet posing as a threat to your safety is not going away. With three more years of firmware support now added, the question is whether you can see, identify, and find the pilot when it matters.
What are the new FCC rules for drones in 2026?
U.S. drone regulations shifted significantly throughout 2025 and 2026. Regarding the actual equipment, new foreign-made drones no longer pass the FCC certification. This blocks new DJI and other non-compliant drone models from entering the market. However, drones that are already owned and previously approved by the FCC can still legally fly and will continue to receive firmware and software updates up until January 2029 under the FCC’s extender waiver. Federal and state agencies are also increasingly required to use domestically manufactured or NDAA-compliant drones for any publicly funded projects.
The standard baseline rules still remain in effect for all operators, including Remote ID broadcasting, which requires drones to continuously transmit their location, altitude, and pilot position in real time.
Why is DJI Blacklisted?
DJI was blocked from importing new consumer drones into the U.S. due to national security concerns. The FCC added not only DJI but many other foreign-made drone companies to its covered list. This list restricts which new foreign made drone models from receiving FCC equipment authorization. It is feared that drone technology can be weaponized or used in order to collect sensitive data that can be transmitted back to China.
Is the FCC Going to Ban DJI Drones?
While the FCC has taken significant steps in restricting DJI drones, there has not been a full ban as of yet. There are millions of DJI drones already in the U.S., and they are legal to operate. In fact, in May 2026 the FCC updated DJI's firmware waiver, which means these drones will keep receiving security updates through January 2029 — a signal that DJI's presence in U.S. airspace isn't disappearing anytime soon.
What is Remote ID for Drones?
Remote ID is an FAA mandate that functions as a digital license plate for drones. This technology broadcasts the drone’s location, serial number, as well as where the pilot is located in real time.