US FAR Council NPRM — Federal Acquisition Regulation: Prohibition on Certain Semiconductor Products and Services (FAR Case 2023-008)

Mechanism

Section 5949(a) of the NDAA FY2023 directed the FAR Council to prohibit federal agency acquisition of covered semiconductor products from Semiconductor Manufacturing International Corporation (SMIC), ChangXin Memory Technologies (CXMT), Yangtze Memory Technologies Corp (YMTC), and their affiliates. The NPRM operationalises this through two distinct prohibition layers:

Part A — direct acquisition prohibition: Executive agencies may not acquire any electronic product or service that includes a "covered semiconductor product or service" from the designated entities. Critically, coverage extends to commercially-available-off-the-shelf (COTS) items and purchases below the micro-purchase threshold ($15,000), removing the longstanding procurement-regulation carve-out for routine commercial purchases.

Part B — critical-system supply-chain prohibition: Agencies may not acquire electronic products or services that use electronic parts or products incorporating covered semiconductors when the end item is destined for a "critical system." This is the more expansive chokepoint: it obligates prime contractors and their supply chains to map semiconductor provenance several tiers down, not merely for directly purchased components.

Disclosure and reporting requirements: Offerors aware of covered-semiconductor content must disclose in proposals to allow exception/waiver evaluation. On or after 23 December 2027, contractors discovering covered-semiconductor presence in delivered goods must report in writing within 72 hours.

The rule follows an Advanced Notice of Proposed Rulemaking (ANPR) published 3 May 2024. FAR Case 2023-008 references the parent statute's structure and is to be promulgated jointly by DOD (DFARS), GSA (GSAR), and NASA (NFS).

Downstream implications

• Demand-side chokepoint distinct from BIS export controls: Existing US semiconductor

decoupling architecture (Entity List, EAR controls on advanced ICs, FDPR rules) operates on the supply side — US exporters and foreign re-exporters. This rule operates on the demand side: the US federal government as buyer, representing multi-trillion dollars of annual procurement. Together they close both ends of the SMIC/CXMT/YMTC commercial path.

• COTS scope is structurally novel: Prior FAR semiconductor restrictions (e.g., Section

889 on Huawei/ZTE telecommunications equipment) exempted COTS below the micro-purchase threshold. Full COTS coverage here forces compliance reviews on IT commodity purchases — laptops, servers, storage, networking — not just purpose-built defense items.

• Critical-system Part B cascades to GovTech, federal cloud, and DOE/DOD primes:

Defense contractors, federal cloud providers (hyperscalers holding FedRAMP/IL4/IL5/IL6 authorisations), DOE national-lab modeling-and-simulation contractors, and federal telecom infrastructure owners face deep supply-chain audits for CXMT DRAM and YMTC NAND flash that have penetrated commercial bill-of-materials globally.

• Compliance cost driver at scale: Prime contractors must flow down disclosure and

72-hour reporting obligations across tier-1/2 suppliers. The ANPR comment record (2024) flagged supply-chain mapping costs as potentially exceeding hundreds of millions of dollars industry-wide.

• Effective date 23-Dec-2027 gives industry 20 months from final-rule finalization

(estimated late 2026 / early 2027) to remediate covered-semiconductor content — a compressed timeline given YMTC NAND flash integration depth in SSD stacks.

Open questions

• Will the final rule retain full COTS and micro-purchase coverage, or will it restore

a de-minimis threshold following industry comments?

• How will "critical system" be defined in the final rule — NDAA-2023 provides a broad

statutory definition; FAR implementation may tighten or retain that breadth.

• Will DOD implement a parallel DFARS class deviation before the FAR final rule lands,

consistent with its prior practice on Section 889 (Huawei/ZTE)?

• YMTC NAND flash market share in US government-procured SSDs: RFI data from the

ANPR indicated significant penetration in commercial-off-the-shelf storage products used by federal agencies — exact market-share figures remain confidential in the docket.