The United States led the way with the National Defense Authorisation Act (NDAA). To protect against Chinese espionage, the NDAA lists specific components and companies that may not be used for telecommunications equipment (including security products) or services to sell the end products to U.S. federal agencies, their contractors, and grant or loan recipients and related entities.
More countries followed suit with the U.K. and Australia, and the EU launched the Cyber Resilience Act (CRA) late last year. These companies and components of Chinese origin listed in the NDAA are suspected of being used for spying and espionage by the Chinese government.
