NDAA compliance stems from the National Defense Authorization Act (NDAA) for Fiscal Year 2019, Section 889. The legislation was enacted as a response to growing concerns over national security threats posed by certain telecommunications and surveillance equipment providers.