FCC Corrects Course, Outlines Improved Cybersecurity Measures

The Federal Communications Commission took action to rescind a prior Declaratory Ruling misconstruing the Communications Assistance for Law Enforcement Act (CALEA).  The Order also withdraws an Notice of Proposed Rulemaking (NPRM) that accompanied that Declaratory Ruling, which was based in part on the Declaratory Ruling’s legal analysis and proposed cybersecurity requirements. This action follows months-long engagement with communications service providers where they have demonstrated a strengthened cybersecurity posture following Salt Typhoon.  The FCC has engaged with providers that have agreed to take “extensive, urgent, and coordinated efforts to mitigate operational risks, protect consumers, and preserve national security interests” against the range of cyberattacks that target their networks.  This action reinforces this commitment going forward.