美国FCC通过跨境通信安全新规:国际214条款授权商须守网络安全底线并申报5%持股与边境设施

美国联邦通信委员会(Federal Communications Commission,FCC)10月29日在 Washington 通过最终规则,加强对获准提供国际电信服务的运营商的监管,收紧进入美国的国际通信服务审查,重点提高美墨与美加边境跨境通信的透明度与信息披露。
新规更新了FCC的国际第214条款授权框架:授权持有人与申请人须遵循以国家标准与技术研究院(National Institute of Standards and Technology,NIST)标准为代表的基线网络安全做法;禁止使用或新增FCC覆盖清单(Covered List)上被认定对国家安全构成不可接受风险的设备与服务;获授权后须在一年内开始提供服务。
申报方面,申请人与授权持有人须提供用于美墨、美加跨境通信服务的设施信息;申请人须按5%的门槛申报持股情况;还须说明自身当前与预期的服务与市场,以及是否使用外国对手控制的第三方服务商。
FCC同时公布了2023年一次性信息收集的结果:数据库中约7,000名国际第214条款授权持有人中,约1,235名作了回复,其中4名报告有外国对手持股,另有2家已知有此类持股的机构没有回复。FCC将再开展一次一次性信息收集,为持续申报要求建立基线数据。
FCC还通过一项进一步拟议规则制定通知,就更多跨境安全措施征求意见,包括推定不向某些不受信任实体授予国际第214条款授权、增加网络与实体安全认证、禁止与不受信任实体签订容量租赁等安排、加强设施信息要求、与联邦机构共享信息,以及禁止位于外国对手国家的人员接触通信基础设施等。
这项命令与进一步通知的文号为 FCC 26-74,案卷号为 IB Docket No. 23-119 与 MD Docket No. 23-13,由主席 Brendan Carr 与委员 Anna Gomez、Olivia Trusty 表决批准,Brendan Carr 与 Olivia Trusty 另发表单独声明。
FCC Adopts Cross-Border Communications Security Rules: Baseline Cybersecurity, 5 Percent Ownership Reporting and Border Facility Disclosures for Section 214 Holders
The Federal Communications Commission (FCC) adopted final rules on October 29 in Washington bolstering security for carriers authorized to provide international telecommunications services, tightening oversight of international communications entering the United States and enhancing transparency for communications across the U.S.-Mexico and U.S.-Canada borders.
The rules modernize the FCC's international Section 214 framework. Authorization holders and applicants must adhere to baseline cybersecurity practices such as those promulgated by the National Institute of Standards and Technology (NIST); the use or addition of equipment and services on the FCC's Covered List is prohibited; and service must commence within one year of a grant of international Section 214 authority.
On reporting, applicants and authorization holders must provide information about facilities used to provide service crossing the U.S.-Mexico and U.S.-Canada borders; applicants must report ownership at a 5 percent threshold; and they must identify their services and geographic markets and whether they use third-party service providers controlled by foreign adversaries.
The FCC also reported findings from its 2023 one-time information collection: about 1,235 of roughly 7,000 international Section 214 authorization holders responded, four reported foreign adversary ownership, and two entities known to have such ownership did not respond. A further one-time collection will establish baseline data under the new rules.
A Further Notice of Proposed Rulemaking adopted the same day seeks comment on additional measures, including a presumption against granting Section 214 authority to certain untrusted entities, added cybersecurity and physical security certifications, bans on arrangements such as capacity leases with untrusted entities, enhanced facility information, information sharing with federal agencies, and bars on access to communications infrastructure by individuals located in foreign adversary countries.
The action was taken by Report and Order and Further Notice of Proposed Rulemaking, FCC 26-74, in IB Docket No. 23-119 and MD Docket No. 23-13, with Chairman Brendan Carr and Commissioners Anna Gomez and Olivia Trusty approving; Carr and Trusty issued separate statements.
来源:GSM·美国(原文链接)
图片来源:图:位于 Washington 的美国联邦通信委员会会议室,墙上可见FCC徽记。FCC照片,经 Wikimedia Commons。 / Photo: A meeting room at Federal Communications Commission headquarters in Washington, with the FCC seal on the wall. FCC photo, via Wikimedia Commons.

