What it does This agreement with the U.S. Department of Justice, including the FBI, governs access to U.S. Records, domestic communications, communications infrastructure, and principal telecommunications equipment. It requires a U.S.-based law-enforcement point of contact, prompt responses to lawful U.S. process, CALEA compliance, personnel screening, restrictions on foreign access and disclosure, cybersecurity and system-security plans, incident reporting, equipment and service-provider disclosures, annual compliance reports, and DOJ site-visit access. Plant must report security incidents or material breaches within 72 hours and generally respond to lawful U.S. process within five days.

Who it affects The commitments bind Plant, its wholly owned subsidiaries—Plant TiftNet, Plant Long Distance, and Plant Telenet—and TruVista. They also cover approved contractors, outsourced or offshored service providers, personnel with access to relevant systems or records, and foreign telecommunications relationships.

Why it matters The LOA establishes continuing DOJ oversight of operational, personnel, cybersecurity, supply-chain, data-location, ownership, and network-management risks arising from the proposed authorization transfer. Breach or unresolved national-security concerns may support FCC action to modify, condition, revoke, cancel, or terminate relevant authorizations.

Key dates and numbers

• Signed May 31, 2022; the agreement references TT 21-073 to -074, ITC-T/C-20211104-00161, and WC 21-432.
• Many initial notices and plans are due 15, 30, or 60 days after the Date of FCC Approval; annual reports begin one year after that date.
• Security-incident and specified third-party breach notifications are due within 72 hours; CPNI breaches must also be reported within seven business days.