What it does The agreement replaces Northwest Fiber’s November 21, 2019 LOA upon FCC approval. It requires U.S.-based, CMA-approved law-enforcement and security points of contact; personnel screening; controls on foreign-person access; compliance with lawful U.S. process and CALEA; U.S. handling and protection of records, communications, and infrastructure; cybersecurity and system-security plans; advance review of principal equipment, service providers, network-operations-center changes, storage locations, access countries, and material business changes; incident reporting within 72 hours; annual compliance reports; site visits; and possible third-party audits. The companies must also identify use of equipment or providers associated with the FCC Covered List, Commerce Entity List, or foreign adversaries.

Who it affects The commitments bind Northwest Fiber and its FCC-authorized subsidiaries, BCE Holding Corporation, and BCE Inc., with monitoring by the Committee, DOJ, and DHS. They cover employees, foreign persons, service providers, equipment vendors, network facilities, and U.S. customer and law-enforcement data.

Why it matters The LOA makes mitigation a continuing condition of the proposed transaction and gives the monitoring agencies ongoing visibility and objection rights. Breach or unresolved risks may support FCC action to modify, condition, revoke, or terminate relevant authorizations.

Key dates and numbers

• Signed May 29, 2025; it takes effect on the Date of FCC Approval.
• FCC applications and petition were filed December 6, 2024.
• Security incidents must be reported within 72 hours; CPNI breaches must be reported within seven business days.
• Initial personnel, equipment, service-provider, and access-country submissions generally are due within 30 days of FCC approval; plans are due within 60 days and training within 90 days.
• Annual reports are due one year after FCC approval and every year thereafter.