What it does Frontier commits to the U.S. Department of Justice, including the FBI, to maintain a U.S.-based, DOJ-approved law-enforcement point of contact; screen personnel with access to its networks or U.S. records; comply with lawful U.S. process and CALEA; keep responsive records in the United States; and restrict foreign access or disclosure absent DOJ consent or a U.S. court order. It also requires cybersecurity and network-security plans, incident reporting, equipment and service-provider inventories, advance notice of new principal equipment and outsourced or offshored services, controls on non-U.S. network operations centers, annual compliance reports, and DOJ site visits.

Who it affects The obligations apply to Frontier and its wholly owned operating subsidiaries, as well as relevant vendors, contractors, outsourced or offshored providers, network operators, and custodians of U.S. customer and communications records. DOJ and the FBI receive review, objection, approval, reporting, and inspection rights.

Why it matters The agreement illustrates Team Telecom mitigation for a communications carrier whose ownership restructuring and authorization transfers raised national-security and law-enforcement concerns. Material breaches or unresolved risks could support an FCC recommendation to modify, condition, revoke, or nullify relevant authorizations.

Key dates and numbers

• December 17, 2020: Date of the LOA.
• FCC files include ISP-PDR-20200624-00005, ITC-ASG-20200625-00095 through -00109 (excluding -00101), and WC Docket No. 20-197.
• Frontier generally must report qualifying security incidents within 72 hours and notify DOJ within five days; third-party providers must disclose breaches or losses within 48 hours.
• The annual report is due one year after the LOA date and every year thereafter.
• The LOA becomes null and void if the restructuring described in the FCC Applications is not consummated.