What it does The agreement requires Northwest Fiber to comply with Lawful U.S. Process, keep responsive information in the United States, restrict disclosure of U.S. Records and Domestic Communications to foreign governments and unauthorized foreign persons, and maintain a U.S.-based law-enforcement point of contact. It also requires personnel screening, network-security and cybersecurity plans, incident reporting, controls on storage outside the United States, and advance notice or review of principal equipment, outsourced or offshored service providers, ownership changes, and material service changes. USDOJ receives inspection rights and may seek FCC action if a material commitment is not met.

Who it affects The obligations apply primarily to Northwest Fiber, its U.S. communications infrastructure, employees, contractors, managed network providers, vendors, and service providers, while providing review and notification rights to USDOJ and related Team Telecom agencies.

Why it matters The LOA makes national-security mitigation conditions part of the proposed Frontier-to-Northwest Fiber transaction and connects compliance failures to possible modification, revocation, or termination of FCC authorizations. It also establishes recurring oversight of foreign access, equipment, outsourcing, records, and security incidents.

Key dates and numbers

• Dated November 21, 2019; docket ISP-PDR-20190708-00006.
• LEPOC information due within 15 days; personnel-screening description due within 60 days.
• Updated security plans, principal-equipment list, and outsourced/offshored-provider list due within 90 days.
• Third-party breach or loss reporting: within 48 hours; Northwest Fiber incident notice to USDOJ: generally within 15 days; certain customer-information access incidents must be reported to the FBI and Secret Service within 7 days.
• Advance notice periods commonly require 30 days; annual reports begin one year after the LOA date.