What it does The agreement requires Tampnet to comply with CALEA and lawful U.S. process, place requested information within the United States, and refer foreign-government requests involving U.S. records or communications to the Department of Justice. It requires a Principal Equipment List, advance notice and DOJ non-objection for new equipment or certain outsourced or offshore services, a NIST-aligned cybersecurity plan, a U.S.-resident Security Officer and law-enforcement point of contact, and a remote-access policy for non-U.S. personnel. Tampnet must also provide annual compliance reports, permit inspections, and report breaches within five days of discovery.

Who it affects The commitments bind Tampnet Inc., Tampnet AS, Colombo Topco Limited, and their successors and controlled entities; they support DOJ review of Colombo’s proposed acquisition of Tampnet’s authorization from Brent Infrastructure Group I.B.V. The FCC is the licensing authority whose approval triggers several deadlines.

Why it matters The LOA illustrates how Team Telecom mitigation ties telecommunications authorization transfers to continuing executive-branch oversight of infrastructure, personnel, foreign access, lawful interception, and U.S. data. Breach may lead DOJ to ask the FCC to modify, condition, revoke, cancel, or nullify an authorization. The agreement supersedes Tampnet’s 2016 LOA.

Key dates and numbers

• Executed February 13, 2019; annual reports begin January 31, 2020.
• Principal Equipment List due within 30 days after FCC approval; new equipment and outsourcing/offshoring generally require 60 days’ advance notice.
• U.S. law-enforcement process must generally be supported within five business days; security incidents must be reported within five days.