View Rule

On June 6, 2019, the Commission adopted a Declaratory Ruling and Third Further Notice of Proposed Rulemaking (CG Docket No. 17-59, WC Docket No. 17-97) that proposed and sought comment on mandating implementation of STIR/SHAKEN in the event that major voice service providers did not voluntarily implement the framework by the end of 2019.

On December 30, 2019, Congress enacted the Pallone-Thune Telephone Robocall Abuse Criminal Enforcement and Deterrence (TRACED) Act.  Along with numerous other provisions directed at addressing robocalls, the TRACED Act directs the Commission to require all voice service providers to implement STIR/SHAKEN in the Internet Protocol (IP) portions of their networks, and to implement an effective caller ID authentication framework in the non-IP portions of their networks.  The TRACED Act further creates processes by which voice service providers may be exempt from this mandate if the Commission determines they have achieved certain implementation benchmarks, and by which voice service providers may be granted a delay in compliance based on a finding of undue hardship because of burdens or barriers to implementation or based on a delay in development of a caller ID authentication protocol for calls delivered over non-IP networks.

On March 31, 2020, the Commission adopted a Report and Order and Further Notice of Proposed Rulemaking (WC Docket Nos. 17-97, 20-67).  The Report and Order mandated that all originating and terminating voice service providers implement the STIR/SHAKEN caller ID authentication framework in the IP portions of their networks by June 30, 2021.  In the Further Notice the Commission sought comment on proposals to further promote caller ID authentication and implement the TRACED Act.

On September 29, 2020, the Commission adopted a Second Report and Order (WC Docket No. 17-97).  The Second Report and Order implemented rules (1) granting extensions for compliance with the STIR/SHAKEN implementation mandate for small voice service providers, voice service providers that cannot obtain a SPC token from the Governance Authority, services scheduled for section 214 discontinuance, for those portions of a voice service provider’s network that rely on non-IP technology, and establishing a process for individual voice service providers to seek provider specific extensions;(2) requiring voice service providers using non-IP technology either to upgrade their networks to IP to enable STIR/SHAKEN implementation, or work to develop non-IP caller ID authentication technology and implement a robocall mitigation program in the interim; (3) establishing a process where by a voice service provider may be exempt from the STIR/SHAKEN implementation mandate if the provider has achieved certain implementation benchmarks; (4) prohibiting voice service providers from imposing line item charges on consumer and small business subscribers for caller ID authentication; and (5) requiring intermediate providers to implement STIR/SHAKEN. On May 20, 2021, the Commissioned released a Third Further Notice of Proposed Rulemaking proposing to shorten the small provider extension from two years to one for a subset of small voice service providers that are at a heightened risk of originating an especially large amount of robocall traffic.

On January 13, 2021, the Commission adopted a Second Further Notice of Proposed Rulemaking proposing and seeking comment on a limited role for the Commission to oversee certificate revocation decisions by the private STIR/SHAKEN Governance Authority that would have the effect of placing providers in noncompliance with the Commission’s rules. On August 5, 2021, the Commission adopted a Third Report and Order which adopted rules creating this oversight role.

On September 30, 2021, the Commission adopted a Fourth Further Notice of Proposed Rulemaking proposing to require gateway providers to apply STIR/SHAKEN caller ID authentication to, and perform robocall mitigation on, foreign-originated calls with U.S. numbers, seeking comment on revisions to the information that filers must submit to the Robocall Mitigation Database, and clarifying the obligations of voice service providers and intermediate providers with respect to calls to and from Public Safety Answer Points and other emergency services providers.

On December 9, 2021, the Commission adopted a Fourth Report and Order adopting rules requiring non-facilities based small voice providers implement SITR/SHAKEN by June 30, 2022, and requiring small voice providers of any kind suspected of originating illegal robocalls to implement STIR/SHAKEN on an accelerated timeline.

On May 19, 2022, the Commission adopted a Fifth Report and Order, Order on Reconsideration, Order, and Fifth Further Notice of Proposed Rulemaking. The Fifth Report and Order and Order required gateway providers to submit a certification to the Robocall Mitigation Database, implement STIR/SHAKEN caller ID authentication as well as several other requirements, including an obligation to mitigate illegal robocall traffic and submit a mitigation plan to the Robocall Mitigation Database regardless of their STIR/SHAKEN implementation status. The Order on Reconsideration expanded the obligation of domestic providers to block calls carrying US NANP numbers from foreign providers not listed in the Robocall Mitigation Database.  The Fifth Further Notice of Proposed Rulemaking sought comment on further steps to combat illegal robocalls, including extending requirements for authentication and filing in the Robocall Mitigation Database, requiring additional measures for robocall mitigation, enhancing enforcement mechanisms and other related issues aimed at closing existing potential loopholes.