United States Government Publishing Office publisher pbl distributor dst United States National Archives and Records Administration Office of the Federal Register author aut Government Organization text government publication eng FR Regulatory Information 2025_register executive 2025-08-19 article Rules and Regulations D09002ee1d6438680 D09002ee1d64386f3 United States Federal Communications Commission originator org United States Government Agency or Subagency In this document, the Federal Communications Commission (Commission) adopts rules that strengthen the Commission's caller ID authentication requirements by establishing clear practices for providers that rely on third parties to fulfill their STIR/SHAKEN implementation obligations. The rules authorize providers with a STIR/ SHAKEN implementation obligation to engage third parties to perform the technological act of digitally "signing" calls consistent with the requirements of the STIR/SHAKEN technical standards so long as: the provider with the implementation obligation makes the "attestation- level" decisions for authenticating caller ID information; and all calls are signed using the certificate of the provider with the implementation obligation--not the certificate of a third party. The rules also explicitly require all providers with a STIR/SHAKEN implementation obligation to obtain a Service Provider Code (SPC) token from the STIR/SHAKEN Policy Administrator and present that token to a STIR/SHAKEN Certificate Authority to obtain a digital certificate. Additionally, the rules include recordkeeping requirements for third- party authentication arrangements to enable the Commission to monitor compliance with and enforce Commission rules. 90 FR 40241 https://www.govinfo.gov/app/details/FR-2025-08-19/2025-15809 2025-15809 fr19au25-5 6712-01-P WC Docket No. 17-97 FCC 24-120 FR ID 304848 https://www.govinfo.gov/app/details/FR-2025-08-19/2025-15809 https://www.govinfo.gov/content/pkg/FR-2025-08-19/html/2025-15809.htm https://www.govinfo.gov/content/pkg/FR-2025-08-19/pdf/2025-15809.pdf Carrier Equipment Communications Common Carriers Reporting and Recordkeeping Requirements Telecommunications Telephone 16 p. 40241 40256 90 FR 40241 Title 47 Part 64 47 CFR Part 64 Call Authentication Trust Anchor; Federal Register Vol. 90, Issue RULE 2025-15809 FEDERAL COMMUNICATIONS COMMISSION 2025-09-18 WC Docket No. 17-97 FCC 24-120 FR ID 304848 6712-01-P 2025-15809 Final rule.

In this document, the Federal Communications Commission (Commission) adopts rules that strengthen the Commission's caller ID authentication requirements by establishing clear practices for providers that rely on third parties to fulfill their STIR/SHAKEN implementation obligations. The rules authorize providers with a STIR/ SHAKEN implementation obligation to engage third parties to perform the technological act of digitally "signing" calls consistent with the requirements of the STIR/SHAKEN technical standards so long as: the provider with the implementation obligation makes the "attestation- level" decisions for authenticating caller ID information; and all calls are signed using the certificate of the provider with the implementation obligation--not the certificate of a third party. The rules also explicitly require all providers with a STIR/SHAKEN implementation obligation to obtain a Service Provider Code (SPC) token from the STIR/SHAKEN Policy Administrator and present that token to a STIR/SHAKEN Certificate Authority to obtain a digital certificate. Additionally, the rules include recordkeeping requirements for third- party authentication arrangements to enable the Commission to monitor compliance with and enforce Commission rules.

These rules are effective September 18, 2025. For further information about the Notice of Proposed Rulemaking, contact Emily Caditz, Attorney Advisor, Competition Policy Division, Wireline Competition Bureau, at Emily.Caditz@fcc.gov. For additional information concerning the Paperwork Reduction Act proposed information collection requirements contained in this document, send an email to PRA@fcc.gov or contact Nicole Ongele at (202) 418-2991. Carrier Equipment Communications Common Carriers Reporting and Recordkeeping Requirements Telecommunications Telephone Call Authentication Trust Anchor, Emily.Caditz@fcc.gov PRA@fcc.gov https://docs.fcc.gov/public/attachments/FCC-24-120A1.pdf Vol. 90, no. 158 Office of the Federal Register, National Archives and Records Administration 2025-08-19 continuing daily deposited born digital 316 p. Table of Contents: AE 2.7: GS 4.107: AE 2.106: KF70.A2 https://www.govinfo.gov/app/details/FR-2025-08-19 P0b002ee1d64379d1 0097-6326 0042-1219 0364-1406 769-004-00000-9 000582072 f:fr19au25 https://www.govinfo.gov/app/details/FR-2025-08-19 https://www.govinfo.gov/content/pkg/FR-2025-08-19/pdf/FR-2025-08-19.pdf https://www.govinfo.gov/content/pkg/FR-2025-08-19/xml/FR-2025-08-19.xml fdlp 40219 40528 DGPO 2025-08-19 2025-08-19 FR-2025-08-19 machine generated eng FR FR-2025-08-19 90 158