3060-1287
April 2024
Secure Telephone Identity Governance Authority Token Revocation Review Process
SUPPORTING STATEMENT
This existing information collection is being submitted to obtain approval from the Office of Management and Budget (OMB) for an extension of currently approved information collection requirements, as explained below.
Justification
Circumstances that make the collection necessary. On December 30, 2019, Congress enacted the Pallone-Thune Telephone Robocall Abuse Criminal Enforcement and Deterrence (TRACED) Act. The TRACED Act directed the Commission to require, no later than 18 months from enactment, all service providers to implement the STIR/SHAKEN caller ID authentication framework in the Internet protocol (IP) portions of their networks and implement an effective caller ID authentication framework in the non-IP portions of their networks. To implement the TRACED Act’s provisions related to caller ID authentication, the Commission adopted a Report and Order and Further Notice of Proposed Rulemaking on March 30, 2020, which required service providers to implement the STIR/SHAKEN caller ID authentication technology in the IP portions of their phone networks by June 30, 2021. See Call Authentication Trust Anchor, Implementation of TRACED Act Section 6(a)—Knowledge of Customers by Entities with Access to Numbering Resources, WC Docket Nos. 17-97 and 20-67, Report and Order and Further Notice of Proposed Rulemaking, 35 FCC Rcd 3241 (2020). The Commission then adopted a Second Report and Order on September 29, 2020 to further implement the remaining portions of the TRACED Act related to caller ID authentication and STIR/SHAKEN. See Call Authentication Trust Anchor, WC Docket No. 17-97, Second Report and Order, FCC 20-136 (adopted Sept. 29, 2020).
On August 5, 2021, the Commission adopted a Third Report and Order, which established a limited role for the Commission to oversee certificate revocation decisions by the private STIR/SHAKEN governance system that would have the effect of placing providers in noncompliance with the Commission’s rules. Within the STIR/SHAKEN framework, service providers share a digital certificate along with each call as a means of maintaining trust and accountability. The STIR/SHAKEN governance system can revoke a service provider’s access to these digital certificates due to that service provider’s violation of a specified list of rules and policies. Because this revocation would place an affected service provider in noncompliance with the Commission’s rules, the Third Report and Order established an oversight role for the Commission over the governance system’s token revocation decisions similar to the one the Commission holds in the context of decisions by the Universal Service Administrative Company. The rules allow for review by the Wireline Competition Bureau in the first instance.
Existing Information Collection Requirements:
Under the rules adopted in the Third Report and Order, a request for Commission review from a service provider, at a minimum, must contain: (1) a statement setting forth the service provider’s asserted basis for appealing the governance system’s revocation decision; (2) a full statement of relevant, material facts with supporting affidavits and documentation, including any background information the service provider deems useful to the Commission’s review; and (3) the question presented for review, with reference, where appropriate, to any underlying Commission rule or STIR/SHAKEN governance system policy.
The Commission asserted statutory authority for this information collection under 47 U.S.C. §§ 227b, 251(e), or 227(e) of the Communications Act of 1934.
This information collection does not affect individuals or households; thus; there is no impact under the Privacy Act.
Use of information. The Commission will use the information to provide targeted oversight to the private STIR/SHAKEN governance system.
Technology collection techniques. All submissions will me made electronically in the Commission’s Electronic Comment Filing System (ECFS).
Efforts to identify duplication. The information to be collected is unique to each revocation decision, and there are no similar collection requirements.
Impact on small entities. The Commission worked to minimize the amount of information each certification will require, requesting only the information necessary for the Commission to effectively review a revocation decision.
Consequences if information is not collected. If this information is not collected, the Commission will be unable to provide a full and complete review of a decision by a private entity that would have the effect of placing a service provider in noncompliance with the Commission’s caller ID authentication rules.
Special circumstances. We do not foresee any special circumstances with this information collection.
Federal Register notice; efforts to consult with persons outside the Commission. The Commission published a 60-Day Notice in the Federal Register as required by 5 CFR 1320.8(d) on February 13, 2024 (89 FR 10072). No PRA comments were received from the public as result of this Notice.
Payments or gifts to respondents. The Commission does not anticipate providing any payment or gifts to respondents.
Assurances of confidentiality. The Commission will consider the potential confidentiality of any information submitted, particularly where public release of such information could raise security concerns (e.g., granular location information). Respondents may request materials or information submitted to the Commission or to the Administrator be withheld from public inspection under 47 C.F.R. § 0.459 of the Commission’s rules.
Questions of a sensitive nature. There are no questions of a sensitive nature with respect to the information collection described herein.
Estimates of the hour burden of the collection to respondents. The following represents the hour burden on the collection of information:
Number of Respondents: Approximately 50 service providers.
Frequency of Response: Upon request by the service provider.
Total number of responses per respondent: 1.
Estimated time per response: 24 hours.
Total hour burden: 1,200 hours.
24 hours per response per respondent for 50 service providers. Total annual hour burden is calculated as follows:
50 respondents x 1 response per respondent = 50 responses x 24 hours = 1,200 total hours.
Explanation of calculation: We estimate that each service provider will take, on average, 24 hours per response. We estimate that respondents use mid- to senior-level personnel to comply with the requirements comparable in pay to the Federal Government, approximately $64.06 per hour (equivalent to a GS-13, step 5 federal employee).
50 (number of responses) x 24 (hours to prepare response) x 1 (responses per respondent) x $64.06/hr. = $76,872.
Total Number of Respondents: 50 unique respondents
Total Number of Responses: 50 responses
Total Hourly Burden: 1,200 burden hours
Total
In-House Costs to Respondents: $76,872
Estimates for the cost burden of the collection to respondents. The Commission believes that service providers have sufficient “in-house” staff to address all the information collection requirements using their “in-house” personnel rather than having to contract out this requirement. Thus:
(a) Total annualized capital/startup costs: $0.00
(b) Total annualized costs (O&M): $0.00
(c) Total annualized cost requested: $0.00
Estimates of the cost burden to the Commission.
Costs to the Commission to set up the collection process will potentially be $64.06/hr. (GS-13, step 5 federal employee) x 1 hour (to set up the designated Electronic Comment Filing System inbox to receive request for review) = $64.06. Additionally, costs to the Commission to review each submission will potentially be $64.06/hr. (GS-13, step 5 federal employee) x 50 (number of respondents with one response each) x 3 hours (for staff to review each submission) = $9,609.
Total Cost to the Federal Government: $64.06 + $9,609 = $9,673.06
Program changes or adjustments. There are no program changes or adjustments to this information collection.
Collections of information whose results will be published. The filings service providers submit with their request for review will be publicly available in the Commission’s Electronic Comment Filing System.
Display of expiration date for OMB approval of information collection. There is no paper form associated with this information collection; it will be collected electronically through the Commission’s Electronic Comment Filing System. OMB approval of the expiration of the information collection will be displayed on OMB’s website.
Exceptions to certification for Paperwork Reduction Act submissions. There are no exceptions to the Certification Statement.
Collections of Information Employing Statistical Methods:
No statistical methods are employed.
| File Type | application/vnd.openxmlformats-officedocument.wordprocessingml.document |
| Author | Jordan Marie Reth |
| File Modified | 0000-00-00 |
| File Created | 2024-07-23 |