The Federal Communications Commission has adopted new security and disclosure requirements for telecommunications carriers authorized to provide international services, including enhanced reporting on communications facilities crossing the U.S.–Mexico and U.S.–Canada borders. Adopted October 29, 2026, under FCC 26-74, the Report and Order modernizes the Commission’s international Section 214 authorization framework, introducing cybersecurity requirements, restrictions on equipment and services identified as national-security risks, and more detailed reporting on foreign ownership and third-party service providers.

Under the new rules, international Section 214 authorization holders and applicants must follow baseline cybersecurity practices, including standards developed by the National Institute of Standards and Technology (NIST). The FCC also restricts the use or addition of specified equipment and services on its Covered List. Applicants must disclose ownership interests at a 5% reporting threshold, identify current or anticipated services and geographic markets, and report whether they use or expect to use third-party service providers controlled by foreign adversaries. Applicants and authorization holders must provide information about facilities supporting communications across the Canadian and Mexican borders. Newly authorized carriers must commence service within one year of receiving international Section 214 authority.

The decision follows the FCC’s 2023 Evolving Risks One-Time Information Collection, which produced approximately 1,235 responses from an estimated 7,000 international Section 214 authorization holders in the agency’s database. Four respondents disclosed foreign-adversary ownership, while two additional entities known to have such ownership did not respond. The Commission is establishing another one-time information collection to update its baseline information. Separately, a Further Notice of Proposed Rulemaking seeks comment on additional safeguards, including restrictions on capacity leases with untrusted entities, enhanced cybersecurity and physical-security certifications, and limits on infrastructure access by individuals located in foreign-adversary countries. Those measures are proposals, not adopted rules.

Analysis

The FCC’s decision extends national-security oversight beyond the initial approval of international telecommunications carriers. Section 214 authorizations encompass both facilities-based international telecommunications services and international resale services. The framework provides regulators with additional information about ownership, operational relationships, network infrastructure and cybersecurity practices.

The cross-border reporting requirement is particularly relevant to carriers operating terrestrial fiber routes linking the United States with Canada and Mexico. Such routes can involve distinct infrastructure owners, network operators and wholesale service providers. The disclosure obligations apply within the international Section 214 framework and should not be read as a blanket licensing requirement for every individual fiber asset.

The earlier information collection highlights limitations in the Commission’s current authorization records. Approximately 17.6% of the estimated 7,000 authorization holders responded, so the figures do not establish how prevalent foreign-adversary ownership is across the full population. The new collection is intended to improve that baseline.

The Further Notice could extend oversight to capacity leasing and physical access. Carriers should distinguish adopted obligations from proposals under consideration. Effective dates, certification details and treatment of existing commercial arrangements will require review of the final FCC order and implementing notices.

We’re tracking developments in telecom regulation, cross-border networks and network security. Follow Converge Digest security coverage.