October 30, 2026

FCC Overhauls International Section 214 Rules, Expanding Ownership, Cybersecurity and Continuing Reporting Requirements

9 min

On October 29, 2026, the Federal Communications Commission adopted sweeping changes to its International Section 214 rules that will significantly expand the information required from applicants and existing authorization holders and impose new continuing compliance obligations. The item would impose new requirements on applicants and existing authorization holders and would have significant implications for private equity funds, infrastructure investors, lenders, and other parties investing in companies that hold international Section 214 authority. Among other changes, the FCC lowered the ownership reporting threshold from 10% to 5%, adopted a new one-time information collection for existing authorization holders, and imposed new requirements concerning cybersecurity, Covered List equipment and services, cross-border facilities, foreign-adversary-linked service providers, and commencement of service.

Among the most consequential changes, the FCC will now require disclosure of direct and indirect ownership interests at the 5% level, require existing authorization holders to participate in a new one-time information collection, and establish a continuing obligation to notify the FCC of certain material changes within 30 days.

Why Investors Should Pay Attention

The ownership changes will have consequences well beyond traditional telecommunications regulatory compliance.

Under the new framework, an applicant will generally need to identify persons and entities holding 5% or more of its direct or indirect equity or voting interests, rather than the 10% threshold traditionally used under Section 63.18(h). That potentially brings funds, co-investors, limited partners, and other upstream investors into public FCC ownership disclosures even where they have no operational role in the authorization holder.

A limited exception would apply to certain interests between 5% and 10% held through a U.S. publicly traded company where the public company does not have actual knowledge of the interest holder. However, the Commission would not create comparable exemptions simply because an investor is passive or insulated from management, or because an interest is held through a privately held or non-U.S. public company.

This could make FCC compliance relevant to investment structures that previously fell below the agency's reporting threshold. Transaction parties should therefore consider FCC attribution rules early in diligence rather than relying solely on economic ownership percentages. Equity interests generally are traced through ownership chains on a pass-through basis, while voting interests can require more complicated attribution analysis, particularly for limited partnerships and limited liability companies.

The new disclosure regime also may conflict with confidentiality provisions contained in fund agreements, subscription documents, side letters, and similar arrangements. Investors and authorization holders should determine before a filing is required whether contractual restrictions permit disclosure of investor identity and related information to the FCC.

Existing Authorization Holders Face a New Information Collection

The FCC also will require existing international Section 214 authorization holders to make a comprehensive one-time filing.

That filing would extend well beyond the foreign-ownership information collected by the Commission in 2023 and 2024. Among other things, holders would be required to provide information concerning ownership and control, international network facilities, services and geographic markets, certain third-party providers, cybersecurity practices, Covered List equipment and services, and specified adjudicated compliance matters.

Authorization holders with multiple international Section 214 authorizations also would identify those authorizations and explain the need for maintaining more than one. The FCC is encouraging carriers to surrender unnecessary or duplicative authorizations.

The filing deadline will not occur immediately. Many of the new information-collection requirements require approval from the Office of Management and Budget under the Paperwork Reduction Act. The FCC's Office of International Affairs will announce the effective date and filing deadline following that process.

Nevertheless, holders should begin preparing now because assembling the required ownership, network, vendor, and compliance information may require substantial coordination across legal, regulatory, network engineering, cybersecurity, procurement, and finance functions.

New Information Required in Section 214 Applications

The rules also will materially expand the information required in applications for new international Section 214 authority and in many modification, assignment, and transfer-of-control proceedings.

  1. Cross-Border Network Infrastructure. Facilities-based applicants would provide detailed information about facilities used to carry communications across the Canadian and Mexican borders, potentially including relevant data centers, points of presence, and private interconnection facilities.

    Required information could include facility locations and ownership, IP prefixes and autonomous system numbers, principal network equipment, services provided through the facility, and certain physical or remote access involving foreign-adversary-linked entities or personnel. Resale applicants would instead identify relevant wholesale or intermediary carriers and, where applicable, underlying mobile network operators.

  2. Services and Markets

    Applicants would describe the international services they provide or plan to provide, the types of customers served, whether services are facilities-based or resold, and the geographic markets involved.

  3. Managed Service Providers

    Applicants also would disclose certain use of foreign-adversary-controlled or Covered List entities in providing managed services supporting their Section 214 operations, as well as providers presenting specified foreign-adversary access concerns. These disclosures could themselves increase the likelihood that an application will receive executive branch national-security review.

  4. Cybersecurity

    Applicants would certify compliance with baseline cybersecurity practices organized around an established risk-management framework and internationally recognized cybersecurity practices. The Commission identifies a program based on the NIST Cybersecurity Framework, together with the CISA Cross-Sector Cybersecurity Performance Goals or the CIS Controls, as a means of presumptively satisfying the requirement.

  5. Covered List Equipment and Services

    Applicants also would make certifications concerning equipment and services appearing on the FCC's Covered List. New authorization holders generally would be prohibited from using or adding covered equipment or services for their international Section 214 operations, while existing holders would be restricted from adding covered equipment or services after the rules become applicable.

  6. Compliance History

    Applications also would include certifications addressing specified adjudicated misconduct, including certain material Communications Act violations, national-security violations, false statements or fraud, and material breaches of authorization conditions or mitigation agreements.

The certifications focus on adjudicated conduct rather than requiring applicants to report every allegation or pending dispute.

Section 214 Authority Will Carry More Continuing Obligations

Perhaps the most significant conceptual change is that obtaining an international Section 214 authorization would no longer be largely the end of the FCC licensing process. Authorization holders would face several ongoing requirements. As a result, international Section 214 compliance increasingly will need to be incorporated into ordinary corporate governance and transaction-closing procedures rather than addressed only when a company happens to file an FCC application.

  1. Commencement of service. New authorization holders generally would have one year after grant to begin providing authorized international service and would notify the FCC within 30 days after commencing service. Existing holders also would have to advise the Commission whether they have begun providing service.

  2. Discontinuance. An authorization holder that ceases providing international service for three consecutive months generally would be required to surrender its authorization and make the required FCC notification.

  3. Cross-border facilities. Facilities-based carriers would have continuing notification obligations when they begin using certain new cross-border facilities or underlying providers.

  4. Cybersecurity. Existing holders would have one year to implement a compliant cybersecurity program, while new holders would need to have the required program in place when service begins.

  5. Covered List compliance. Existing authorization holders would be prohibited from adding specified Covered List equipment or services, although the new rule generally would not require removal of equipment already deployed.

  6. Material changes. Authorization holders would have 30 days to notify the FCC of material changes to information or certifications previously provided to the agency. This requirement deserves particular attention in transaction planning. The FCC specifically contemplates that a newly reportable 5% owner can constitute a material change. Changes involving network facilities, services, markets, third-party providers, or regulatory certifications also may trigger reporting.

  7. Enforcement Risks Also Increase

    The FCC's new framework expressly links compliance with these continuing obligations to continued authority to operate. Failure to satisfy reporting requirements could provide grounds for forfeitures, termination, or revocation of an authorization. The Commission also would retain authority to review an international Section 214 authorization when circumstances warrant.

    Separately, the FCC intends to address authorization holders that failed to respond to the Commission's 2023–2024 information collection. The Office of International Affairs would publish a list of apparent nonresponders and establish a process that could ultimately result in revocation if the holder neither responds nor surrenders its authority.

  8. What Authorization Holders and Transaction Parties Should Do Now

    Companies holding international Section 214 authority—and parties investing in or acquiring those companies—should begin preparing before the new filing requirements become effective.

    Priority steps include:

    • Inventory Section 214 authorizations. Determine which entities hold international authority, whether each authorization remains necessary, whether service has commenced, and whether the required 2023–2024 information-collection response was submitted.

    • Revisit ownership analyses. Identify direct and indirect equity and voting interests that may become reportable under the 5% standard, including interests held through funds, partnerships, and LLC structures.

    • Review investor confidentiality restrictions. Determine whether partnership agreements, side letters, or other contractual commitments could restrict required FCC disclosures.

    • Map relevant network infrastructure. Facilities-based providers should begin identifying potentially reportable cross-border facilities and associated equipment, ownership, IP, ASN, and access information. Resellers should identify relevant underlying providers.

    • Review vendors and supply chains. Screen relevant equipment, service providers, and managed-service arrangements for Covered List and foreign-adversary connections.

    • Formalize cybersecurity compliance. Confirm that the company's cybersecurity program can support the new FCC certification requirements and document the applicable framework.

    • Build FCC reporting into transaction documents. Purchase agreements and closing checklists should allocate responsibility for required filings, certifications, ownership updates, and post-closing notifications.

    • Create a material-change process. Compliance procedures should be capable of identifying potentially reportable changes and escalating them quickly enough to satisfy a 30-day FCC deadline.

The FCC Is Considering Still Broader National-Security Restrictions

The accompanying Further Notice goes considerably further, but these provisions are proposals, not adopted requirements.

Among other things, the FCC seeks comment on establishing presumptive grounds for denying authority to applicants with specified foreign-adversary connections. The proposed framework could reach entities controlled by foreign adversaries, entities appearing on the Covered List, entities previously denied or revoked on national-security grounds, certain affiliates, companies with foreign-adversary financing or strategic relationships, and companies with specified foreign-adversary-linked senior officials.

The FCC also proposes additional restrictions involving IRUs, dark fiber, capacity leases, and spectrum arrangements involving foreign-adversary or other covered entities; broader restrictions on foreign-adversary-produced equipment and services; restrictions on third-party providers with access to networks, communications, or customer records; and additional cyber and physical-security requirements.

Other proposals address foreign-adversary personnel access, facility-location disclosures, service to foreign-adversary countries, incident reporting, and additional coordination with Team Telecom.

These proposals could have significant implications for telecommunications carriers, infrastructure investors, data centers, cloud providers, equipment vendors, and companies purchasing or financing international network capacity.

Bottom Line

The FCC's action represents a significant shift in the regulation of international Section 214 authorizations. The authorization increasingly becomes an ongoing compliance obligation, rather than a regulatory approval obtained once and revisited primarily when ownership changes.

For investors, the most immediate issue is the expanded ownership-disclosure regime and the possibility that investments at or above the 5% level will become visible in FCC filings and trigger continuing reporting obligations. For authorization holders, the broader challenge will be integrating FCC requirements into cybersecurity, procurement, network operations, corporate governance, and M&A processes.

Companies with existing international Section 214 authority—particularly those contemplating financings, investments, acquisitions, or changes in their ownership structure—should assess the new requirements before they become effective and begin collecting the information necessary for the FCC's forthcoming one-time filing.