Wiley Rein walks through the FCC's KYUP and STIR/SHAKEN FNPRM

Wiley Rein has posted a detailed walkthrough of the May 20 FCC Further Notice proposing significant changes to know-your-upstream-provider (KYUP) rules, the STI-GA, and STIR/SHAKEN call authentication. The firm summarizes the FCC as proposing “five categories of ‘baseline’ measures that VSPs must follow to know their upstream provider: information collection, compliance review, information verification, monitoring, and responsive action.” Comments are due 30 days after Federal Register publication; replies, 60.

This is the FCC turning prescriptive on KYUP after years of letting carriers interpret a relatively loose “affirmative, effective measures” mandate. The FNPRM bundles three threads that have been moving in parallel — upstream-provider diligence, STI-GA governance, and Commission oversight of STIR/SHAKEN itself — into one rulemaking. Wiley calls the STIR/SHAKEN piece “a significant shift from prior FCC involvement,” and that’s the line worth marking: the Commission is signalling it will treat call-authentication as something it actively superintends rather than delegates to the industry-led governance body. For voice service providers, the operative move is that “you should have known” graduates from rhetoric to a checklist — five named obligations with verification and monitoring built in.

Light Reading’s trade-press summary last week was the first read; Wiley Rein is the first law-firm walkthrough with the rule-level detail. Expect Mintz, Kelley Drye, and the rest of the telecom-practice firms to follow with their own client alerts over the next two weeks. The substantive carrier reaction will land in the comment cycle.