The words of the obligation, in plain English.
The vocabulary of lawful compliance, one term at a time — the statute, the intercept, the records, and the copyright notices — each defined so it stands on its own. Where a term is a statute, the statute is named.
The law that creates the duty, and the words the law uses.
-
CALEA
Also: Communications Assistance for Law Enforcement Act · CALEA law · CALEA act
-
The Communications Assistance for Law Enforcement Act, a 1994 United States statute (47 U.S.C. § 1001 and following) requiring telecommunications carriers to be able to isolate and deliver a named subscriber's communications to a law-enforcement agency when served with lawful authorization — without affecting anyone else's service. A 2005 FCC order extended the obligation to facilities-based broadband Internet access and two-way interconnected VoIP. CALEA is about capability: the network must be able to comply when a valid order arrives.
CALEA in nine sections, plain English → -
Telecommunications carrier (under CALEA)
-
CALEA's covered entity: a provider of transmission or switching of electronic communications to the public for hire. In practice that means wireline and wireless carriers, facilities-based broadband Internet access providers, and interconnected VoIP providers. Private networks and pure information services are outside the definition — the line is drawn by what the provider does, not by its size.
Who is subject to CALEA → -
Interconnected VoIP
-
Voice service that uses a broadband connection and IP-compatible customer equipment, and lets users place calls to and receive calls from the public switched telephone network. The FCC brought interconnected VoIP under CALEA in 2005; a VoIP provider meeting those elements carries the same lawful-intercept obligation as a traditional carrier.
VoIP lawful intercept → -
Safe harbor (CALEA § 107)
Also: safe harbor standard · presumptive compliance
-
CALEA's conformance rule: a carrier whose lawful-intercept solution conforms to a publicly available industry standard is presumed to meet the statute's capability requirements. The standards are published by ATIS, 3GPP, ETSI and their peers, one for each network type, and revised over time. "Safe harbor" is why the industry talks about standards-based solutions rather than bespoke ones.
Safe Harbor intercept → -
Trusted Third Party (TTP)
Also: CALEA TTP · compliance outsourcing
-
A company that carries a carrier's CALEA obligation on an outsourced basis — the technical capability, the court-order handling, the security and recordkeeping — under the carrier's name. The FCC has recognized compliance through a trusted third party, and carriers of every size use one. Subsentio is the largest CALEA Trusted Third Party in the United States.
Why carriers hand the obligation to a TTP → -
System Security and Integrity plan (SSI)
-
The written privacy and security procedures CALEA requires a carrier to keep so that lawful intercepts cannot be compromised or misused, filed with the FCC as a system security and integrity report. A TTP typically maintains it on the carrier's behalf and keeps it current as personnel and network elements change.
What happens to live communications under a court order.
-
Lawful intercept
Also: LI · lawful interception · communication interception · legal intercept
-
Court-authorized monitoring of a named subscriber's communications as they happen. Depending on the order it captures call-identifying information (who called whom, when, for how long) or, under a full-content order, the content of calls and Internet sessions. The intercept is provisioned against one target, delivered to the agency named in the order, and switched off at the order's termination date. It is the capability CALEA requires a carrier to have ready.
The anatomy of a lawful intercept → -
Lawful access
Also: lawful access meaning · definition of lawful access
-
The broader term: a government's ability, with valid legal process, to obtain communications or the data around them. Lawful intercept is lawful access to real-time communications; records production is lawful access to stored records; the phrase is also used in policy debates about encrypted services. For a carrier the practical question is the same in every case — can the network produce what a valid order names, and nothing more.
Lawful access, explained → -
Call-identifying information vs. call content
Also: CII · CC · CmII · CmC
-
The two categories a lawful-intercept order can reach. Call-identifying information is the signaling around a communication — numbers, addresses, times, durations. Call content is the communication itself: the audio of a call, the payload of an Internet session. Orders authorize one or both; the solution must be able to deliver either without leaking the other. In broadband standards the equivalents are CmII and CmC.
-
Title III order (Wiretap Act)
-
A court order under Title III of the Omnibus Crime Control and Safe Streets Act of 1968 (18 U.S.C. § 2510 and following) authorizing interception of the content of communications. It is the full-content intercept: the highest bar of legal process, time-limited, and specific to a named target.
-
Pen register / trap and trace
-
Legal process (18 U.S.C. § 3121 and following) for capturing dialing, routing, addressing and signaling information — the numbers a line calls and the numbers that call it — without content. On a modern network this is a call-identifying-information intercept, delivered in the same standardized format as a content intercept, minus the content.
-
Access function
Also: active intercept · passive intercept
-
The point where a target's traffic is picked out of the network. Active: the network element itself is provisioned to copy the target's traffic to the mediation system. Passive: a probe watches a mirror (TAP or SPAN) port, identifies the target's traffic and copies only that. Both end in the same place — a standardized stream bound for the agency.
Technical components of lawful intercept → -
Mediation
Also: mediation function · delivery function
-
The component that turns what the access function captured into what the agency can use: it identifies the target, collects the sessions, converts them to the delivery standard the order requires, and hands them off over a secured connection — while logging every action for the record.
-
Lawful intercept standards (ATIS, 3GPP, ETSI)
Also: lawful intercept standards · safe-harbor standards
-
The published safe-harbor standards for lawful intercept — a family with one standard per network type: the ATIS standards in the United States for circuit-switched and wireless, VoIP and broadband Internet access networks, the 3GPP handover interfaces for LTE and 5G mobile networks, and the ETSI standards abroad. Each is revised over time. A solution built to the current standard that matches the network is what earns the carrier CALEA's safe-harbor presumption.
-
ATIS
Also: Alliance for Telecommunications Industry Solutions · ATIS standard
-
The Alliance for Telecommunications Industry Solutions — the U.S. standards body whose committees of carriers, equipment makers, trusted third parties and law enforcement develop most of the lawful-intercept delivery standards used under CALEA — one for each network type, revised over time. An intercept delivered to a U.S. agency arrives in an ATIS-defined format.
Electronic surveillance standards → -
ETSI
Also: European Telecommunications Standards Institute · ETSI lawful interception · ETSI LI standard
-
The European Telecommunications Standards Institute — the body whose lawful-interception handover standards define how intercepted communications are handed over to law-enforcement facilities in Europe and much of the rest of the world. Subsentio delivers to ATIS in the United States and ETSI for its international clients.
Electronic surveillance standards → -
System security and integrity (SSI) plan
Also: SSI plan · CALEA SSI · 47 CFR 1.20005
-
The policies and procedures a carrier files with the FCC under 47 CFR § 1.20005 describing how it supervises and controls interceptions — who may authorize one, what counts as appropriate legal and carrier authorization, how records are kept, and a senior officer law enforcement can reach 24 hours a day. Filed before commencing service and updated within 90 days of a merger, divestiture or policy change; since June 2023, through the CALEA Electronic Filing System (CEFS).
IPES providers and CALEA → -
Warrant management
Also: warrant management system · legal process tracking
-
Tracking every piece of legal process from receipt to closure: the order's authority and scope, the dates it is valid, what was provisioned or produced, who handled each step, and when it was terminated or returned. It is what makes an intercept or a records response defensible later — at a suppression hearing, an audit, or a deposition — and it is the part of compliance a carrier most often underestimates.
Records production → -
Lawful Access to Encrypted Data Act (LAED)
-
A bill introduced in the United States Senate in 2020 that proposed requiring service providers and device makers to be able to decrypt data and communications when served with a court order, once a provider reached a certain scale. It became the reference point in the debate over encryption and lawful access. Its status changes with each Congress — check its current status before relying on it; nothing in CALEA today requires a carrier to break encryption it did not apply.
What happens to records a carrier already holds.
-
Records production
Also: legal records production · subpoena compliance
-
Responding to legal process for records a carrier already holds — subscriber information, call detail records, IP assignment logs, stored content — as opposed to intercepting communications in real time. The work is verifying the process, pulling exactly what it names, authenticating it, and delivering it with a chain of custody. Most carriers see far more of this than of intercepts.
Records production at Subsentio → -
Stored Communications Act (ECPA)
Also: 18 U.S.C. § 2703 · 2703(d) order
-
Part of the Electronic Communications Privacy Act of 1986 (18 U.S.C. § 2701 and following) governing when a provider may — or must — disclose stored records and communications. It sets out tiers of process: a subpoena reaches basic subscriber information; a court order under § 2703(d) reaches transactional records on a showing of specific and articulable facts; content generally requires a warrant. Knowing which tier a request sits in is the first step of every response.
Responding to a subpoena for subscriber records → -
Subpoena
Also: grand jury subpoena · administrative subpoena · civil subpoena
-
A formal demand for records or testimony. For a carrier the common forms are grand-jury and administrative subpoenas from law enforcement, and civil subpoenas from parties to litigation. Each carries its own limits on what it can compel; a subpoena that asks for more than its tier allows is returned, not filled.
-
Preservation request (18 U.S.C. § 2703(f))
-
A request that a provider preserve specified records pending further legal process. The provider must retain the records for 90 days, extendable by one further 90-day period on request. It does not authorize disclosure — it stops the records from ageing out while the requester obtains the order that does.
-
Exigent request
Also: emergency disclosure
-
A request for disclosure without a court order where the requester believes an emergency involving danger of death or serious physical injury requires it. Federal law permits a provider to disclose in that situation; it does not compel it. The decision is the provider's, made on a documented, good-faith basis — which is why exigent requests go through a defined form and a named desk, not a phone call.
Exigent request form → -
Call detail record (CDR)
-
The billing-grade record a network keeps of each call or session: the parties, start and end times, duration, and routing details. CDRs are the most-requested category of stored record and the one most often produced in a form that has to be authenticated for use in court.
-
Chain of custody
-
The documented, unbroken account of who handled a record from the moment it was pulled to the moment it was produced — and what was done to it in between. Without it, authenticated records can still be challenged. It is a discipline, not a document: every step logged, every copy accounted for.
-
IPES provider
Also: IPES · Internet Protocol Enabled Service · IP-enabled service provider
-
The FCC's term for an IP-enabled service provider — in practice an interconnected VoIP provider delivering voice over IP end to end and taking telephone numbers directly from the numbering administrators. Defined at 47 CFR § 61.3(eee) in the intercarrier-compensation rules; the numbering rules for these providers require a certification of CALEA compliance with accompanying evidence (47 CFR § 52.15(g)(3)).
IPES providers and CALEA → -
Data retention
-
Rules requiring providers to keep certain records for a defined period so that they are available to lawful process. The United States has no single general retention mandate for carriers; many other jurisdictions do, with their own periods and categories. A provider operating in more than one country inherits each one's rules.
International operations →
A different statute with the same shape: a notice arrives, a process has to run.
-
DMCA § 512 safe harbor
Also: DMCA safe harbor · OCILLA
-
Section 512 of the Digital Millennium Copyright Act of 1998 (17 U.S.C. § 512) limits a service provider's liability for copyright infringement by its users — for transitory transmission, caching, storage at a user's direction, and information-location tools — provided the provider meets the section's conditions. For an ISP the conditions that matter most are a designated agent on file and a reasonably implemented repeat-infringer policy.
DMCA records production → -
Designated agent
-
The person or office a copyright owner sends infringement notices to. To rely on the § 512 safe harbor a provider must register its designated agent with the U.S. Copyright Office's online directory and keep the registration current; registrations are renewed on a three-year cycle. An unregistered or lapsed agent puts the safe harbor at risk regardless of how well notices are handled.
Designated agent registration → -
Notice and takedown
Also: DMCA notice · takedown notice · counter-notice
-
The § 512 process: a copyright owner sends a notice meeting the statute's elements, the provider acts expeditiously on it, the affected subscriber is informed and may send a counter-notice, and the material may be restored if the owner does not file suit within the statutory window. Each step has form requirements; a defective notice is not a valid notice.
The notice-and-takedown process → -
Repeat-infringer policy
-
A condition of the § 512 safe harbor: the provider must adopt, reasonably implement and inform subscribers of a policy for terminating, in appropriate circumstances, subscribers who are repeat infringers. The statute does not define "repeat" or prescribe the steps — the provider does, in writing, and then follows what it wrote.
Repeat-infringer policy →
Ask the people who do this every day.
If a court order, a subpoena or a notice uses a term that is not here, the desk that handles it can tell you what it means for your network.