By the Subsentio Compliance Team. Reviewed for accuracy against CALEA (47 U.S.C. 1001 et seq.) and the FCC's implementing rules.
TL;DR: CALEA covers more providers than most people assume. It uses its own broad definition of "telecommunications carrier": common carriers, all wireless providers, and, since 2005, facilities-based broadband and two-way interconnected VoIP. It excludes pure information services and private networks. Resellers and MVNOs are covered, though they can lean on their wholesaler. Being a nonprofit does not exempt you. And even if you are not covered, you still cannot refuse a court order. If you have never confirmed your status in writing, that is worth doing before someone else decides it for you.
CALEA Uses Its Own, Broader Definition
The first thing to understand is that CALEA does not use the everyday meaning of "telecommunications carrier." It has its own definition, and it is deliberately wider. Under the statute, a covered telecommunications carrier includes a common carrier that transmits or switches communications for hire, and it expressly includes every provider of commercial mobile service, which is to say all wireless carriers.
It also includes a third, less obvious category. If the FCC finds that a service is a replacement for a substantial portion of the local telephone exchange service, and that treating the provider as a carrier is in the public interest, it can be deemed subject to CALEA. That clause, the substantial replacement provision, is the hinge the whole modern scope turns on.
The 2005 Expansion Pulled In Broadband and VoIP
In 2005, the FCC used that substantial replacement provision to extend CALEA to two large groups that did not think of themselves as phone companies: facilities-based broadband Internet access providers, across cable, DSL, fiber, wireless, and satellite, and two-way interconnected VoIP providers, meaning those whose service lets customers place and receive calls with the public phone network.
The practical effect is that "we are an internet company, not a telephone company" is not the exemption many providers believe it to be. If you provide facilities-based broadband to the public, or interconnected VoIP, CALEA reaches you.
What CALEA Does Not Cover
The statute draws two clear lines on the other side. First, it does not apply to a provider insofar as it offers information services, such as email, web hosting, or DNS. The switching and transmission underneath can be covered while those pure information-service functions are not.
Second, it excludes the equipment, facilities, and services that support the transport or switching of communications for private networks. A network built to serve one organization's own users, rather than the public, generally falls outside CALEA. There is an important wrinkle, though: the facilities that connect a private network to the public network can still be covered. The exemption protects the private network itself, not the on-ramp to the public one.
The Edge Cases Where Providers Get It Wrong
Most of the confusion lives in a handful of situations that feel like they should be exempt but are not, or that are covered in a lighter way than people fear.
Resellers and MVNOs. A reseller or a mobile virtual network operator is providing switching and transmission to its customers even though the underlying facilities belong to someone else. That means it is covered. The obligation, though, is lighter than the technical work suggests. A reseller's main job is to make sure its facilities-based wholesaler has a CALEA solution in place, and to put that responsibility in the wholesale agreement in writing. The reseller does not have to build the intercept capability itself.
Enterprises and campus networks. A company or a university running an internal network for its own people is usually within the private-network exemption. The dividing line is whether you are offering service to the public. Serving your own employees or students looks different from acting as an internet provider to the general public, and that distinction, not the size of the network, is what decides it.
The nonprofit myth. One of the most common misreadings is that a nonprofit, a municipality, or a rural cooperative is automatically exempt. Profit status is not the test. What matters is whether you offer covered communications service to the public. A member-owned rural broadband cooperative that serves its community is covered on the same terms as a commercial carrier. Being nonprofit does not change the answer.
"Not Subject" Does Not Mean "No Obligations"
Here is the point that surprises providers who conclude they are outside CALEA: being outside CALEA does not mean you can ignore lawful surveillance. Any provider can still receive a court order, and the law obligates you to furnish the assistance needed to carry it out. You cannot simply refuse.
That reality is why some providers who are not strictly covered choose to adopt a CALEA-style solution anyway. When you have a defined capability and process, you control how a lawful intercept is carried out on your network. Without one, law enforcement may end up with far more direct access to your systems than you would have chosen. Readiness is not only about the letter of the statute. It is about handling the order well when it comes.
How to Settle It Definitively
Coverage turns on specifics: what you offer, to whom, and over whose facilities. Those details decide the answer, and guessing is the expensive way to get there. The reliable path is a written analysis of your status against the statute and the FCC's rules, so the question is settled before an order forces it. Knowing you are covered lets you get ready on your own schedule. Knowing you are not lets you plan for the assistance obligation that still applies.
A Quick Self-Check
You can pressure-test your own status in a few questions:
- Do you offer voice, broadband, or interconnected VoIP service to the public for a fee?
- Do your customers originate, terminate, or direct their own communications through your network?
- If you resell, does your wholesale agreement put CALEA responsibility on the facilities-based carrier?
- Have you confirmed your status in writing, or only assumed it?
If the last answer is no, that is the gap to close first.
Frequently Asked Questions
Does CALEA apply to internet service providers? Generally yes. Facilities-based broadband Internet access providers have been covered since the FCC's 2005 order, regardless of the platform, whether cable, DSL, fiber, wireless, or satellite.
We are a nonprofit or municipal provider. Are we exempt? No. Profit status is not the test. If you offer covered communications service to the public, you are treated the same as a commercial carrier.
We are a reseller or MVNO. What do we actually have to do? You are covered, but your core obligation is to ensure your facilities-based wholesaler has a CALEA solution and to reflect that in your wholesale agreement. You do not have to build the capability yourself.
We do not think CALEA applies to us. Are we finished? Not necessarily. Even providers outside CALEA must assist court-ordered surveillance, so confirming your status in writing, and being ready either way, is worth doing.
Settle the Question Before Someone Else Does
The worst time to learn whether CALEA applies to you is the moment a court order arrives. Subsentio helps communications providers of every size determine whether they are subject to CALEA, document the answer, and meet the obligation if they are, without building a program from scratch. Request a regulatory analysis and settle your status while it is still your decision to make.
About Subsentio: Subsentio helps communications providers meet their law enforcement assistance obligations as a trusted third party. It determines CALEA coverage, implements and validates lawful intercept solutions, files and maintains System Security and Integrity plans, and reviews legal demands and manages records production for carriers, broadband providers, and VoIP operators of every size.
