FCC Opens Schools and Libraries Cybersecurity Pilot Program Applications

The FCC opened the application window for the Schools and Libraries Cybersecurity Pilot Program. Schools and libraries can now apply for funding made possible by a three-year, $200 million pilot meant to defray the costs of eligible cybersecurity services and equipment. The pilot will also provide the Commission with data to better understand how universal service funds could be used to improve school and library defenses against cyberattacks. The application window opened on September 17 and closes on November 1, 2024. 

Cantwell Delays Markup of Spectrum Bill

Sen. Maria Cantwell (D-Wash), Committee Chair of the Senate Commerce Committee, has decided to delay markup of the Spectrum and National Security Act (S-4207), instead optioning to attach the bill to an end-of-year package. The Act attempts to restore the FCC’s auction authority, which expired in 2022, as well as prioritize funding for the Affordable Connectivity Program, which has not been replenished since running out last May. 

Nebraska, Idaho, North Dakota, American Samoa Receive BEAD approvals

Idaho, North Dakota, and American Samoa received approval for Broadband Equity, Access, and Development (BEAD) Initial Proposals from the NTIA last Friday. On Wednesday, Nebraska became the 44th jurisdiction to receive approval, gaining access to over $450 million in funding. BEAD funding will be used to enhance and expand high-speed Internet access across the country, supporting infrastructure, mapping, and outreach projects. All 56 eligible jurisdictions have submitted Initial Proposals, and each jurisdiction has one year from approval of its initial proposal to submit a Final Proposal describing subawards. 

$13 Million Penalty for Consumer Data Protection Violations

The FCC announced a $13 million settlement with AT&T to resolve an investigation into whether AT&T failed to protect customer information in connection with a January 2023 data breach of a vendor’s cloud environment. The Communications Act of 1934 and the Commission’s rules require telecommunications companies to protect customers’ personal information and take steps to safeguard customer data. The responsibility extends to cloud and vendor security. Pursuant to a Consent Decree, AT&T must also strengthen its data governance practices and ensure appropriate procedures are incorporated into its handling of sensitive data. 

Additional Authors: Thomas B. Magee, Tracy P. Marshall, Sean A. Stokes, Wesley K. Wright