The Communications Assistance for Law Enforcement Act (CALEA)

What is CALEA? CALEA is the Communications Assistance for Law Enforcement Act. It requires providers of commercial voice services to engineer their networks in such a way as to assist law enforcement agencies in executing wiretap orders. On August 5, 2005, in response to a request by law enforcement, the FCC voted to extend CALEA to include all facilities-based Internet service providers. Facilities-based Internet service providers are defined as: "entities that provide transmission or switching over their own facilities between the end user and the Internet Service Provider. " Initially it was assumed that CALEA covered only Voice Over Internet Protocol (VOIP) traffic, but the FCC has clarified that the rule applies to all packet-based communications. Deadline for mandatory compliance is May 14, 2007. Because Pace University does provide Internet access (transmission and switching) via the majority of networked PCs, the University must evaluate applicability of and compliance requirements of this law. What capabilities does CALEA require covered entities to provide? Law enforcement could request, and the covered entity must provide: 1. All communications associated with an IP address or jack. 2. All communications associated with a person (user), wired at a specific location, wired on any authenticated access, or wireless. 3. Call-identifying information that is reasonably available before, during, or immediately after the transmission of a wire or electronic communication, and in a manner that allows it to be associated with the communication to which it pertains. The covered entity must be able to expeditiously, unobtrusively, and secretly isolate and enable the government to intercept all wire and electronic communications of a targeted user, to or from equipment, facilities, or services of the covered entity, and to exclude any other communications not covered by the warrant/subpoena. The entity must also provide training and background checks on personnel, a 24 x 7 point of contact, document processes for interfacing with the law enforcement agency and maintain accurate records. Pace University reserves the right to amend or otherwise revise this document as may be necessary to reflect future changes made to the I.T. environment. You are responsible for reviewing this Policy periodically to ensure your continued compliance with all Pace University I.T. guidelines.