penalty on a person under both subparagraphs 
(A) and (B) based on the same conduct.’’; and 
(2) by striking subsection (h). 
(b) APPLICABILITY.—The amendments made by this 
section shall not affect any action or proceeding com-
menced before and pending on the date of enactment of 
this Act. 
(c) DEADLINE
FOR REGULATIONS.—The Federal 
Communications Commission shall prescribe regulations 
to implement the amendments made by this section not 
later than 270 days after the date of enactment of this 
Act. 
SEC. 3. CALL AUTHENTICATION. 
(a) DEFINITIONS.—In this section: 
(1) STIR/SHAKEN AUTHENTICATION FRAME-
WORK.—The term ‘‘STIR/SHAKEN authentication 
framework’’ means the secure telephone identity re-
visited and signature-based handling of asserted in-
formation using tokens standards proposed by the 
information and communications technology industry 
to attach a certificate of authenticity to each phone 
to verify the source of each call. 
(2) VOICE
SERVICE.—The term ‘‘voice serv-
ice’’— 
VerDate Sep 11 2014 
21:16 Mar 22, 2019
Jkt 089200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H1602.IH
H1602
pbinns on DSK79D2C42PROD with BILLS
(A) means any service that is inter-
connected with the public switched telephone 
network and that furnishes voice communica-
tions to an end user using resources from the 
North American Numbering Plan or any suc-
cessor to the North American Numbering Plan 
adopted by the Commission under section 
251(e)(1) of the Communications Act of 1934 
(47 U.S.C. 251(e)(1)); and 
(B) includes— 
(i) transmissions from a telephone 
facsimile machine, computer, or other de-
vice to a telephone facsimile machine; and 
(ii) without limitation, any service 
that enables real-time, two-way voice com-
munications, including any service that re-
quires internet protocol-compatible cus-
tomer 
premises 
equipment 
(commonly 
known as ‘‘CPE’’) and permits out-bound 
calling, whether or not the service is one- 
way or two-way voice over internet pro-
tocol. 
(b) AUTHENTICATION FRAMEWORK.— 
(1) IN GENERAL.—Subject to paragraphs (2) 
and (3), not later than 18 months after the date of 
VerDate Sep 11 2014 
21:16 Mar 22, 2019
Jkt 089200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H1602.IH
H1602
pbinns on DSK79D2C42PROD with BILLS
enactment of this Act, the Federal Communications 
Commission shall require a provider of voice service 
to implement the STIR/SHAKEN authentication 
framework in the internet protocol networks of voice 
service providers. 
(2) IMPLEMENTATION.—The Federal Commu-
nications Commission shall not take the action de-
scribed in paragraph (1) if the Commission deter-
mines that a provider of voice service, not later than 
12 months after the date of enactment of this Act— 
(A) has adopted the STIR/SHAKEN au-
thentication framework for calls on the internet 
protocol networks of voice service providers; 
(B) has agreed voluntarily to participate 
with other providers of voice service in the 
STIR/SHAKEN authentication framework; 
(C) has begun to implement the STIR/ 
SHAKEN authentication framework; and 
(D) will be capable of fully implementing 
the STIR/SHAKEN authentication framework 
not later than 18 months after the date of en-
actment of this Act. 
(3) IMPLEMENTATION REPORT.—Not later than 
12 months after the date of enactment of this Act, 
the Federal Communications Commission shall sub-
VerDate Sep 11 2014 
21:16 Mar 22, 2019
Jkt 089200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H1602.IH
H1602
pbinns on DSK79D2C42PROD with BILLS
mit to the Committee on Commerce, Science, and 
Transportation of the Senate and the Committee on 
Energy and Commerce of the House of Representa-
tives a report on the determination required under 
paragraph (2), which shall include— 
(A) an analysis of the extent to which pro-
viders of a voice service have implemented the 
STIR/SHAKEN authentication framework; and 
(B) an assessment of the efficacy of the 
STIR/SHAKEN authentication framework, as 
being implemented under this section, in ad-
dressing all aspects of call authentication. 
(4) REVIEW
AND
REVISION
OR
REPLACE-
MENT.—Not later than 3 years after the date of en-
actment of this Act, and every 3 years thereafter, 
the Federal Communications Commission, after pub-
lic notice and an opportunity for comment, shall— 
(A) assess the efficacy of the call authen-
tication framework implemented under this sec-
tion; 
(B) based on the assessment under sub-
paragraph (A), revise or replace the call au-
thentication framework under this section if the 
Commission determines it is in the public inter-
est to do so; and 
VerDate Sep 11 2014 
21:16 Mar 22, 2019
Jkt 089200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H1602.IH
H1602
pbinns on DSK79D2C42PROD with BILLS
(C) submit to the Committee on Com-
merce, Science, and Transportation of the Sen-
ate and the Committee on Energy and Com-
merce of the House of Representatives a report 
on the findings of the assessment under sub-
paragraph (A) and on any actions to revise or 
replace the call authentication framework under 
subparagraph (B). 
(5) EXTENSION
OF
IMPLEMENTATION
DEAD-
LINE.—The Federal Communications Commission 
may extend any deadline for the implementation of 
a call authentication framework required under this 
section by 12 months or such further amount of 
time as the Commission determines necessary if the 
Commission determines that purchasing or upgrad-
ing equipment to support call authentication would 
constitute a substantial hardship for a provider or 
category of providers. 
(c) SAFE HARBOR AND OTHER REGULATIONS.— 
(1) IN
GENERAL.—The Federal Communica-
tions Commission shall promulgate rules— 
(A) establishing when a provider of voice 
service may block a voice call based, in whole or 
in part, on information provided by the call au-
thentication framework under subsection (b); 
VerDate Sep 11 2014 
21:16 Mar 22, 2019
Jkt 089200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6201
E:\BILLS\H1602.IH
H1602
pbinns on DSK79D2C42PROD with BILLS
(B) establishing a safe harbor for a pro-
vider of voice service from liability for unin-
tended or inadvertent blocking of calls or for 
the unintended or inadvertent misidentification 
of the level of trust for individual calls based, 
in whole or in part, on information provided by 
the call authentication framework under sub-
section (b); and 
(C) establishing a process to permit a call-
ing party adversely affected by the information 
provided by the call authentication framework 
under subsection (b) to verify the authenticity 
of the calling party’s calls. 
(2) CONSIDERATIONS.—In establishing the safe 
harbor under paragraph (1), the Federal Commu-
nications Commission shall consider limiting the li-
ability of a provider based on the extent to which the 
provider— 
(A) blocks or identifies calls based, in 
whole or in part, on the information provided 
by the call authentication framework under sub-
section (b); 
(B) implemented procedures based, in 
whole or in part, on the information provided 
VerDate Sep 11 2014 
21:16 Mar 22, 2019
Jkt 089200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6201
E:\BILLS\H1602.IH
H1602
pbinns on DSK79D2C42PROD with BILLS