QSA's Week in Telecoms (#36, 2025)
Canada announces 2026 residual spectrum auction; FCC finalizes DoD Cybersecurity Maturity Model Certification contract rules; BC funds rural broadband expansion; CRTC posts new licensing applications and decisions.

Good morning! This is Queen Street Analytics' weekly roundup of regulatory developments, legislative discussions, political announcements and other government-related news concerning cellphone and wireless carriers, ISPs, satellite communications, broadband access, 5G, remote communities, and CRTC spectrum licences. Every Monday, we break down the most important updates in this space in under five minutes.
Want to track other GR news in adjacent industries? Don’t miss this week’s updates in ICT & Cybersecurity and Utilities & Power.
Dates: 2025-09-07 to 2025-09-13
📋 In This Week's Newsletter
• 🇨🇦 Canadian Federal GR News
• 🇺🇸 US Federal GR News
• 🗺️ Canadian Provincial GR News
• 📚 What We're Reading This Week
Canadian Federal GR News
Government Signals 2026 Auction of Residual Spectrum Licences
Innovation, Science and Economic Development Canada issued Notice No. SPB-005-25 in the Canada Gazette, Part I, announcing the release of guidelines for the 2026 residual spectrum licences auction. The document outlines available licences and details decisions on pro-competitive measures, conditions, auction format, and rules. ISED will accept written questions for clarification on the auction’s format until a deadline noted in its Table of Key Dates. Interested applicants are invited to submit questions citing the publication date and reference number. Responses will be posted on ISED’s Spectrum Management and Telecommunications website, where the full notice and related documents are accessible electronically.
Sources: Gazette, Part I: www.gazette.gc.ca

CRTC Regulatory Notices and Licensing Applications Published
The Canadian Radio-television and Telecommunications Commission (CRTC) posted new documents including applications for renewal, amendment, and complaints on its website. Notably, Peace River Broadcasting Corporation Ltd. filed for renewal of CKYL-FM-4 in Valleyview, Alberta, with public comments due by September 29, 2025. Administrative decisions were issued for Tsi Tyónnheht Onkwawén:na Language and Cultural Centre's CKYA-FM in Deseronto, Ontario. National notices of consultation are active, with deadlines and hearings running through September 29, 2025. The Commission continues to publish abridged summaries of decisions.
Sources: Gazette, Part I: www.gazette.gc.ca
Statement on Non-Material Privacy Incident Affecting Government MFA Provider
On September 9, the Treasury Board of Canada Secretariat reported that a cyber incident via a third-party multi-factor authentication provider, 2Keys Corporation, exposed phone numbers and email addresses related to users of government services including the CRA, Employment and Social Development Canada, and CBSA. The breach occurred between August 3 and 15, following a routine software update. Malicious actors sent spam phishing messages to impacted phone numbers. 2Keys resolved the vulnerability and worked with external cybersecurity experts to investigate, confirming that only non-sensitive contact information was disclosed. The government classified the event as a non-material privacy incident and restored full MFA services.
Sources: Announcements: www.canada.ca
CRTC Regulatory Documents and Public Notices Now Accessible
The CRTC reminded stakeholders that original regulatory decisions, consultation notices, policies, bulletins, and orders as they come into force are posted on its website, available for examination. Documents relating to proceedings, notices, and applications can also be viewed under 'Public proceedings & hearings.' These documents are official abridged versions of original regulatory texts.
Sources: Gazette, Part I: www.gazette.gc.ca
StatsCan Releases Q2 2025 Telecommunications Services Producer Price Indexes
Statistics Canada announced that second quarter 2025 telecommunications services producer price index data are now available upon request. The dataset, using a 2020 base, tracks price fluctuations for telecom services and informs sectoral economic analysis.
Sources: Open Government Data Set: www.statcan.gc.ca
US Federal GR News
DoD Issues Final Rule for Cybersecurity Maturity Model Certification Requirements
The Department of Defense published the final rule amending the Defense Federal Acquisition Regulation Supplement (DFARS) to incorporate Cybersecurity Maturity Model Certification (CMMC) contractual requirements, effective November 10, 2025. The rule adopts revisions to definitions, establishes phased implementation for CMMC Levels 1-3, adds procedures for SPRS verification, and specifies required contract clauses and solicitation provisions. All contractors processing federal contract information (FCI) or controlled unclassified information (CUI) must maintain current CMMC status through the life of relevant contracts, with requirements flowing down to subcontractors. Exemptions apply to contracts exclusively procuring commercially available off-the-shelf items. Affirming officials are required to validate compliance annually in SPRS, and changes in information systems require updated reporting to the Contracting Officer. The regulatory flexibility analysis anticipates an annualized cost of over $37 million—public and government—over ten years at a 7% discount rate.
Sources: U.S. Federal Announcements: www.federalregister.gov
FCC Adopts FY2025 Regulatory Fee Schedule
The FCC finalized its annual regulatory fee schedule, collecting $390,192,000 for FY2025 per Congressional mandate. The fee calculations reflect a reallocation of 61 FTEs as direct charges to core bureaus. Targeted amendments affect fees for space and earth stations, with new distinctions for small and large non-geostationary orbit constellations and fees assessed on authorized stations. The Commission maintained existing population coverage metrics for broadcast stations and upheld de minimis exemptions. Proposals for new categories and adjustments concerning broadband providers and large technology companies were not adopted, and the methodology will continue to undergo annual review.
Sources: U.S. Federal Announcements: www.federalregister.gov
DFARS Cybersecurity Information Collection Requirements Submitted to OMB
The Defense Acquisition Regulations System submitted a proposal to OMB for new information collection under DFARS Part 204, tied to the Cybersecurity Maturity Model Certification (CMMC) program. DFARS 252.204-7021 requires contractor affirming officials to complete annual SPRS affirmations and report CMMC level, covering systems processing contract information. Offerors are mandated to post self-assessment results and CMMC details before contract awards. 1,493 respondents are expected, with 30,990 annual responses and an estimated annual burden of 2,582 hours. The proposal reflects the latest compliance and verification framework under the NDAA 2020 Section 1648.
Sources: U.S. Federal Announcements: www.federalregister.gov
FCC Seeks Comment on Basic Signal Leakage Performance Report Collection
The FCC invited public comment on the continuation of its Basic Signal Leakage Performance Report information collection (OMB Control No. 3060-0433, FCC Form 320). The requirement applies to cable TV system operators and Multichannel Video Programming Distributors (MVPDs) using aeronautical frequencies, mandating filing of Cumulative Signal Leakage Index and compliance descriptions. With 230 respondents and 1,600 annual responses, the annual burden is 32,000 hours. Records must be retained by cable operators per Communications Act sections 4(i), 302, and 303.
Sources: U.S. Federal Announcements: www.federalregister.gov
FCC Reviews Auction and Licensing Disclosures—Ownership and Designated Entity Status
The FCC issued a notice for comment on the information collection extension related to auction and licensing disclosures under sections 1.2110, 1.2111, and 1.2112. The collection covers ownership, designated entity status, and eligibility for FCC auctions and licenses, including bidding credits and transfer reporting. With 310 respondents and 470 annual hours, the process supports enforcement for compliance and audits, ensuring the fairness of spectrum licensing and auction assignment processes.
Sources: U.S. Federal Announcements: www.federalregister.gov
Canadian Provincial GR News
BC Advances Last-Mile Rural Connectivity Projects for Southern Vancouver Island and Gulf Islands
A new round of broadband infrastructure funding in British Columbia will connect approximately 750 households in Piers Island, Texada, Jordan River, Port Renfrew, and Pacheedaht First Nations through partnership contributions from all levels of government, CityWest, Telus, and the First Nation Health Authority.
Sources: Provincial Announcement: news.gov.bc.ca
High-Speed Internet Expansion in North Vancouver Island and Central/Northern Coast Communities
BC's Ministry of Citizens’ Services announced that eleven additional rural communities—including Oona River, Echo Bay, and Health Bay—will receive new fibre-to-home links, supported by over $2.7 million in federal and provincial funding.
Sources: Provincial Announcement: news.gov.bc.ca
What We're Reading This Week
- Collaborative power in action: Jennifer Quaid and the future of cybersecurity in Canada: Cybersecurity sector leaders discuss collaboration for resilience in critical infrastructure.
- N.L. launches plan to expand Internet access as part of pre-campaign announcements: Provincial internet expansion initiatives announced amid electoral activity.
- Bell launches Bell Cyber, building on AI and tech services umbrella: Bell introduces new cybersecurity division integrating AI-driven approaches.
- Behind every tap: Mastercard’s global network helps safeguard Canada’s digital economy: Overview of Mastercard’s role in digital transaction security.
- Lately: The inner workings of China’s firewall, Charlie Kirk shooting videos proliferate online and the new iPhone Air: Perspectives on international digital policy and content moderation trends.
- Bell launches Bell Cyber, building on AI and tech services umbrella: National coverage of Bell's new cybersecurity and AI integration platform.