This Week in ICT & Cybersecurity — Washington (#41, 2026)
FCC seeks comment on C-band transition costs; new CHIPS Act info collection proposed; FCC modifies Privacy Act systems; FCC reviews NEPA/NHPA rules; Mystic Alerts Act signed.
October 18, 2026 to October 24, 2026
This is Queen Street Analytics' weekly digest of regulatory developments, legislative discussions and other government-related news concerning ICT, cloud computing, digital infrastructure, social media platforms, digital privacy, AI, cybersecurity, blockchain, Web3 and cryptocurrencies. Once a week, we break down the most important updates in this space in under five minutes.
Want to track other GR news in adjacent industries? Don't miss this week's updates in Finance and Defence. Also consider subscribing to our ICT & Cybersecurity - Ottawa edition covering critical GR news north of the border.
📋 In This Week's Newsletter
• 🇺🇸 Federal Government News
• 📚 What We're Reading This Week
Federal Government News
FCC Seeks Comment on Preliminary Cost Catalog for Upper C-Band Incumbent Transition
The Federal Communications Commission's Wireless Telecommunications Bureau invited public comments on its Preliminary Cost Catalog for transitioning incumbent Fixed Satellite Service (FSS) operations out of the 4.0-4.16 GHz range, facilitating the repurposing of 160 megahertz for 3.7 GHz Service licensees. The catalog accounts for both reimbursement for documented actual costs and lump sum payments, detailing payment categories for earth station operators opting for a one-time payment. The Commission retained Teltrium, Inc. to draft the new catalog, drawing on methodologies used in the 2020 Lower C-band process. Comments on categories and cost ranges are due October 20, 2026, and on lump sum estimates and procedures by November 9, 2026. Decisions based on this input will shape the reimbursement framework for affected parties under the Commission’s Upper C-band transition orders.
Sources: www.federalregister.gov

White House Signs the Mystic Alerts Act, Directs FCC Emergency Satellite Alerts
On October 22, 2026, the President signed H.R. 7022, the Mystic Alerts Act. The legislation requires the Federal Communications Commission to establish rules enabling commercial mobile service providers to transmit emergency alerts via satellite. The Act directs the FCC to set technical and operational requirements governing these alerts, aiming to increase public access to urgent communications, especially in areas with limited terrestrial coverage. Implementation details and compliance targets are to follow in upcoming FCC proceedings.
Sources: www.whitehouse.gov
FCC Initiates Rulemaking to Modernize NEPA and NHPA Review for Communications Infrastructure
The FCC initiated a Further Notice of Proposed Rulemaking soliciting additional public comments on its frameworks for the National Environmental Policy Act (NEPA) and the National Historic Preservation Act (NHPA) as they relate to communications infrastructure deployment. Points under review include clarifying the definition of “undertaking,” refining Section 106 consultation processes—such as batching submissions via the Tower Construction Notification System—and examining whether deployment activities linked to spectrum licensing qualify as “agency actions” under the Endangered Species Act. The agency seeks input on methods for streamlining reviews, bringing non-compliant towers into Section 106 compliance, and addressing procedures in disaster recovery efforts. Comments on these regulatory issues are due by November 18, 2026.
Sources: www.federalregister.gov
FCC Proposes Modifications to Privacy Act Systems for Federal Programs
The Federal Communications Commission announced modifications to several Privacy Act systems, including those for the Lifeline Program, National Deaf-Blind Equipment Distribution Program, and Universal Service Fund customer management. Updates impact the collection categories, record retention, and routine uses such as new suspension and debarment disclosures. For example, the Lifeline Program system now includes information on fraud prevention and program representative debarment status, and the USAC Customer Relationship Management system adds a new routine use for suspension and debarment disclosure. Affected parties may submit comments on these system modifications until November 18, 2026.
Sources: www.federalregister.gov
FCC Requests Comment on Information Collection for Foreign Adversary Control Disclosures
The FCC issued a notice under the Paperwork Reduction Act requesting comment on the proposed information collection associated with reporting obligations for foreign adversary control in communications network entities, as adopted in GN Docket No. 25-166. Using FCC Form 5655, entities must disclose ownership, control, or influence by foreign adversaries and provide detail on any such relationship. Approximately 18,000 entities are affected, with an estimated 36,000 burden hours annually. The purpose is to address threats to U.S. networks and enhance oversight. Comments and feedback on the collection requirements are due by November 18, 2026.
Sources: www.federalregister.gov

What We're Reading This Week
- Russia steps up attacks on Ukraine's digital infrastructure, Kyiv says: Russia has intensified cyber and physical assaults on Ukraine's technology and communications networks, according to a Reuters report.
- A Veteran of the Telecom Bust Navigates the AI Boom: The Wall Street Journal profiles a technology executive steering a telecom firm through the current artificial intelligence surge.
- Five ways to keep safe online in the wake of AI-supercharged hacking: Reuters outlines practical steps individuals and organizations can take to improve cybersecurity amid rising AI-driven online threats.
- India's eMudhra exits website security business after flaws trigger global alarm: India's eMudhra has left the global website security market following critical software flaws that led to international security concerns.
- PODCAST: Cybersecurity flaw, Russia-Ukraine and Brazil's phone problem: This Reuters podcast episode discusses a recent cybersecurity flaw, Russian-Ukrainian cyber activity, and telecom challenges in Brazil.
- KKR charged with misleading EU regulators over Telecom Italia network deal: KKR faces regulatory scrutiny in the European Union over alleged misstatements related to the Telecom Italia network transaction.
- Europe weighs giving utilities, infrastructure companies more powers to bring down drones: European lawmakers consider boosting the authority of utilities and infrastructure operators to neutralize drones near critical assets.
- Human rights commission urges oversight of technology used in Latin American environmental crime: The Washington Post reports on calls for enhanced oversight of surveillance technologies by authorities combating environmental offenses in Latin America.