02 — Capability · BC-1480.30
Lawful Access Obligations
Respond to lawful requests from authorities for interception and records promptly and only as far as the legal process allows, while protecting every other subscriber's communications.
- Lawful Intercept
- Law Enforcement Requests
- Legal Process Compliance
In scope
- Interception capability and its activation on valid orders
- Subscriber records and data requests from authorities
- Mandated retention of communications data
- Transparency reporting on requests received
Out of scope
- Litigation holds and civil discovery (see BC-150.40)
- Security monitoring of company systems (see BC-760.30)
Decomposes into · 4
- BC-1480.30.10Lawful Intercept ProvisioningKeep interception capability ready and activate it only on verified orders, with tight access control and a full audit trail.
- BC-1480.30.20Subscriber Records RequestsValidate each request from authorities, disclose only what the legal process covers and record what was provided.
- BC-1480.30.30Communications Data RetentionRetain the categories of communications data that obligations require for exactly the required period, and no longer.
- BC-1480.30.40Government Request TransparencyPublish counts and types of government requests received, to the extent permitted, so subscribers can see how often it happens.