Top compliance terms for navigating telephony

Staying on top of industry guidelines is a ton of responsibility—especially for large, multinational enterprises. Learning a few key terms will go a long way in helping you understand how to achieve product compliance for your global communications.

TermWhat is it?Why does it matter?
Know Your Customer (KYC)Aimed at verifying and confirming the identity of a customer or end userEstablished to prevent fraud and other illicit activities, e.g. identity theft, money laundering, fraud, breach of customer data
Local Address Requirements (LAR)Aimed at verifying and confirming an end user location as required in some jurisdictionsEstablished to ensure legitimacy and adherence to requirements in certain countries, with three main components—regulatory obligation, financial impact, and preventing customer disruption
Letter of Authorization (LOA)An official letter (i.e. legal document) affirming the executing party’s authorization to act on behalf of a service requestUtilized to grant permissions or authorizations indicating their approval for certain actions or changes
RAY BAUM’s ActRequires enterprises utilizing multi-line telephone systems (MLTS) to provide automated dispatchable locations for all 911 callsEstablished to ensure first responders receive precise location information from the 911 caller, no matter their device or location within a building
Kari’s LawRequires multi-line telephone systems (MLTS) to notify designated personnel when a 911 call is placed, as well as elimination of a prefix digit for dialing an outside number when calling 911Established to ensure security teams or front desk attendants can appropriately direct first responders upon arrival, as well as ensuring 911 callers can successfully reach 911 from any device without obstacle
STIR/SHAKENRequires that voice service providers sign calls with an attestation level and originating ID for traceback, in addition to filing a robocall mitigation plan with the FCCEstablished as a technology framework aimed at reducing fraudulent robocalls and illegal phone number spoofing, while making sure that legitimate calls reach the recipient
Health Insurance Portability and Accountability Act (HIPAA)Requires covered entities to take certain measures to protect and prevent the disclosure of PHI (Protected Health Information)Established to ensure patient privacy and security when PHI is handled by covered entities such as hospitals, healthcare providers, pharmacies, and the business associates that support them
General Data Protection Regulation (GDPR)Requires companies handling personal data of citizens and residents of the EU (European Union) to comply with key principles of privacy and data protectionEstablished to modernize privacy laws in the digital age to ensure consistent protection, security, and control of personal data related to citizens and residents of the EU (European Union)
Disclaimer: The compliance information provided does not, and is not intended to, constitute legal advice; instead, all information is for general informational purposes only.