""" Generate the FCC CPNI Annual Certification Letter — IXC (Facilities) variant. Tailors the generic CPNI certification under 47 CFR § 64.2009(e) for an Interexchange Carrier (IXC) focused on toll-call record handling. Key variant differences: * CPNI scope centered on toll call records, PIC-change verification, and interexchange account authentication. * Customer approval for CPNI usage follows written/oral opt-in, documented in the toll-account record. * The CPNI Protection Officer's duties include PIC / LIDB / CDR access governance and fraud-management system controls. """ from __future__ import annotations import logging from datetime import datetime from pathlib import Path from typing import Optional LOG = logging.getLogger("document_gen.cpni_ixc") try: from docx import Document from docx.shared import Pt, Inches, RGBColor from docx.enum.text import WD_ALIGN_PARAGRAPH except ImportError: LOG.warning("python-docx not installed — CPNI IXC generation unavailable") Document = None # type: ignore[assignment,misc] _NAVY = RGBColor(0x1A, 0x27, 0x44) if Document else None VARIANT_ID = "ixc" VARIANT_LABEL = "Interexchange Carrier (IXC)" MAX_FORFEITURE_PER_VIOLATION = "$251,322" MAX_FORFEITURE_CAP = "$2,513,215" def _sp(p, after=6, before=0): p.paragraph_format.space_after = Pt(after) if before: p.paragraph_format.space_before = Pt(before) def _h(doc, text): p = doc.add_paragraph() r = p.add_run(text) r.font.size = Pt(12); r.bold = True; r.font.color.rgb = _NAVY _sp(p, after=4, before=8) def _b(doc, text, bold=False, size=10): p = doc.add_paragraph() p.alignment = WD_ALIGN_PARAGRAPH.LEFT r = p.add_run(text); r.font.size = Pt(size); r.bold = bold _sp(p, after=6) def _cb(doc, text, checked=True): mark = "\u2611" if checked else "\u2610" p = doc.add_paragraph() r = p.add_run(f" {mark} {text}") r.font.size = Pt(10) _sp(p, after=3) def generate_cpni_ixc( output_path: str, entity_name: str, frn: str = "", filer_id_499: str = "", officer_name: str = "", officer_title: str = "Chief Executive Officer", complaints_count: int = 0, complaints_description: str = "", has_data_broker_inquiries: bool = False, data_broker_description: str = "", reporting_year: int = 0, address_street: str = "", address_city: str = "", address_state: str = "", address_zip: str = "", contact_email: str = "", contact_phone: str = "", breaches: list[dict] | None = None, **_: dict, ) -> Optional[str]: if Document is None: LOG.error("python-docx not installed") return None if reporting_year == 0: reporting_year = datetime.now().year - 1 breaches = breaches or [] doc = Document() for s in doc.sections: s.top_margin = Inches(1); s.bottom_margin = Inches(1) s.left_margin = Inches(1.25); s.right_margin = Inches(1.25) today = datetime.now().strftime("%B %d, %Y") signer = officer_name or "Authorized Officer" title = officer_title or "Officer" tp = doc.add_paragraph(); tp.alignment = WD_ALIGN_PARAGRAPH.CENTER t = tp.add_run("CPNI Annual Certification Letter") t.font.size = Pt(14); t.bold = True; t.font.color.rgb = _NAVY _sp(tp, after=2) sp = doc.add_paragraph(); sp.alignment = WD_ALIGN_PARAGRAPH.CENTER s = sp.add_run( f"Interexchange Carrier \u2014 47 CFR \u00a7 64.2009 " f"\u2014 Calendar Year {reporting_year}" ) s.font.size = Pt(10); s.font.color.rgb = RGBColor(0x55, 0x55, 0x55) _sp(sp, after=8) _h(doc, "1. Provider Information") lines = [f"Company Name: {entity_name}", f"Variant: {VARIANT_LABEL}"] if frn: lines.append(f"FCC Registration Number (FRN): {frn}") if filer_id_499: lines.append(f"FCC Form 499 Filer ID: {filer_id_499}") addr = ", ".join(filter(None, [address_street, address_city])) if address_state or address_zip: addr += f", {address_state} {address_zip}".strip() if addr.strip(", "): lines.append(f"Address: {addr.strip(', ')}") if contact_phone: lines.append(f"Telephone: {contact_phone}") if contact_email: lines.append(f"Email: {contact_email}") lines.append(f"Certifying Officer: {signer}, {title}") lines.append(f"Date of Filing: {today}") lines.append(f"Filing Deadline: March 2, {reporting_year + 1}") _b(doc, "\n".join(lines)) _h(doc, "2. Officer Statement of Personal Knowledge") _b(doc, ( f"I, {signer}, {title} of {entity_name}, state that I have personal " f"knowledge of the matters certified herein. I have reviewed " f"{entity_name}'s CPNI operating procedures, including procedures " f"governing toll call records, PIC-change verification, and " f"interexchange account authentication. I have examined supervisory " f"logs and records covering the reporting period. The " f"representations herein are based on my personal review and are " f"true and correct to the best of my knowledge, information, and " f"belief." )) _h(doc, "3. Certification of Compliance") _b(doc, ( f"Pursuant to 47 CFR \u00a7 64.2009(e), {entity_name} hereby submits " f"its annual certification of compliance with the CPNI rules at " f"47 CFR \u00a7\u00a7 64.2001 through 64.2011 for the period " f"January 1, {reporting_year} through December 31, {reporting_year}." )) _h(doc, "4. How Our Procedures Ensure Compliance") _b(doc, ( f"As an interexchange carrier, {entity_name}'s principal CPNI " f"holdings are toll call detail records (CDRs), PIC-change records, " f"and inter-carrier settlement data. Specific procedures include:" )) _cb(doc, ( "Interexchange account authentication is required before release " "of any toll record. Authentication is via pre-established " "password or the verification of two non-CPNI account attributes " "(47 CFR \u00a7 64.2010)." )) _cb(doc, ( "PIC changes require affirmative verification under 47 CFR " "\u00a7 64.1120 (Third Party Verification, Letter of Agency, or " "Internet LOA) and are confirmed to the customer's address of " "record before being implemented. Slamming-prevention controls " "are integrated with CPNI access logging." )) _cb(doc, ( "Customer approval for use of toll CPNI beyond the scope of the " "subscribed service is obtained through written or oral opt-in " "consent, documented in the account record per 47 CFR \u00a7 64.2007." )) _cb(doc, ( "The CPNI Protection Officer has oversight authority over PIC " "administration, LIDB access, CDR archives, and fraud-management " "systems. Access attempts to these systems are logged to the named " "individual." )) _cb(doc, ( "Supervisory reviews of CPNI access are conducted at least " "quarterly. Retention of access logs meets or exceeds two years " "(CPNI) and five years (certification records) per 47 CFR " "\u00a7 64.2009." )) _cb(doc, ( "Annual CPNI training is required for all personnel with CPNI " "access. Completion is tracked and attested to by the CPNI " "Protection Officer." )) _cb(doc, ( "Breach notification under 47 CFR \u00a7 64.2011 is implemented as " "amended by FCC 23-111 \u2014 notice to the Commission within 7 " "business days and to customers / law enforcement as soon as " "practicable (not later than 30 days after reasonable determination)." )) _h(doc, "5. Customer Complaints") if complaints_count == 0: _b(doc, ( f"{entity_name} has NOT received any customer complaints during " f"the reporting period concerning the unauthorized release or " f"use of CPNI. Zero (0) complaints were logged." )) else: desc = complaints_description or ( "Each complaint was investigated and resolved." ) _b(doc, ( f"{entity_name} HAS received {complaints_count} customer " f"complaint{'s' if complaints_count != 1 else ''} during the " f"reporting period. {desc}" )) _h(doc, "6. Data Broker Inquiries and Pretexting") if not has_data_broker_inquiries: _b(doc, ( f"{entity_name} has NOT received any inquiries, communications, " f"or attempts by data brokers or other unauthorized parties " f"seeking the unauthorized release of CPNI." )) else: desc = data_broker_description or ( "Each such inquiry was refused, documented, and escalated." ) _b(doc, ( f"{entity_name} HAS received data broker or pretexting-style " f"inquiries during the reporting period. {desc}" )) _h(doc, "7. Breach Log Summary") if not breaches: _b(doc, ( f"{entity_name} experienced no CPNI breaches during the " f"reporting period. No 47 CFR \u00a7 64.2011 notifications were " f"required." )) else: _b(doc, ( f"{entity_name} experienced {len(breaches)} CPNI breach" f"{'es' if len(breaches) != 1 else ''} during the reporting " f"period; each was reported within 7 business days." )) _h(doc, "8. Penalties, Truthfulness, and Perjury Acknowledgment") _b(doc, ( f"{entity_name} and the undersigned acknowledge that CPNI rule " f"violations may subject the carrier to forfeitures up to " f"{MAX_FORFEITURE_PER_VIOLATION} per violation and up to " f"{MAX_FORFEITURE_CAP} for any single act or failure to act " f"(adjusted per 47 CFR \u00a7 1.80)." )) _b(doc, ( "Pursuant to 47 CFR \u00a7 1.17, the undersigned represents that no " "material factual information has been withheld and all statements " "are truthful, accurate, and complete." )) _b(doc, ( "The undersigned acknowledges that willful false statements are " "punishable under Title 18, U.S.C. \u00a7 1001, and by forfeiture " "under 47 U.S.C. \u00a7 503." )) _h(doc, "9. Signature of Certifying Officer") _b(doc, ( "I declare under penalty of perjury under the laws of the United " "States of America that the foregoing is true and correct." )) p = doc.add_paragraph(); _sp(p, after=0) sig = doc.add_paragraph(); sig.add_run("_" * 45).font.size = Pt(10) _sp(sig, after=2) nm = doc.add_paragraph(); nr = nm.add_run(signer); nr.bold = True nr.font.size = Pt(10); _sp(nm, after=2) tpp = doc.add_paragraph() tpp.add_run(f"{title}, {entity_name}").font.size = Pt(10) _sp(tpp, after=2) dp = doc.add_paragraph(); dp.add_run(f"Date: {today}").font.size = Pt(10) _sp(dp, after=2) out = Path(output_path) out.parent.mkdir(parents=True, exist_ok=True) doc.save(str(out)) LOG.info("CPNI IXC certification letter generated: %s", out) return str(out)