Tech Law Journal Daily E-Mail Alert
Saturday, March 24, 2012, Alert No. 2,355.
Home Page | Calendar | Subscribe | Back Issues | Reference
FCC CSRIC Makes Recommendations Regarding ISP Cyber Security

3/22. The Federal Communications Commission (FCC) announced in a release that its Communications Security, Reliability and Interoperability Council (CSRIC) "adopted recommendations for voluntary action by Internet service providers (ISPs) to combat three major cyber security threats, including botnets, attacks on the Domain Name System (DNS), and Internet route hijacking". See also, second release, and speech by FCC Chairman Julius Genachowski.

Neither the FCC nor the CSRIC released the text of any recommendations.

These FCC releases, and Genachowski's speech, describe three CSRIC reports that contain a set of proposals, directed primarily at commercial providers of internet access services, compliance with which would be voluntary.

The FCC does not now propose to adopt any rules, or initiate any adjudicatory proceedings. Genachowski stated that "Solutions to cyber threats require the multiple stakeholders of the Internet community to work together and develop practical solutions to secure our networks. The goal isn't regulation".

He also stated that AT&T, CenturyLink, Comcast, Cox, Sprint, Time Warner, and Verizon "have already committed to implement the core recommendations of all three reports".

The FCC Chairman also predicted that the "CSRIC’s voluntary cybersecurity measures will soon become the industry standard operating procedures".

AT&T's Bob Quinn stated in a release that "AT&T is already fulfilling the recommendations in the reports".

"For every new solution we put in place, the attackers are already looking for a means to exploit or circumvent those solutions", said Quinn. "We need to avoid an outcome where we publish our playbook for our adversaries and potentially prematurely standardize solutions that may ultimately prove inadequate in addressing the changing cyber threat. While we are continuing to track industry developments in this space, we need to keep these issues in mind and not lull ourselves into a false sense of security."

Walter McCormick, head of the US Telecom, stated in a release that "solutions to cyber threats will require multiple stakeholders in the Internet community to work together, and that the multi-stakeholder process, rather than a regulatory approach, has proven over time to be an effective way to secure networks while keeping the Internet an open platform for innovation and communication. We are pleased that the recommendations adopted today recognize the need for more work in areas where standards are still under development, and where economic barriers may exist for some companies whose business models do not allow them to recover investments in cybersecurity solutions."

Botnets. First, the CSRIC recommendations address "botnets in residential networks". It recommends a voluntary code for ISPs.

Botnet is a slang term of recent origin derived from the words robot network. It is used to describe a collection of software robots that reside on a collection of compromised computers, almost always without the authority or knowledge of the owners or operators, that are controlled remotely for various nefarious purposes. The compromised computers are often referred to as zombies.

The purposes for forming botnets include sending spam, running denial of service attacks, committing click fraud, and infecting computers with spyware. Botnet based spam can be used for less harmful purposes, such as marketing, or for more harmful purposes, such as pump and dump securities fraud, theft of personal and financial information to commit further crimes, and various consumer fraud schemes. Also, Botnet operators sometimes lease spamming capacity to others.

The FCC release states that "To reduce the threat of botnets in residential networks, CSRIC recommended a voluntary U.S. Anti-Bot Code of Conduct for Internet Service Providers (Anti-Bot Code). Under the Anti-Bot Code, ISPs agree to educate consumers about the botnet threat, take steps to detect botnet activity on their networks, make consumers aware of botnet infections on their computers, offer assistance to consumers whose computers are infected and collaborate with other service providers that have also adopted the Anti-Bot Code." (Parentheses in original.)

The code calls for ISPs to detect botnet activity on their customers' devices, to notify such customers that their equipment may be infected, and to provide information and assistance in remediating botnet infections. However, the code does not require ISPs to take any unilateral action to remediate infections, or suspend or limit service to any customers with infected devices.

Microsoft's Kevin Sullivan stated in a release that "the contents of this code are heavily based in the outstanding efforts that several ISPs already perform to help protect their customers".

Genachowski stated that "customers of CenturyLink and Comcast can already go to those companies' websites and download a tool that will scrub your computer if it’s infected by malware".

DNSSEC. Second, the CSRIC recommendations address the Domain Name System (DNS) and DNS Security Extensions (DNSSEC). The FCC release states that the CSRIC recommends certain "best practices", but does not disclose what any of these "best practices" are.

DNSSEC is a suite of applications designed by the Internet Engineering Task Force (IETF) to add security to the DNS, by enabling cryptographic signature of DNS records, for the purpose of providing secure authentication of internet assets.

The concept is that when broadly implemented by authoritative name servers and requesting applications, it will prevent man in the middle attacks on DNS queries by allowing provable authenticity of DNS records and provable inauthenticity of forged data. See also, Wikipedia pages for Domain Name System, name server, DNS hikacking, and DNSSEC.

DNSSEC's secure authentication is intended to limit the distribution of malware and other bad activity on the internet than can be used to expose credit card data, the content of e-mail, and other confidential information.

The FCC release states that the "CSRIC recommended that ISPs implement best practices to better secure the Domain Name System. DNS works like a telephone book for the Internet, but lack of security for DNS has enabled spoofing, allowing Internet criminals to coax credit card numbers and personal data from users who do not realize they are on an illegitimate website. DNSSEC is a set of secure protocol extensions that prevent such fraudulent activity. This recommendation is a significant first step toward full DNSSEC implementation by ISPs and will allow users, with software applications like browsers, to validate that the destination they are trying to reach is authentic and not a spoofed website."

Comcast, which is both a broadband internet access service provider, and a participant in the FCC's CSRIC, announced in January 10 release that it has "fully implemented" DNSSEC.

Comcast's John Schanz, who is a member of the CSRIC, stated in a March 23 release that Comcast hopes that the CSRIC's action "will encourage other major ISPs to implement DNSSEC, and to encourage domain owners like commerce and banking-related sites to begin signing their domain names with DNSSEC".

Schanz also disclosed that "The working group also recommends that software developers, such as those creating operating-systems, web-browsers, and other Internet-focused applications, study how and when to incorporate DNSSEC validation functions into their software." (The CSRIC has many working groups, including one titled "Cyber Security Best Practices".)

IP Route Hijacking. Third, the CSRIC recommendations address IP route hijacking.

The FCC release states that the "CSRIC recommended an industry framework to prevent Internet route hijacking, which is the erroneous routing of Internet traffic through potentially untrustworthy networks. CSRIC recommended that ISPs work to implement new technologies and practices to reduce the number of these events, thereby ensuring that users in the U.S. can be more confident that their Internet traffic will not be exposed to scrutiny by other networks, foreign or domestic, through misrouting."

Comcast's Schanz stated that "Improving the integrity of the global routing system has been a hope for quite some time. While there is work still to be done, Comcast joins other large network operators in our commitment to make sure data about resources is more reliable and accurate as a necessary precursor to any other enhancements which may be contemplated."

Genachowski added that the CSRIC "calls on network operators to develop and adopt new technical standards that will secure Internet routing. The secure Border Gateway Protocol standards would establish a certified registry that will enable ISPs to validate the authenticity of routing information, securing the foundations of trust between networks, which has been so essential to the Internet’s success".

GAO Reports on National Security Risks of Reliance on Global IT Supply Chain

3/23. The Government Accountability Office (GAO) released a report [45 pages in PDF] titled "IT Supply Chain: National Security-Related Agencies Need to Better Address Risks".

This report states that "Reliance on a global supply chain introduces multiple risks to federal information systems and underscores the importance of threat assessments and risk mitigation. These risks include threats posed by actors -- such as foreign intelligence services or counterfeiters -- who may exploit vulnerabilities in the supply chain, thus compromising the confidentiality, integrity, or availability of the end-system and the information it contains. This in turn can adversely affect an agency's ability to carry out its mission." (Footnote omitted.)

This report does not identify or describe any actual exploitations that have already occurred.

The GAO examined policies and procedures at only five federal agencies, the Department of Energy (DOE), Department of Homeland Security (DHS), Department of Justice (DOJ), and Department of Defense (DOD). This report does not address polices and procedures at the Office of the Director of National Intelligence (ODNI), National Security Agency (NSA), Central Intelligence Agency (CIA), and Defense Intelligence Agency (DIA).

Nor does the report address supply chain vulnerabilities in the private sector.

It finds that the DOE and DHS "have not developed clear policies that define what security measures, if any, should be implemented to protect against supply chain threats."

It also finds that the DOE, DOJ, and DHS "have neither developed and documented procedures for implementing supply chain protection measures nor established monitoring capabilities that are necessary to verify compliance with, and the effectiveness of, these measures."

In contrast, the report finds that the DOD "has made greater progress by defining supply chain protection measures and implementing procedures".

The House Commerce Committee's (HCC) Subcommittee on Oversight and Investigations will hold a hearing at 10:00 AM on March 27 titled "IT Supply Chain Security: Review of Government and Industry Efforts". The witnesses will be Gregory Wilshusen (GAO), Mitchell Komaroff (Department of Defense), Gil Vega (Department of Energy), Larry Castro (Chertoff Group), and Dave Lounsbury (The Open Group). See, notice.

DOJ Files FCA Complaint Against AT&T for IP Relay Reimbursements

3/22. The Department of Justice (DOJ) filed a civil complaint in the U.S. District Court (WDPenn) against AT&T alleging violation of the federal False Claims Act (FCA) in connection with its receipt of federal payments for IP Relay calls by international callers who were ineligible for the service.

The DOJ explained in a release that "IP Relay is a text-based communications service designed to allow hearing-impaired individuals to place telephone calls to hearing persons by typing messages over the Internet that are relayed by communications assistants (CAs) employed by an IP Relay provider. IP Relay is funded by fees assessed by telecommunications providers to telephone customers, and is provided at no cost to IP Relay users. The FCC, through the TRS Fund, reimburses IP Relay providers".

The DOJ release states that the complaint alleges that "AT&T knowingly adopted a non-compliant registration system that did not verify whether the user was located within the United States" and that "AT&T continued to employ this system even with the knowledge that it facilitated use of IP Relay by fraudulent foreign callers"

The Federal Communications Commission (FCC) stated in a release that it "welcomes the Department of Justice's filing, which arises from an investigation that the Commission's Office of Inspector General actively assisted."

The FCC added that "Fraudulent IP Relay practices are a serious problem the Commission has been addressing, and the Commission's Enforcement Bureau also has ongoing investigations of IP Relay practices. We will continue to work with DOJ and other law enforcement authorities to protect these critical services from abuse."

This case is U.S. ex rel. Lyttle v. AT&T Corp., D.C. No. 2:10-cv-1376, U.S. District Court for the Western District of Pennsylvania.

More News

3/23. The Government Accountability Office (GAO) released a report [7 pages in PDF] titled "To Date, DISH Network Is Cooperating with the Court-Appointed Special Master’s Examination of Its Compliance with the Section 119 Statutory License".

3/20. The National Institute of Standards and Technology (NIST) published a research grant program notice on March 15, 2012, regarding long term research in next generation semiconductor technology. The NIST stated in a March 20 release that the "NIST plans to provide up to $2.6 million in federal cost-shared funding for a project's first year, with the potential for continued funding for up to five years" for research regarding "complementary metal oxide semiconductor (CMOS) technology". The deadline to submit proposals is 5:00 PM on April 16, 2012. The funding opportunity number is 2012-NIST-POST-CMOS-01

3/19. The Government Accountability Office (GAO) released a report [43 pages in PDF] titled "Electronic Waste: Actions Needed to Provide Assurance That Used Federal Electronics Are Disposed of in an Environmentally Responsible Manner".

About Tech Law Journal

Tech Law Journal publishes a free access web site and a subscription e-mail alert. The basic rate for a subscription to the TLJ Daily E-Mail Alert is $250 per year for a single recipient. There are discounts for subscribers with multiple recipients.

Free one month trial subscriptions are available. Also, free subscriptions are available for federal elected officials, and employees of the Congress, courts, and executive branch. The TLJ web site is free access. However, copies of the TLJ Daily E-Mail Alert are not published in the web site until two months after writing.

For information about subscriptions, see subscription information page.

Tech Law Journal now accepts credit card payments. See, TLJ credit card payments page.

Solution Graphics

TLJ is published by David Carney
Contact: 202-364-8882.
carney at techlawjournal dot com
3034 Newark St. NW, Washington DC, 20008.

Privacy Policy
Notices & Disclaimers
Copyright 1998-2012 David Carney. All rights reserved.

In This Issue
This issue contains the following items:
 • FCC CSRIC Makes Recommendations Regarding ISP Cyber Security
 • GAO Reports on National Security Risks of Reliance on Global IT Supply Chain
 • DOJ Files FCA Complaint Against AT&T for IP Relay Reimbursements
 • More News
Washington Tech Calendar
New items are highlighted in red.
Monday, March 26

The House will meet at 12:00 NOON for morning hour, and at 2:00 PM for legislative business. The House will consider several non-technology related items under suspension of the rules. Votes will be postponed until 6:30 PM. See, Rep. Cantor's schedule.

The Senate will meet at 2:00 PM. It will resume consideration of S 2204 [LOC | WW], a tax bill pertaining to coal, biofuels, electric vehicles, energy efficiency, and oil companies.

9:00 AM - 3:00 PM. The U.S. China Economic and Security Review Commission will hold a hearing titled "Developments in China's Nuclear and Cyber Programs". The deadline to submit written statements is March 23. See, notice in the Federal Register, Vol. 77, No. 49, Tuesday, March 13, 2012, at Pages 14859-14860. Location: Hylton Performing Arts Center, 10960 George Mason Circle, Manassas, VA.

POSTPONED. 12:30 - 2:00 PM. The Federal Communications Bar Association (FCBA) will host a brown bag lunch titled "The Impact of the New Legislation on Public Safety Communications". Location: Harris Corporation, Suite 850E, 600 Maryland Ave., SW.

5:00 PM. The House Rules Committee (HRC) will meet to adopt a rule for consideration of HR 3309 [LOC | WW], the "Federal Communications Commission Process Reform Act of 2012". See, notice. See, stories titled "House Commerce Committee Approves FCC Reform Bills", "Amendment by Amendment Summary of Mark Up of HR 3309", and "Summary of HR 3309, the FCC Process Reform Act " in TLJ Daily E-Mail Alert No. 2,345, March 6, 2012. Location: Room H-313, Capitol Building.

5:00 PM. Deadline to submit comments to the National Telecommunications and Information Administration (NTIA) in response to its request for comments in its wide ranging private sector data privacy inquiry. The NTIA seeks comments regarding "substantive consumer data privacy issues that warrant the development of legally enforceable codes of conduct, as well as procedures to foster the development of these codes". See, notice in the Federal Register, Vol. 77, No. 43, Monday, March 5, 2012, at Pages 13098-13101.

Extended deadline to submit reply comments to the Federal Communications Commission (FCC) on Census Block Eligibility Challenges to the FCC's February 2, 2012, Public Notice (DA 12-121) regarding Auction 901 (AU Docket No. 12-25), scheduled to begin on September 27, 2012. This is the FCC's reverse auction to give $300 Million in universal service subsidies to carriers that commit to provide 3G or better mobile voice and broadband services where such service is unavailable. The FCC calls this expansion of universal service programs "Mobility Fund Phase I Support". See also, FCC's February 2, 2012, Public Notice (DA 12-121), and notice in the Federal Register (FR), Vol. 77, No. 28, Friday, February 10, 2012, at Pages 7152-7162; FCC's February 10, 2012, Public Notice (DA 12-187), and notice in the FR, Vol. 77, No. 33, Friday, February 17, 2012, at Pages 9655-9656; and FCC's February 16, 2012, Public Notice (DA 12-236) extending comment deadlines, extension notice in the FR, Vol. 77, No. 37, Friday, February 24, 2012, at Pages 11115-11116.

Deadline to submit nominations to the Department of Commerce's (DOC) International Trade Administration (ITA) for membership on the U.S.-India CEO Forum. See, notice in the Federal Register, Vol. 77, No. 28, Friday, February 10, 2012, at Pages 7132-7133. This notice does not set a deadline date. Rather it states, "45 days after publication of this Notice".

Tuesday, March 27

The House will meet at 10:00 AM for morning hour, and at 12:00 NOON for legislative business. The House will consider the Senate passed version of HR 3606 [LOC | WW], the "Jumpstart Our Business Startups Act" or "JOBS Act", a bill to reduce regulatory barriers to capital formation by small and start up companies. The House will also consider HR 3309 [LOC | WW], the "Federal Communications Commission Process Reform Act of 2012". See, notice. See, stories titled "House Commerce Committee Approves FCC Reform Bills", "Amendment by Amendment Summary of Mark Up of HR 3309", and "Summary of HR 3309, the FCC Process Reform Act " in TLJ Daily E-Mail Alert No. 2,345, March 6, 2012.

9:00 AM - 5:00 PM. Day one of a two day meeting of the Department of Energy's (DOE) Advanced Scientific Computing Advisory Committee (ASCAC). The agenda includes an update on Exascale computing and the Magellan Report for Cloud Computing in Science [170 pages in PDF]. See, notice in the Federal Register, Vol. 77, No. 42, Friday, March 2, 2012, at Page 12823. Location: American Geophysical Union (AGU), 2000 Florida Ave., NW.

10:00 AM. The House Commerce Committee's (HCC) Subcommittee on Oversight and Investigations will hold a hearing titled "IT Supply Chain Security: Review of Government and Industry Efforts". The witnesses will be Gregory Wilshusen (GAO), Mitchell Komaroff (Department of Defense), Gil Vega (Department of Energy), Larry Castro (Chertoff Group), and Dave Lounsbury (The Open Group). See, notice. Location: Room 2123, Rayburn Building.

10:00 AM. The House Science Committee's (HSC) Subcommittee on Technology and Innovation will hold a hearing titled "Fostering the U.S. Competitive Edge". See, notice. Location: Room 2318, Rayburn Building.

10:00 AM. The Senate Judiciary Committee's (SJC) Subcommittee on Immigration, Refugees and Border Security will hold a hearing titled "The Economic Imperative for Promoting International Travel to the United States". The SJC will webcast this event. See, notice. Location: Room 226, Dirksen Building.

12:15 - 1:45 PM. The Federal Communications Commission (FCC) and National Telecommunications and Information Administration (NTIA) will host a lunch will host an event titled "The Road Ahead for Spectrum". It will address the spectrum provisions of HR 3630, [LOC | WW], which President Obama signed into law on February 22, 2012. See, stories titled "House and Senate Negotiators Reach Agreement on Spectrum Legislation", "Summary of Spectrum Bill", and "Reaction to Spectrum Bill" in TLJ Daily E-Mail Alert No. 2,339, February 17, 2012, and story titled "Obama Signs Spectrum Bill into Law" in TLJ Daily E-Mail Alert No. 2,345, February 23, 2011. The speakers will be Bill Lake (Chief of the FCC's Media Bureau), Rick Kaplan (Chief of the FCC's Wireless Telecommunications Bureau), Jennifer Manner (Deputy Chief of the FCC's Public Safety & Homeland Security Bureau), Karl Nebbia (Associate Administrator of the NTIA's Office of Spectrum Management), and Mark Brennan (Hogan Lovells). The price to attend is $17. Lunch will be served. Registrations and cancellations due by 12:00 NOON on Friday, March 23, 2012. The FCBA states that this is an FCBA event. Location: Wiley Rein, 1776 K St., NW.

2:00 PM. The House Foreign Affairs Committee (HFAC) will meet to mark up bills, including HR 3605 [LOC | WW], the "Global Online Freedom Act of 2011". See, notice. Location: Room 2172, Rayburn Building.

2:30 PM. The Senate Intelligence Committee (SIC) will hold a closed hearing. See, notice. Location: Room 219, Hart Building.

6:00 - 9:15 PM. The DC Bar Association will host an event titled "How to Protect and Enforce Trademark Rights". The speakers will be Steven Hollman (Hogan Lovells) and Shauna Wertheim (Marbury Law Group). The price to attend ranges from $89 to $129. CLE credits. See, notice. For more information, call 202-626-3488. The DC Bar has a history of barring reporters from its events. Location: DC Bar Conference Center, 1101 K St., NW.

Wednesday, March 28

The House will meet at 10:00 AM for morning hour, and at 12:00 NOON for legislative business.

9:00 - 10:30 AM. The Information Technology and Innovation Foundation (ITIF) will host a panel discussion titled "Transforming Higher Education with IT". The speakers will be Robert Atkinson (ITIF), Stephen Ruth (George Mason University's School of Public Policy), and Steve Crawford (George Washington University's Institute of Public Policy). See, notice. Location: ITIF/ITIC: Suite 610, 1101 K St., NW.

9:00 AM - 12:00 NOON. Day two of a two day meeting of the Department of Energy's (DOE) Advanced Scientific Computing Advisory Committee (ASCAC). The agenda includes an update on Exascale computing and the Magellan Report for Cloud Computing in Science [170 pages in PDF]. See, notice in the Federal Register, Vol. 77, No. 42, Friday, March 2, 2012, at Page 12823. Location: American Geophysical Union (AGU), 2000 Florida Ave., NW.

10:00 AM. The House Judiciary Committee's (HJC) Subcommittee on Crime, Terrorism, and Homeland Security will hold a hearing on several bills, including HR 4216 [LOC | WW], the "Foreign Counterfeit Prevention Act", and HR  3668 [LOC | WW], the "Counterfeit Drug Penalty Enhancement Act of 2011". See, notice. Location: Room 2141, Rayburn Building.

10:00 AM. The House Commerce Committee's (HCC) Subcommittee on Communications and Technology will hold a hearing titled "Cybersecurity: Threats to Communications Networks and Public-Sector Responses". The witnesses will be Fiona Alexander (National Telecommunications and Information Administration), James Barnett (Chief of the FCC's Public Safety and Homeland Security Bureau), Bob Hutchinson (Sandia National Laboratories), Greg Shannon (CERT, Carnegie Mellon University), and Roberta Stempfley (acting DHS Assistant Secretary for Cyber Security and Communications). See, notice. Location: Room 2322, Rayburn Building.

10:00 AM. The House Foreign Affairs Committee (HFAC) will hold a hearing titled "Investigating the Chinese Threat, Part One: Military and Economic Aggression". The witnesses will be Dean Cheng (Heritage Foundation), John Tkacik (International Assessment and Strategy Center), and Larry Wortzel (Commissioner, US-China Economic and Security Review Commission). See, notice. Location: Room 2172, Rayburn Building.

12:15 - 1:30 PM. The Federal Communications Bar Association's (FCBA) Homeland Security and Emergency Communications Committee will host a lunch. The speaker will be Jamie Barnett, Chief of the FCC's Public Safety and Homeland Security Bureau. Registration is required by Wednesday, March 21. Location: Monet Ballroom, L’Enfant Plaza Hotel, 480 L'Enfant Plaza, SW.

1:00 - 2:00 PM. The National Science Foundation's (NSF) National Science Board's (NSB) Committee on Strategy and Budget Task Force on Data Policies will meet to discuss "data policies". The meeting will be teleconferenced. See, notice in the Federal Register, Vol. 77, No. 50, Wednesday, March 14, 2012, at Page 15141. Location: Federal Register, Vol. 77, No. 50, Wednesday, March 14, 2012, at Page 15141. Location: 4201 Wilson Blvd., Arlington, VA.

1:00 - 4:00 PM. The Federal Communications Commission's (FCC) Technological Advisory Council will meet. See, notice in the Federal Register, Vol. 77, No. 42, Friday, March 2, 2012, at Page 12839. Location: FCC, 445 12th St.,  SW.

2:00 PM. The House Appropriations Committee's (HAC) Subcommittee on Financial Services and General Government will hold a hearing on the FY 2013 budget for the Judiciary. See, notice. Location: Room 2359, Rayburn Building.

2:30 PM. The Senate Judiciary Committee (SJC) will hold a hearing titled "Nominations". See, notice. The SJC will webcast this event. Location: Room 226, Dirksen Building.

2:30 PM. The House Foreign Affairs Committee's (HFAC) Subcommittee on Oversight and Investigations will hold a hearing titled "The Price of Public Diplomacy with China". The witnesses will be Steven Mosher (Population Research Institute), Kai Chen, and Greg Autry. See, notice. Location: Room 2172, Rayburn Building.

Thursday, March 29

The House will meet at 9:00 AM for legislative business.

9:30 AM - 2:00 PM. The Federal Communications Commission's (FCC) North American Numbering Council (NANC) will meet. See, notice in the Federal Register, Vol. 77, No. 42, Friday, March 2, 2012, at Pages 12839-12840. Location: Room 5-C162, FCC, 445 12th St., SW.

9:30 AM. The Senate Judiciary Committee (SJC) will hold an executive business meeting. The agenda again includes consideration of the nominations of Richard Taranto to be a Judge of the U.S. Court of Appeals (FedCir), Robin Rosenbaum to be a Judge of the U.S. District Court (SDFl), and Gershwin Drain to be a Judge for the U.S. District Court (EDMich). The SJC will webcast this event. See, notice. Location: Room 226, Dirksen Building.

10:00 AM. The House Commerce Committee's (HCC) Subcommittee on Commerce, Manufacturing and Trade will hold a hearing tilted "Balancing Privacy and Innovation: Does the President's Proposal Tip the Scale?". See, notice. Location: Room 2123, Rayburn Building.

10:00 AM - 5:00 PM. The Commodity Futures Trading Commission's (CFTC) Technology Advisory Committee will meet. The agenda includes "automated and high frequency trading, final recommendations of the subcommittee on data standardization, and market structure and technology issues relating to credit limit checks". Written comments are due by March 28. See, notice in the Federal Register, Vol. 77, No. 52, Friday, March 16, 2012, at Page 15737. Location: CFTC, Three Lafayette Centre, 1155 21st St., NW.

1:00 PM. The Office of the U.S. Trade Representative (OUSTR) will hold a hearing to assist it in preparing its 2011 Annual GSP Product Review. The hearing will cover only the petitions for new products and CNL waivers that have been previously submitted and accepted for review in the 2011 GSP Annual Review. Post hearing comments are due by 5:00 PM on April 16, 2012. See, original notice in the Federal Register, Vol. 77, No. 34, Tuesday, February 21, 2012, at Pages 10034-10036. See also, notice of change of date in the Federal Register, Vol. 77, No. 52, Friday, March 16, 2012, at Page 15841. Location: OUSTR, 600 17th St., NW.

2:30 PM. The Senate Intelligence Committee (SIC) will hold a closed hearing. See, notice. Location: Room 219, Hart Building.

TIME? The U.S. China Economic and Security Review Commission will hold a hearing titled "European Union Relations and Implications for the U.S.". Location: :__.

Friday, March 30

Rep. Cantor's schedule states that "no votes are expected in the House".

Supreme Court conference day. See, calendar. Closed.

RESCHEDULED FOR APRIL 13. 12:00 NOON - 1:00 PM. Federal Communications Commission (FCC) Commissioner Robert McDowell will speak. Free. Brown bag lunch. The FCBA states that this is an FCBA event of its Young Lawyers Committee. Location: FCC, 8th floor South Conference Room, 445 12th St., SW.

Possible date for the Office of the U.S. Trade Representative (OUSTR) to release its annual report titled "National Trade Estimate Report on Foreign Trade Barriers".