BelgiumRoyal Decree of 12 May 2024, Blocking of International Voice Calls with Spoofed Belgian Telephone Numbers
archived copy
Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived . Publisher's page: https://www.ejustice.just.fgov.be/cgi/article_body.pl?language=nl&caller=summary&pub_date=24-06-13&numac=2024005253In force since .
A telephone contact rule binding private bodies.
- Obligation class
- Security, Disclosure
As of .
What it requires
- If you are an operator that directly receives incoming international telephone calls through your international network interfaces, take measures to block all calls that do not comply with ITU-T Recommendation E.157, all calls that show a Belgian geographic or non-geographic E.164 telephone number as the identification of the calling party, and all calls that show a short telephone number as that identification.no control in the NIST Privacy Framework
- After verifying that the caller is not roaming abroad with a Belgian mobile E.164 telephone number, block all calls; suppress the identification of the calling party instead only where you can show that such verification is technically infeasible.no control in the NIST Privacy Framework
- Receive international telephone calls only on circuits dedicated to them and clearly separate from national calls.no control in the NIST Privacy Framework
- Allow nomadic calls and calls from cloud-based conference dial-out, customer support and telephone direct marketing services made with Belgian geographic numbers only if they reach you through a special interface under the full control of the originating operator and under an agreement with the caller's operator, which for conference, customer support and direct marketing services lists the numbers concerned; for customer support and direct marketing, use geographic numbers only if the calls and numbers are under the full control of, and assigned to, an undertaking established in Belgium.no control in the NIST Privacy Framework
- On the Institute's simple request, give it within 24 hours the name, address and contact details of the user who made a given call, and if you do not answer in time or your answer is incomplete or incorrect, block all incoming calls of that user within 24 hours.NIST Privacy FrameworkGV.PO-P5
These lines are LexLint's reading of the law's text, as of . Also read by: Belgian Institute for Postal Services and Telecommunications (BIPT) (guidance, recorded ).
In the frameworks
- NIST Privacy Framework
- GV.PO-P5Legal, regulatory, and contractual requirements regarding privacy are understood and managed.
Our reading of where this law's duties sit in each framework, and in the NIST Privacy Framework, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law
Who enforces it
Settledness
- As of
- Guidance link
- https://www.bipt.be/operators/spoofing-royal-decree
- Guidance body
- Belgian Institute for Postal Services and Telecommunications (BIPT)
What this law does
Article 1 of the Royal Decree of requires operators that directly receive incoming international telephone calls through their international network interfaces to take measures to block calls that do not comply with ITU-T Recommendation E.157 and calls that show a Belgian geographic or non-geographic E.164 telephone number as the identification of the calling party.
Under point 3 of Article 1, after verifying that the caller is not roaming abroad with a Belgian mobile E.164 telephone number, they must block all calls, and they may suppress the identification of the calling party instead only if it can be shown that such verification is technically infeasible. Under point 4 of Article 1, they must block all calls that show a short telephone number as the identification of the calling party.
Article 2 allows international telephone calls to be received only on circuits dedicated to them and clearly separate from national calls. Article 3 provides that calls from a Belgian geographic or mobile number that originate in Belgium may not be blocked when they are destined for an incoming roamer, for an outgoing roamer with a late conditional call forwarding to a Belgian number, or for a user of a foreign number who has a forwarding to a Belgian number.
Article 4, paragraph 1 allows nomadic calls and calls from cloud-based conference dial-out, customer support and telephone direct marketing services made with Belgian geographic numbers only if they reach the operators that first receive incoming international calls through a special interface under the full control of the originating operator.
Article 4, paragraph 2 requires the receiving operators to give the Institute, within 24 hours of a simple request, the name, address and contact details of the user who made a given call, and to block all incoming calls of that user within 24 hours if the answer is late, incomplete or incorrect. Article 4, paragraph 3 lets those operators rely on the exception only after they meet the provisions of that Article in an agreement with the caller's operator.
Under Article 6 the Decree takes effect on the first day of the third month after the month of its publication in the Belgisch Staatsblad, and Article 1, point 3 takes effect on the first day of the sixth month after that month. The Belgian Institute for Postal Services and Telecommunications states that operators must take the measures for geographic numbers from and for mobile numbers from .
When LexLint raises it
When your app profile says your app provides telecom services.