Every MVNO LI checklist should cover the technical, legal, and operational requirements before launch. Launching an MVNO is a complex undertaking that requires coordinating wholesale access agreements, network infrastructure, billing systems, customer care platforms, and regulatory compliance — all under tight timelines and budget constraints. Among these requirements, 合法截取合规性 is frequently underestimated in terms of both complexity and the time required to achieve it. Yet failing to have a functional LI capability in place before going live can delay your launch, trigger regulatory enforcement, and damage your relationship with the authorities from day one.
本检查清单全面概述了移动虚拟网络运营商（MVNO）在启动合法截取服务前需要处理的所有事项。它涵盖了法律、技术、运营和组织方面的要求，旨在帮助移动虚拟网络运营商系统地规划其合法截取合规计划，及早发现不足之处，并避免那些可能导致服务推迟上线及引发合规风险的常见陷阱。.
您的 MVNO 许可清单从这里开始
任何移动虚拟网络运营商（MVNO）在实现本地化（LI）合规过程中的第一步，就是了解并满足目标市场的监管注册要求。 在大多数欧洲国家，提供公共电子通信服务需要向国家监管机构提交通知或办理注册手续——例如法国的ARCEP、德国的BNetzA、荷兰的ACM、西班牙的CNMC，以及其他市场的相应监管机构。此类注册通常伴随着支持合法截获的隐含或明确义务。.
Before going live, ensure that your registration is complete and that you have formally acknowledged your LI obligations. In some jurisdictions LI duties are notified and proven separately from the general registration; in Germany, for example, after operation starts (§ 170 TKG). Light MVNOs there must tell the regulator which operator implements interception orders for their users. In other jurisdictions, the obligation attaches automatically upon registration. Either way, you should be clear on the specific obligations that apply in your market and should have a documented plan for meeting them.
如果您计划在多个市场开展业务，每个市场都会有各自的注册要求和当地代表（LI）义务。请针对每个市场分别制定合规计划，因为各市场的要求可能存在显著差异。.
法律框架审查
在构建任何技术能力之前，您必须彻底了解目标市场中关于合法截取的法律框架。这包括主要立法（电信法）、实施条例（截取条例或法令），以及监管机构或执法技术主管部门发布的任何次级指导文件。 您还应了解程序框架——谁有权签发截取令、所需的授权流程是什么，以及运营商在保密、数据保护和记录保存方面的义务。.
聘请在目标市场具备电信监管和合法截取方面专业知识的法律顾问。普通的公司法律顾问或数据保护律师可能缺乏应对合法截取（LI）法律环境所需的专门知识。投资于专业法律咨询将带来丰厚回报，有助于避免合规错误和监管纠纷。.
主运营商协议审查
作为一家移动虚拟网络运营商（MVNO），您与宿主移动网络运营商（MNO）的关系是决定您合法截取能力的关键。请仔细审查您的批发协议或MVNO协议，以确定其中与合法截取相关的条款。关键问题包括：协议中是否涉及合法截取？如果涉及，MNO承担哪些责任，而哪些责任仍由MVNO承担？ MNO 是否作为批发协议的一部分提供任何合法截取服务——例如截取执行、数据传输或搜查令管理？MNO 提供的合法截取服务的响应时间和服务水平如何？谁负责与执法机构和国家技术主管部门对接？
如果协议中未提及LI，则存在一个重大漏洞，必须在上线前予以解决。 应协商达成一项修订协议或补充协议，明确界定各方的LI责任。若移动网络运营商（MNO）提供LI服务，请确保其服务水平足以满足您的监管义务；若移动网络运营商（MNO）不提供LI服务，您则需要自行构建或采购相关能力。.
技术基础设施
The technical infrastructure for lawful interception includes several components that must be in place before going live. The core components are the LI管理系统 (LIMS), which receives and manages warrants and provisions the network, and the 调解平台, which formats and delivers the intercepted data over the national handover interfaces to law enforcement. Both must support the specific national interface requirements of your target market and must be capable of interfacing with your network infrastructure.
Depending on your MVNO architecture, you may also need points of interception in your own network elements, secure connectivity to the agencies’ monitoring facilities (LEMF) or the national technical platform, and secure storage for audit logs and interception-related records.
技术基础设施必须在正式上线前完成部署、配置、测试和验证。这一过程通常需要数月时间，因此应在计划的上线日期之前尽早启动。.
测试与认证
Most national LI frameworks require operators to demonstrate their interception capability through formal testing, either before launch or shortly after it. This testing is typically conducted with, or accepted by, the authority responsible for LI compliance (for example the Bundesnetzagentur in Germany, § 170 TKG) and usually includes connection tests with the receiving law-enforcement systems, such as France’s national judicial interception platform (PNIJ). It covers a range of interception scenarios including voice calls, SMS, data sessions, and various target identification methods.
请提前充分规划测试流程。向相关主管部门索取测试规范，制定测试计划和程序，并在与主管部门接洽之前进行内部测试以验证系统。请做好多次测试迭代的准备——第一轮测试中发现需要整改并重新测试的问题是常有的事。.
Be ready to implement orders from the first day of service. In some countries formal acceptance follows the launch: in Germany you notify the Bundesnetzagentur after starting operation, send the documentation within one month and agree an acceptance test date (§ 170(1) TKG). Where acceptance is a prerequisite, make sure it is achieved before going live with commercial services, or that you have an interim arrangement in place that the regulator accepts.
操作规程与人员
仅靠技术基础设施是不够的。您还需要制定操作规程并配备经过培训的人员来管理截获流程。应制定书面规程，涵盖接收截获令、验证法律授权、启用和停用截获措施、回应执法机构的查询、处理紧急或紧急请求、管理系统故障和事件，以及维护审计日志等内容。.
Identify and train the personnel who will be responsible for LI 操作. In most jurisdictions, only a limited number of vetted individuals should have access to the LI system and knowledge of active interceptions. Define roles, responsibilities, and access controls. Ensure that your LI staff understand both the technical and legal aspects of their role, including the confidentiality obligations that apply to interception activities.
请仔细考虑人员配置方案。LI订单可能随时到达，包括非工作时间。您需要确保有人能够按照监管框架规定的时间要求，及时响应紧急拦截请求。这可能需要采取值班安排、托管服务支持或自动化处理能力。.
安全与保密
LI 系统及其处理的数据需要在贵组织内部得到最高级别的安全保障。应针对 LI 设备实施物理安全控制措施，针对 LI 通信实施网络安全控制措施，实施仅限授权人员访问 LI 系统的访问控制措施，对静止数据和传输中的数据进行加密，并建立全面的审计日志记录机制。 制定保密政策和程序，包括针对 LI 员工的保密协议、信息隔离协议，以及针对影响 LI 系统的安全漏洞的事件响应程序。.
数据保留合规性
In addition to real-time interception, check which retention duties are actually in force in your market. Traffic-data retention varies widely across the EU after several CJEU rulings: in Germany, for example, the statutory duty is currently not applied, and a new IP-address retention law is in the legislative process. Subscriber-data duties, such as collecting and verifying customer data before activation, usually apply regardless. Review the 数据保留 requirements in your target market and ensure that your systems can capture, store, and retrieve the required data categories. Data retention and lawful interception are related but distinct obligations, and both must be addressed before going live.
文档编制与审计准备
最后，请确保您的整个 LI 合规计划已得到全面记录，并能随时接受审计。 这包括对您的 LI 架构和系统、操作流程、员工资质和访问控制、测试结果及认证状态、主机移动网络运营商（MNO）安排以及数据保留政策的记录。在监管检查、审计以及任何涉及您合规状态的争议中，这些记录都将至关重要。.
结论
实现合法截获合规是一项多方面的努力，需要兼顾法律、技术、运营和组织等多个维度。 对于移动虚拟网络运营商（MVNO）而言，由于依赖于主移动网络运营商（MNO）的基础设施，且需要协调多方之间的合规工作，这一挑战更加复杂。通过系统地执行本检查清单，并在服务上线规划阶段尽早着手，MVNO 可以确保在正式上线前达到合规要求，并从运营首日起就对自身履行合法截获义务的能力充满信心。.
时间表规划
A realistic timeline for achieving LI compliance from scratch is six to twelve months, depending on the complexity of your network, the requirements of your target market, and the responsiveness of the relevant national authority. MVNOs should begin their LI compliance programme at least twelve months before the planned launch date to allow for the inevitable delays and iterations that characterise the process. Key milestones should include the completion of the legal framework review within the first month, the selection and procurement of the LIMS and mediation platform within months two and three, the completion of system deployment and internal testing by month six, formal testing with the national authority between months seven and nine, and operational readiness including staff training and procedure documentation by month ten. Building this timeline into your overall launch plan ensures that LI compliance does not become a last-minute obstacle to commercial launch.
在正式上线前完成MVNO LI检查清单上的每一项内容是绝对必要的。如果等到上线后才回头处理MVNO LI检查清单上的事项，将付出更高的成本并面临更大的风险。.
相关文章
如需进一步了解相关主题，请浏览这些文章：
外部资源
以下外部资源提供了更多背景资料和官方文件：
