The U.S. Supreme Court appeared hesitant during oral argument to embrace AT&T and Verizon’s effort to upend the Federal Communications Commission’s in-house penalty process, a challenge that could have reshaped how federal agencies pursue civil enforcement.

The dispute stems from FCC allegations that the telecom companies failed to adequately protect customers’ location data, allowing sensitive information to be sold or accessed without sufficient safeguards. Rather than focusing only on telecom privacy, the case has become a broader test of whether agencies may investigate, adjudicate, and impose penalties through their own administrative mechanisms before judicial review occurs.

Based on the justices’ questioning, the Court seemed unconvinced that the FCC’s current process is inherently unlawful. That matters well beyond this case. A ruling for the carriers could have provided a roadmap for regulated companies to challenge not just FCC enforcement, but also civil penalty regimes used across the administrative state. If the Court ultimately rejects the challenge, agencies may read the decision as an endorsement—at least in broad strokes—of existing enforcement structures.

For litigators, the case is a reminder that procedural attacks on agency enforcement remain very much alive, even if this particular challenge appears to face a difficult path. Defense strategy in regulatory matters increasingly turns on threshold constitutional and structural arguments, not just the underlying merits. A final decision could shape forum fights, timing of judicial review, preservation issues, and how aggressively companies contest administrative proceedings before a penalty becomes final.

For in-house counsel and compliance teams, the privacy backdrop is equally important. Customer location data continues to draw close scrutiny from regulators and plaintiffs’ lawyers alike, and this case underscores that data-governance failures can trigger exposure on multiple fronts: agency investigation, monetary penalties, reputational harm, and follow-on civil litigation. Even if the FCC prevails on process, the substantive lesson for telecom and adjacent data-driven businesses is clear—controls around collection, sharing, vendor access, and consent remain central risk areas.

The case is also worth watching as part of the Supreme Court’s larger administrative law docket. In recent terms, the Court has not hesitated to scrutinize agency power. But skepticism toward expansive regulation does not always translate into willingness to dismantle every established enforcement mechanism. If that distinction holds here, the decision could mark an important boundary line: agencies may face tighter substantive limits, while still retaining meaningful procedural tools to police alleged violations.

For legal professionals tracking regulatory exposure, the eventual opinion may be less about telecom alone than about the durability of administrative enforcement as a whole.