The Supreme Court on June 4 delivered an important win for the Federal Communications Commission, holding 8-1 that the agency may continue imposing data-privacy fines on telecommunications carriers through its existing enforcement framework. The ruling rejects a constitutional challenge brought by AT&T and Verizon and leaves intact a key tool the FCC uses to police carrier handling of customer information.

Chief Justice John Roberts wrote the majority opinion. At a high level, the Court concluded that the FCC’s in-house process for assessing penalties against telecom companies does not violate the Constitution in the way the challengers argued. That result is significant well beyond the immediate dispute: the case was closely watched as another test of agency adjudication and administrative enforcement after a series of Supreme Court decisions scrutinizing the power of federal regulators.

For telecommunications companies, the practical takeaway is straightforward. The FCC remains empowered to pursue privacy-related penalties internally, rather than being forced to rely exclusively on federal court actions. That preserves a faster and more specialized enforcement path for alleged violations involving customer proprietary network information and related privacy obligations.

For legal professionals, the decision matters on several levels. Litigators evaluating challenges to agency proceedings will need to account for a Supreme Court opinion that declines to constitutionalize limits on this particular enforcement mechanism. In-house counsel at carriers and other regulated entities should expect continued agency willingness to investigate and penalize privacy lapses through administrative channels. Compliance teams, meanwhile, have another reminder that telecom privacy rules remain a live enforcement priority, not merely a disclosure regime with limited consequence.

The decision also has broader administrative-law implications. Companies facing enforcement from other federal agencies have been looking for opportunities to attack in-house adjudication systems on structural constitutional grounds. This ruling does not end those fights, but it does signal that the Court is not prepared to invalidate every agency penalty scheme that operates outside an Article III courtroom. Expect defendants in future cases to draw finer distinctions based on the specific statute, the nature of the right at issue, and the type of penalty being imposed.

From a risk-management perspective, the opinion reinforces the importance of documenting privacy controls, training, incident response, and governance around regulated customer data. For telecom providers especially, exposure is not limited to reputational harm or consumer claims; it includes continued administrative penalty risk backed by the FCC’s confirmed authority.

For practitioners tracking the intersection of privacy enforcement and constitutional challenges to agency power, this is a decision worth following closely as lower courts and regulated industries absorb its reach.