The FTC and FCC have given mobile device makers and carriers 45 days to report on their respective security update practices.
Source: Threadpost