I don't necessarily have any direct info for you.
Here are a few things that I know of.
The satellite operators are exempt.
Recently, I believe it was Charter that got the go ahead to drop cards in their own boxes and use downloadable security on a trial basis (with a way overly broad ability to drop it fully if one manufacturer took a box to retail).
But several providers have gotten the OK to have boxes decrypt without cablecards.