wordpress blog stats
Connect with us

Hi, what are you looking for?

US FCC proposes new data breach rules for telecom companies, including a no waiting period

Current rules require telcos to let customers know if sensitive data like call timings have been exposed, but not before 7 days.

The US Federal Communications Commission (FCC) on January 12 proposed new rules on how telecom companies must notify customers and the government about a data breach.

In proposing the new rules, FCC Chairwoman Jessica Rosenworcel said:

“Customers deserve to be protected against the increase in frequency, sophistication, and scale of these data leaks, and the consequences that can last years after an exposure of personal information. I look forward to having my colleagues join me in taking a fresh look at our data breach reporting rules to better protect consumers, increase security, and reduce the impact of future breaches.”

The proposed rules come in the aftermath of some high profile data breaches involving US telecom companies, specifically T-Mobile, which has suffered six data breaches in the last five years with the most recent breach taking place last month, and Syniverse, a company that routes billions of text messages of major US carriers.

What are the proposed rules?

The proposal outlines several updates to current FCC rules:

  1. No seven days waiting period to inform customers: FCC has proposed eliminating the current seven business day mandatory waiting period for notifying customers of a breach. Currently, telecom companies have seven days to inform the FBI and Secret Service of data breaches that leak customer proprietary network information (CPNI), after which they can notify customers.
  2. Inadvertent breaches must also be covered: The FCC has suggested expanding customer protections by requiring notification even in case of inadvertent breaches.
  3. FCC must be notified along with other law enforcement agencies: Carriers must also notify FCC of all reportable breaches in addition to the FBI and US Secret Service, the Commission proposed.
  4. Should specific categories of information be disclosed? FCC said that it is also seeking comments on whether customer breach notices should include specific categories of information to help provide actionable information useful to the consumer.

What is CPNI? The above-proposed rules concern data breaches that leak customer proprietary network information (CPNI), which FCC describes as “some of the most sensitive personal information that carriers and providers have about their customers as a result of their business relationship (e.g., phone numbers called; the frequency, duration, and timing of such calls; and any services purchased by the consumer, such as call waiting).”

Why the new rules? Although there already exists rules to “protect the privacy and security of sensitive customer information,” these “need updating to fully reflect the evolving nature of data breaches and the real-time threat they pose to affected consumers,” FCC Chairwoman Jessica Rosenworcel said. The updates will also better align FCC’s rules with recent developments in federal and state data breach laws covering other sectors, the Commission said.

Advertisement. Scroll to continue reading.

Written By

MediaNama’s mission is to help build a digital ecosystem which is open, fair, global and competitive.



Looking at the definition of health data, it is difficult to verify whether health IDs are covered by the Bill.


The accession to the Convention brings many advantages, but it could complicate the Brazilian stance at the BRICS and UN levels.


In light of the state's emerging digital healthcare apparatus, how does Clause 12 alter the consent and purpose limitation model?


The collective implication of leaving out ‘proportionality’ from Clause 12 is to provide very wide discretionary powers to the state.


The latest draft is also problematic for companies or service providers that have nothing to with children's data.

You May Also Like


Google has released a Google Travel Trends Report which states that branded budget hotel search queries grew 179% year over year (YOY) in India, in...


135 job openings in over 60 companies are listed at our free Digital and Mobile Job Board: If you’re looking for a job, or...


Rajesh Kumar* doesn’t have many enemies in life. But, Uber, for which he drives a cab everyday, is starting to look like one, he...


By Aroon Deep and Aditya Chunduru You’re reading it here first: Twitter has complied with government requests to censor 52 tweets that mostly criticised...

MediaNama is the premier source of information and analysis on Technology Policy in India. More about MediaNama, and contact information, here.

© 2008-2021 Mixed Bag Media Pvt. Ltd. Developed By PixelVJ

Subscribe to our daily newsletter
Your email address:*
Please enter all required fields Click to hide
Correct invalid entries Click to hide

© 2008-2021 Mixed Bag Media Pvt. Ltd. Developed By PixelVJ