FCC Proposes New Rule to Expand Definition of Data Breaches for Communications Carriers

Time Stamp: March 10, 2023 1:32 AM
Source Node: 2511651

In a move to better protect consumers from data breaches, the Federal Communications Commission (FCC) has proposed a new rule that would expand the definition of data breaches for communications carriers. The rule, which was proposed on May 22, 2020, would require communications carriers to notify customers when their personal information is compromised or exposed.

Under the proposed rule, communications carriers would be required to notify customers if their personal information is exposed in a data breach. This includes any unauthorized access to, or acquisition of, customer proprietary network information (CPNI), such as Social Security numbers, credit card numbers, and other sensitive data. The rule would also require carriers to notify customers if their personal information is used in a manner not authorized by the customer.

The proposed rule is part of the FCC’s efforts to protect consumers from data breaches. In recent years, there have been a number of high-profile data breaches involving communications carriers, including AT&T, Verizon, and T-Mobile. The proposed rule would help ensure that customers are notified when their personal information is compromised or exposed in a data breach.

The proposed rule would also require communications carriers to provide customers with information about the data breach, including the type of data that was compromised and how it was accessed. Carriers would also be required to provide customers with information about steps they can take to protect themselves from further harm.

The proposed rule is open for public comment until July 6, 2020. The FCC will consider all comments before deciding whether to adopt the rule. If adopted, the rule would go into effect within 180 days of its adoption.

The proposed rule is an important step in protecting consumers from data breaches. By requiring communications carriers to notify customers when their personal information is compromised or exposed, the rule would help ensure that customers are aware of potential risks and can take steps to protect themselves.