The Federal Communications Commission (FCC) is seeking to update
and strengthen its rules governing breaches of consumer data and
personal information. Public comments on the new rules are due
February 22, 2023, and reply comments are due March 24, 2023.
Under current FCC rules, telecommunications carriers and Voice
over Internet Protocol (VoIP) service providers must notify
customers and federal law enforcement of data breaches involving
certain customer proprietary network information (CPNI), data that
includes the numbers customers call, the frequency or duration of
calls, and mobile devices' locations. The FCC proposes
expanding the definition of "breach" to include
"inadvertent" breaches, and requiring telecommunications
carriers to immediately notify customers, the FCC, and federal law
enforcement of breaches.
