FCC Seeks Comments On Updates To CPNI Breach Reporting Rule

The Federal Communications Commission ("FCC" or "Commission") is seeking comments on a Notice of Proposed Rulemaking (NPRM) to refresh its customer proprietary network information ("CPNI") data breach reporting requirements (the "Rule"). Adopted earlier this month by a unanimous 4-0 vote of the Commission, the NPRM solicits comments on rule revisions that would expand the scope of notification obligations and accelerate the timeframe to notify customers after a data breach involving telephone call detail records and other CPNI. The FCC cites "an increasing number of security breaches of customer information" in the telecommunications industry in recent years and the need to "keep pace with today's challenges" and best practices that have emerged under other federal and state notification standards as reasons to update the Rule.