FCC Proposes Updated Data Breach Reporting To Address Security Breaches In Telecommunications Industry

The Federal Communications Commission launched a proceeding to strengthen rules for notifying customers and federal law enforcement of breaches of customer proprietary network information (CPNI). The FCC will look to better align its rules with recent developments in federal and state data breach laws covering other sectors. The Notice of Proposed Rulemaking launches a formal proceeding to gather information on this important issue and also take comment on rule changes proposed by the FCC. The FCC seeks to better address telecommunications carriers’ breach notification requirements. The FCC proposes eliminating the current seven business day mandatory waiting period for notifying customers of a breach. The FCC also proposes clarifying its rules to require consumer notification by carriers of inadvertent breaches and requiring notification of all reportable breaches to the FCC, FBI, and US Secret Service.