FCC Customer Proprietary Network Information (CPNI) and Data Breach Rules (47 CFR 64.2001-2011) CPNI-64.2005_2007: Use of CPNI without customer approval + approval required for use (47 CFR 64.2005-64.2007)

Section 64.2005 (Use of CPNI without customer approval): a telecommunications carrier may USE + DISCLOSE + PERMIT ACCESS TO CPNI for the purpose of providing or marketing service offerings AMONG THE CATEGORIES OF SERVICE (telecommunications + information + commercial mobile + interconnected VoIP) TO WHICH THE CUSTOMER ALREADY SUBSCRIBES from that carrier WITHOUT obtaining additional customer approval. Carriers may also: (a) provide call location information concerning a user of CPS to a public safety answering point + emergency medical service provider + law enforcement + fire fighting + responding to user's call for emergency services + a user's legal guardian; (b) use CPNI to initiate + render + bill + collect for telecommunications services; (c) protect rights / property of the carrier + customers / users from fraudulent + abusive + unlawful use of services. Section 64.2007 (Approval required for use of CPNI): carriers must obtain customer approval before using CPNI for: (a) marketing service offerings other than those to which the customer subscribes; (b) disclosing to non-affiliated entities for any purpose; (c) joint venture or independent contractor use. APPROVAL CATEGORIES are: opt-in for non-affiliated third parties + opt-out for marketing of adjacent services among the same category of service offered by the carrier or its communications-related-services affiliates.