FCC Customer Proprietary Network Information (CPNI) and Data Breach Rules (47 CFR 64.2001-2011) CPNI-64.2008: Notice requirements for use of CPNI (47 CFR 64.2008)

Section 64.2008 establishes notice requirements: (a) CONTENT - the notice must include: (i) sufficient information to enable customers to make an informed decision about whether to permit a carrier to use + disclose + permit access to CPNI; (ii) state that the customer has a right + the carrier has a duty under federal law to protect the confidentiality of CPNI; (iii) specify the types of information that constitute CPNI + the specific entities that will receive the CPNI + describe the purposes for which CPNI will be used; (iv) inform the customer of his or her right to disapprove uses + disclosures; (v) inform the customer that disapproval will not affect the provision of any services to which the customer subscribes; (vi) be comprehensible + not be misleading; (vii) be clearly legible + use sufficiently large type + placed in an area readily apparent to a customer + give individual notice if the carrier seeks to use CPNI to market beyond the category to which the customer subscribes. (b) BILINGUAL NOTICE may be required in certain markets. (c) Specific notice content for opt-in vs opt-out is enumerated in Section 64.2008(c) + 64.2008(d). (d) AFFIRMATIVE CONSENT - written + electronic + oral methods are permitted + records of consent must be retained.