The ability of internet service providers to track what consumers do online will become more difficult in the years ahead.
On October 27, 2016, the Federal Communications Commission (“FCC”) delivered a major victory to internet privacy advocates by adopting new privacy and data security rules that will require telecommunications carriers to take measures to protect the privacy of their customers.
The new rules affect all telecommunications carriers providing telecommunications services, including broadband internet service providers (“ISPs”) and interconnected voice over internet protocol (“VoIP”) services.
New Privacy and Data Security Rules Stem from Communications Act
Section 222 of Title II of the Communications Act (the “Act”) imposes certain duties on telecommunication carriers to protect the confidentiality of their customers’ proprietary information, and places certain restrictions on the use and sharing of customer proprietary network information without customer approval.
Pursuant to the Act, the FCC has adopted new privacy and data security rules to bring the activities of broadband internet service providers in line with that of traditional telecommunications carriers that have historically complied with prohibitions against the unauthorized sharing of customer proprietary network information.
The new rules reflect the FCC’s increasing interest in the privacy obligations of telecommunication carriers. Earlier this year, the FCC assessed a $1,350,000 fine against Verizon Wireless for tracking the broadband activities of their customers without obtaining their consent for the purpose of delivering targeted advertisements from Verizon and other third parties.
The New Rules
Transparency. The new rules will require, among other things, that ISPs notify their customers about the types of information they collect, how the information will be used and shared, and the types of entities with whom the ISP will share this information.
Opt-in Approval. ISPs will also be required to obtain the affirmative consent of their customers to use and share their “sensitive information” with third parties. In this regard, the rules outline the following categories of information that will be deemed to be “sensitive information”:
- Precise geo-location financial information;
- Health information
- Financial information
- Social security numbers,
- Web browsing history,
- Application usage history, and
- The content of communication;
Data Security. The new rules will impose new data security requirements on telecommunications carriers. To the extent that a carrier collects and maintains customer proprietary information (“PI”) (which includes both customer proprietary network information as well as personally identifiable information), the new rules will require ISPs and other telecommunications carriers to take reasonable measures to secure customers’ PI. Such reasonable measures should include the implementation of relevant industry best practices, appropriate accountability and oversight of security practices, robust customer authentication procedures, and disposal procedures that are consistent with the Federal Trade Commission’s best practices and the Federal Consumer Privacy Bill of Rights.
Breach Notification. Additionally, in the event of a reportable breach involving customer PI, the rules will require ISPs and other telecommunications carriers to notify affected customers no later than (30) calendar days following a carrier’s reasonable determination that a breach has occurred.
For data breaches involving more than 5,000 customers, the rules will require carriers to notify the FCC, the FBI and the Secret Service, unless the carrier is able to reasonably determine that the data breach poses no reasonable risk of harm to the affected customers. Such notice must be provided to the applicable federal agencies within seven (7) business days of when a carrier reasonably determines that a breach has occurred, and no later than three (3) days before notice is provided to customers.
For data breaches involving less than 5,000 customers, carriers will be required to notify the FCC no later than thirty (30) calendar days following the carrier’s reasonable determination that a breach has occurred.
Implementation Timeline
The privacy notice and opt-in requirements will become effective approximately twelve (12) months after the publication of the FCC’s Order in the Federal Register, though small providers will be given an additional twelve (12) months to comply.
The data security requirements will become effective ninety (90) days after the publication of the FCC’s Order in the Federal Register.
The data breach notification requirements will take effect approximately six (6) months after the publication of the FCC’s Order in the Federal Register.
Additional Information
To learn more about the FCC’s new privacy rules, you can visit the FCC’s Public Notices.
Relevant Resources
Search Blog
Follow Us
Recent Posts
- Federal Court Strikes Down the DOL’s Increased Salary Thresholds for Executive, Administrative, Professional, And Highly Compensated Employee Overtime Exemptions
- Breaking News: FinCEN Postpones Beneficial Ownership Reporting Deadlines for Companies Impacted by Recent Major Storms
- What You Need to Know About the U.S. Department of Transportation’s Build America TIFIA Loan
- Breaking News: Federal Judge Blocks Nationwide Implementation of the FTC’s New Rule Banning Noncompete Agreements
- September 4th is Almost Here: How Employers Can Prepare for the Upcoming Effective Date of the FTC’s Non-Compete Rule
- Florida’s New Statutory Home Warranty: What Home Builders Need to Know
- Orange County Proposes Temporary Suspension Ordinance on New Development Applications
- Raising the Roof: The U.S. Department of Labor Announces Rule Raising Salary Thresholds for Overtime Exemptions
- New Guidelines Anticipated Following HHS’s Health Cybersecurity Concept Paper
- SECURE 2.0 and Protecting Your Designated Beneficiaries
Popular Categories
- Employment and Labor
- Litigation (Labor & Employment)
- Construction
- Department of Labor
- Business of Real Estate
- Landlord-Tenant
- Construction Litigation
- Real Estate Law
- Salary
- Competition
- Cybersecurity
- Intellectual Property
- Appeals
- Construction
- Contracts
- Litigation
- Trusts and Estates
- Public Private Partnership
- Data Security
- Business
- Supreme Court
- Development/Land Use
- Technology
- IP Litigation
- Privacy
- Litigation (Appellate)
- Patents
- Business
- Public Finance
- Regulatory Compliance
- Florida Government Contracts
- Foreclosures
- Trademark
- Contracting
- Health Care
- Financial Institutions
- Compliance
- Estate planning
- International Dispute Resolution
- Florida Public Contracts
- Government Contracting
- Government Contracts
- Property Tax
- Government
- Conveyances
- Lease
- Appellate Blog
- Patent Office
- Insurance
- Wealth planning
- Federal Government Contracting
- Florida Bid Protests
- Public Contracts
- Infringement
- Cyber fraud
- Proposal Writing
- Public Bidding
- GAO
- Bid Protest
- International Arbitration and Litigation
- Americans with Disabilities Act
- Arbitration
- International
- Restrictive Covenants
- Grant Writing
- Copyright
- Promissory Notes
- Title
- Small Business
- Florida Procurement
- Public procurement
- Consumer Privacy
- PTAB
- General Liability
- Technology
- International Arbitration
- Liens and encumbrances
- Liens
- Creditor's Rights
- Bidding
- Attorneys' Fees
- Inter Partes Review
- Consumer Protection
- Power Generation
- Regulation
- Venue
- Contracting
- Government Vendor
- State Government Contracts
- Ad Valorem Assessments
- Florida Administrative Law
- Attorneys' Fees
- Florida Rules of Appellate Procedure
- Bankruptcy
- Florida Public Procurement
- Russia-Related Arbitration
- Mortgages
- FINRA
- Record on Appeal
- Rehearing
- Eviction
- Loan guaranties
- Patents - Assignor Estoppel
- Statute of limitations
- Statute of repose
- Dispute Resolution
- Liens
- Maritime
- Damages
- Briefing
- Request for Proposal
- Patents - Obviousness
- Commercial Brokerage
- Trade Secrets
- Bid Writing
- Florida Bidding Strategies
- Renewal
- Attorneys' Fees
- Florida County Lands
- Florida Economic Incentive Packages
- Jury Instructions
- Stay
- Design Professionals
- Certiorari
- Forum Selection
- email hacking
- Offers of Judgment
- Prevailing Party
- Settlements
- Assignment of Contract
- Assignment of Proceeds
- Designer Liability
- Lis Pendens
- Appellate Jurisdiction - Deadlines
- Banking
- Federal Rules of Appellate Procedure
- Finality
- Fintech
- Marketing/Advertising
- Preservation
- Unlicensed Contracting
- Evidence
- Evidence
- Expert
- Expert Science
- Federal Supply Schedule
- Florida Public Records Law
- Mootness
- Socio-Economic Programs
- Sunshine Law
- Veteran Owned Business
- Homestead
- Partnerships and LLCs
- Standing
Editors
- Of Counsel
- Partner
- Partner
- Partner
- Partner
- Partner
- Partner
- Associate
- Partner
- Partner
- Associate
- Partner
- Partner
- Partner
- Partner
- Senior Associate
- Partner
- Associate
- Partner
- Senior Associate
- Partner
- Associate
- Partner
- Partner
- Partner
- Partner
- Partner
- Partner
- Partner
- Partner
- Partner
- Partner
- Partner
- Partner
- Partner
- Partner
- Partner
- Partner
- Of Counsel
- Senior Associate
- Partner
- Associate
- Partner
- Partner
- Associate
- Partner
- Partner
- Partner
Archives
- November 2024
- October 2024
- September 2024
- August 2024
- June 2024
- May 2024
- February 2024
- November 2023
- August 2023
- July 2023
- June 2023
- May 2023
- April 2023
- February 2023
- January 2023
- December 2022
- November 2022
- October 2022
- September 2022
- August 2022
- July 2022
- June 2022
- May 2022
- April 2022
- March 2022
- February 2022
- January 2022
- December 2021
- October 2021
- September 2021
- August 2021
- July 2021
- June 2021
- May 2021
- April 2021
- March 2021
- February 2021
- January 2021
- December 2020
- October 2020
- September 2020
- August 2020
- July 2020
- June 2020
- May 2020
- April 2020
- March 2020
- February 2020
- January 2020
- October 2019
- August 2019
- July 2019
- May 2019
- April 2019
- March 2019
- February 2019
- January 2019
- December 2018
- November 2018
- October 2018
- September 2018
- August 2018
- July 2018
- June 2018
- May 2018
- April 2018
- March 2018
- February 2018
- January 2018
- December 2017
- November 2017
- October 2017
- September 2017
- August 2017
- July 2017
- June 2017
- May 2017
- April 2017
- March 2017
- February 2017
- January 2017
- December 2016
- November 2016
- October 2016
- September 2016
- August 2016
- July 2016
- June 2016
- May 2016
- April 2016
- March 2016