Security News > 2022 > January > Federal Communications Commission proposed stricter rules on how telco carriers should report data breaches

The US Federal Communications Commission is considering imposing stricter rules requiring telecommunications carriers to report data breaches to customers and law enforcement more quickly.

Chairwoman Jessica Rosenworcel drafted a document outlining the new proposal to strengthen the FCC's powers for disclosing data breaches and leaks to customers and federal agencies of "Customer proprietary network information." The updated rules, published this week, would keep the FCC in line with other federal and state data breach laws, she said.

These rules don't just apply in instances of malicious data breaches.

"Current law already requires telecommunications carriers to protect the privacy and security of sensitive customer information. But these rules need updating to fully reflect the evolving nature of data breaches and the real-time threat they pose to affected consumers," Chairwoman Rosenworcel said in a statement [PDF].

"Customers deserve to be protected against the increase in frequency, sophistication, and scale of these data leaks, and the consequences that can last years after an exposure of personal information. I look forward to having my colleagues join me in taking a fresh look at our data breach reporting rules to better protect consumers, increase security, and reduce the impact of future breaches."

Last year, T-mobile US confirmed to The Register that "Unauthorized access to some data occurred." Some 100 million customers were believed to have been potentially affected by miscreants selling information like people's names, addresses, social security numbers, and IMEI numbers on the dark web for six Bitcoin, worth around $280,000.

News URL

https://go.theregister.com/feed/www.theregister.com/2022/01/13/fcc_data_rules/