Security News > 2024 > February > FCC gets tough: Telcos must now tell you when your personal info is stolen

As the FCC planned, the new rule also eliminates the mandatory seven-day waiting period for reporting break-ins to consumers.

"Without an FCC rule requiring breach notifications for the above categories of PII, there would be no requirement in Federal law that telecommunications carriers report non-CPNI breaches to their customers," the FCC said of the new rule.

The new rules add an exception for customer notifications as well.

Along with increased reporting rules for the content of data leaks, the new rule also expands the FCC's definition of "Breach" to include "Inadvertent access, use or disclosure of customer information."

The FCC's updated directive is the latest in a string of federal agency breach reporting requirements, with rules passed by the FTC and SEC set to go into effect later this year, and federal contractors getting their own set of newly-proposed breach reporting rules too.

Per the FCC, the Cellular Telecommunications Industry Association raised an objection on several grounds, including that the FCC rule would create a system of dual jurisdiction between the FCC and FTC once the latter's rule goes into effect.

News URL

https://go.theregister.com/feed/www.theregister.com/2024/02/12/fcc_gets_tough_on_telcos/