FCC Seeks Comments on Updates to CPNI Breach Reporting Rule

The Federal Communications Commission (“FCC” or ​“Commission”) is seeking comments on a Notice of Proposed Rulemaking (NPRM) to refresh its customer proprietary network information (“CPNI”) data breach reporting requirements (the ​“Rule”). Adopted earlier this month by a unanimous 4-0 vote of the Commission, the NPRM solicits comments on rule revisions that would expand the scope of notification obligations and accelerate the timeframe to notify customers after a data breach involving telephone call detail records and other CPNI. The FCC cites ​“an increasing number of security breaches of customer information” in the telecommunications industry in recent years and the need to ​“keep pace with today’s challenges” and best practices that have emerged under other federal and state notification standards as reasons to update the Rule.