Customer proprietary network information (CPNI) is the
data
Data ( , ) are a collection of discrete or continuous values that convey information, describing the quantity, quality, fact, statistics, other basic units of meaning, or simply sequences of symbols that may be further interpreted for ...
collected by
telecommunications companies about a consumer's telephone service. It includes the time, date, duration and destination number of each call, the type of network a consumer subscribes to, and certain other information that appears on the consumer's
telephone bill.
CPNI may also include account/subscriber information such as the number of lines.
CPNI is protected and regulated by the
Federal Communications Commission
The Federal Communications Commission (FCC) is an independent agency of the United States government that regulates communications by radio, television, wire, internet, wi-fi, satellite, and cable across the United States. The FCC maintains j ...
. Privacy rules primarily apply to individually identifiable CPNI, meaning CPNI data that is linked or linkable to a particular person through other data such as a wireless account number, wireless phone number or email address. However, data such as name, address and phone number are not themselves CPNI. CPNI does not include financial information or sensitive personal information such as Social Security Numbers or credit card information.
Telemarketers or customer service agents working on behalf of telephone companies must go through an additional customer authentication layer (typically a PIN, or last four digits of the stored payment method) and ask for the customer's consent prior to accessing the billing information or before using or sharing that information.
Description
The U.S.
Telecommunications Act of 1996 granted the
Federal Communications Commission
The Federal Communications Commission (FCC) is an independent agency of the United States government that regulates communications by radio, television, wire, internet, wi-fi, satellite, and cable across the United States. The FCC maintains j ...
(FCC) authority to regulate how CPNI can be used, and to enforce related consumer information privacy provisions. The rules in the 2007 FCC CPNI Order further restrict CPNI use and created new notification and reporting requirements.
The rules in the 2007 CPNI Order include:
* Limits the information which carriers may provide to third-party marketing firms without first securing the affirmative consent of their customers
* Defines when and how customer service representatives may share call details
* Creates new notification and reporting obligations for carriers (including
identity verification procedures)
* Verification process must match what is shown with the company placing the call.
Note that as long as an affiliate is "communications" related, the FCC has ruled that CPNI is under an opt-out approach (can be shared without your explicit permission). A phone company is not permitted to sell or otherwise disclose CPNI information, such as numbers you call, when you called them, where you were when you called them, or any other personally identifying information, except subject to either such exceptions are provided in the statute or regulations, or with approval of the customer. Law enforcement access to CPNI ordinarily requires proper judicial approval, but some data about telecommunications customers can be shared or sold to "communications" related companies.
One can verify this by checking rule 64.2007(b)(1) and footnote 137 in the 2007 CPNI order.
The 2007 CPNI Order does not revise all CPNI rules. For example, the rule revisions adopted in the Order do not limit a carrier's ability to use CPNI to perform billing and collections functions, restrict CPNI use to effect maintenance and repair activity, or impact responses to lawful subpoenas.
Fines for failure to comply with CPNI rules can be substantial. In 2024, the FCC settled with
TracFone Wireless and
AT&T
AT&T Inc., an abbreviation for its predecessor's former name, the American Telephone and Telegraph Company, is an American multinational telecommunications holding company headquartered at Whitacre Tower in Downtown Dallas, Texas. It is the w ...
for $16 million and $13 million, respectively, for violations of the CPNI rules.
See also
*
Call detail record
A call detail record (CDR) is a data record produced by a telephone exchange or other telecommunications equipment that documents the details of a telephone call or other telecommunications transactions (e.g., text message) that passes through th ...
*
Electronic Communications Privacy Act (ECPA)
*
Internet Protocol Detail Record
*
Mobile identity management
*
Pen register
*
Telecommunications data retention
References
External links
CPNI Information*
ttp://hraunfoss.fcc.gov/edocs_public/attachmatch/FCC-07-22A1.pdf FCC CPNI Order - April 2, 2007{{Webarchive, url=https://web.archive.org/web/20081204151900/http://hraunfoss.fcc.gov/edocs_public/attachmatch/FCC-07-22A1.pdf , date=December 4, 2008
www.fcc.gov - Protecting Your Telephone Calling Records
Telemarketing
Telephony
Telecommunications economics
Privacy of telecommunications