Telecommunications Carriers' Use of Customer Proprietary Network Information (CPNI) and Other Customer Information, CC Docket No. 96-115

This information collection implements the statutory obligations of section 222 of the Communications Act of 1934, as amended, 47 U.S.C. 222. These regulations impose safeguards to protect customers' CPNI against unauthorized access and disclosure. In November 2023, the FCC released the SIM Swap and Port-Out Fraud Order (88 FR 85794 (December 8, 2023)), which modifies the existing CPNI collection requirements to establish a framework to combat SIM swap fraud. In December 2023, the Commission released the Data Breach Report and Order (89 FR 9968 (February 12, 2024)), which modifies the scope of customer data and reportable breaches covered by the Commission’s rules, and also modifies the Commission’s data breach notification rules to require covered service providers to electronically notify the FCC of a reportable data breach, and adopts equivalent requirements for telecommunications relay services (TRS) providers.

The latest form for Telecommunications Carriers' Use of Customer Proprietary Network Information (CPNI) and Other Customer Information, CC Docket No. 96-115 expires 2028-01-31 and can be found here.

Business or other for-profit

Federal Enterprise Architecture: General Government - Central Fiscal Operations