Call us now:
The Federal Communications Commission (FCC) published rules on the Federal Register 02.12.24, effective 03.13.24, to modernize data breach notifications. In response to the growing frequency and severity of data breaches.
In a 37 page Final rule the FCC expands the scope of its exiting breach notification from Customer Proprietary Network Information(CPNI) to cover all Personal Identifiable Information (PII), that is a considerable change in effected data. The Commission expands its definition of ‘‘breach’’ for telecommunications carriers to include inadvertent access, use, or disclosure of customer information. The FCC requires carriers to notify the commission in addition to the secrete service and FBI, as soon as practicable, but no later than seven business days after reasonable determination of a breach and notify customer no more than 30 days following a reasonable determination of a breach.
(https://lnkd.in/eWvZqvzA)
When one read the rule, one senses an alignment of Federal regulators around cybersecurity and incident management and reporting.
Ted Dziekanowski Brian D. McCarthy
Veritas GRC
#cybersecurity #cyberriskmanagement #cyberregulation #incidentreporting #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7163432458846220288