The US Federal Communications Commission (FCC) is introducing new rules that will require telecom providers to report data that affect customer personal information within 30 days. The rules will take effect on March 13, 2024.
Similar proposals have been made in the past to modernize notification rules for such incidents. Telecom operators must notify customers of security breaches as quickly as possible.
The updated rules aim to ensure that “telecommunications, Voice over Internet Protocol (VoIP) and TRS providers are held accountable for their obligations to protect sensitive customer information and provide customers with the tools they need to protect themselves in the event their data is breached.”
See also: Bank of America: Warns of customer data breach
It’s also worth noting that the FCC’s new rules refer to data breaches that involve not only customer proprietary network information (CPNI) but also personally information identifiable Also, reporting must be done even when we’re talking about “unintentional access, use, or disclosure of customer information.”
Depending on the case, telecom providers will be able to report data breaches to their customers earlier , but not later than 30 days after the breach was discovered. Only if an agreement is made with law enforcement authorities will there be an additional delay.
“Our cell phones are in our palms, pockets and purses. We rarely go anywhere without them. There’s a good reason for that — the convenience and security of being able to communicate anytime, almost anywhere is powerful,” FCC Chairman Jessica Rosenworcel said in January. “But this constant connectivity means our carriers have access to a treasure trove of data about who we are, where we’ve traveled and who we’ve talked to. It’s vital that this personal data doesn’t fall into the wrong hands.”
See also: Verizon: Internal data breach exposed employee details
All major US telecommunications companies (T-Mobile, Verizon, AT&T, Comcast Xfinity) have been affected by one data breach in recent years.
For this reason, the need to take relevant measures is imperative. Beyond immediate notifications of data breaches, telecommunications providers must take measures to protect their customers' data.
Companies can enhance the security of their data by implementing advanced encryption technologies. Encryption converts data into an unreadable form that can only be decrypted using a key.
Additionally, companies can adopt technology VPN to protect communication between different departments of the company and ensure data security.
See also: HPE: Investigating allegations of new data breach
Implementing data access policies is also essential. This means that only authorized individuals will have access to sensitive data, and there should also be a system in place to monitor data access and usage. This way, telecom providers reduce the chances of a breach.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Finally, training staff on data security is vital. Staff must be aware of the latest threats and how to deal with attack attempts.
Source: www.bleepingcomputer.com
