FCC Requires Telecom & VoIP Providers to Report PII Breaches

The FCC has updated its data breach rules for telecom and VoIP providers, mandating customer notifications and reporting to the FCC, FBI, and Secret Service within seven days when PII is exposed, and expanding the definition of a breach to include inadvertent access or disclosure. Citing the rising frequency of telecommunications breaches and recent incidents at major carriers, the policy aims to strengthen consumer protections beyond the prior CPNI-focused requirements.