Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I ensure that my company is compliant with expanding privacy protections in Arizona? What are the requirements?

To ensure compliance with expanding privacy protections in Arizona, there are several requirements that your company must follow.

Requirements for Telecommunications Companies

Telecommunications companies in Arizona must obtain authorization from subscribers before submitting any changes on their behalf [1.1]. They must also maintain records of verification of individual subscriber authorization for 24 months [1.1]. Additionally, telecommunications companies must provide notification to obtain opt-in approval through oral, written, or electronic methods for the use, disclosure, and access to customer proprietary network information (CPNI) [3.1]. The notification must include specific language and information, such as the definition of CPNI, the customer’s right to limit the use of CPNI, and the fact that deciding not to approve the release of CPNI will not affect the provision of any services to which the customer subscribes [3.1].

Filing Requirements

Documents related to compliance with expanding privacy protections in Arizona must satisfy the filing requirements outlined in AZRS 10-120. The document must contain the information required by chapters 1 through 17 of this title, be typewritten or printed and legible, and be executed by the appropriate person [4.1]. Additionally, the document must be delivered to the office of the commission for filing and be accompanied by the correct fee and any other payment or penalty required by law [4.1].

Compliance and Enforcement

Telecommunications companies must provide a copy of their records of subscriber verification and unauthorized changes maintained under the requirements of this article to commission staff upon request [1.2]. If the commission finds that a telecommunications company is in violation of this article, the commission shall order the company to take corrective action as necessary, and the commission may impose such penalties as are authorized by law [1.2]. The commission may sanction a telecommunications company in violation of this article by prohibiting further solicitation of new customers for a specified period, or by revocation of its Certificate of Convenience and Necessity [1.2]. The commission may take any other enforcement actions authorized by law [1.2].

Notice of Subscriber Rights

Telecommunications companies must provide to each of their subscribers notice of the subscriber’s rights regarding unauthorized changes and unauthorized charges [1.3]. The subscriber notice must include the name, address, and telephone numbers where a subscriber can contact the telecommunications company, the fact that a telecommunications company is prohibited from changing telecommunications service to another company without the subscriber’s permission, and the fact that a telecommunications company that has switched telecommunications service without the subscriber’s permission is required to pay all charges associated with returning the customer to the original telecommunications company as promptly as reasonable business practices will permit, but no later than 30 business days from the subscriber’s request [1.3]. The notice of subscriber rights must be written in both English and Spanish [1.3].

Overall, to ensure compliance with expanding privacy protections in Arizona, telecommunications companies must obtain subscriber authorization before submitting any changes on their behalf, maintain records of verification, and provide notification to obtain opt-in approval for the use, disclosure, and access to CPNI. Additionally, all documents related to compliance must satisfy the filing requirements outlined in AZRS 10-120. Telecommunications companies must also provide notice of subscriber rights and comply with enforcement actions authorized by law.

Source(s):
Jurisdiction

Arizona