Data Breach Reporting Requirements

Document Headings Document headings vary by document type but may contain the following: the agency or agencies that issued and signed a document the number of the CFR title and the number of each part the document amends, proposes to amend, or is directly related to the agency docket number / agency internal file number the RIN which identifies each regulatory action listed in the Unified Agenda of Federal Regulatory and Deregulatory Actions See the Document Drafting Handbook for more details. Federal Communications Commission 47 CFR Part 64 [WC Docket No. 22-21; FCC 23-111, FR ID 198806] ( printed page 9968) AGENCY: Federal Communications Commission. ACTION: Final rule. SUMMARY: In this document, the Federal Communications Commission (Commission) modifies the Commission's data breach notification rules to better ensure that providers of telecommunications, interconnected Voice over Internet Protocol (VoIP), and telecommunications relay services (TRS) are held accountable in their obligations to safeguard sensitive customer information, and to provide customers with the tools needed to protect themselves in the event that their data is compromised. DATES: This rule is effective March 13, 2024, except for the amendments codified at 47 CFR 64.2011 and 64.5111 , instructions 3 and 4, respectively, which are delayed indefinitely. The Commission will publish a document in the Federal Register announcing the effective dates for the amendments to 47 CFR 64.2011 and 64.5111 . FOR FURTHER INFORMATION CONTACT: Mason Shefa, Competition Policy Division, Wireline Competition Bureau, at (202) 418-2494, mason.shefa@fcc.gov . SUPPLEMENTARY INFORMATION: This is a summary of the Commission's Report and Order in WC Docket No. 22-21; FCC 23-111, adopted on December 13, 2023 and released on December 21, 2023. The document is available for download at https://docs.fcc.gov/​public/​attachments/​FCC-23-111A1.pdf . To request materials in accessible formats for people wit…