Carriers hold location and call detail records under a sector-specific regime predating modern privacy law, and location data sales have drawn substantial penalties. This hub covers that enforcement.
Consent Management
November 2, 2026
Maine's chapter 94 of Title 35-A is one section long. Since July 1, 2020 it has barred broadband providers from using, selling or sharing customer personal information without express, affirmative consent, and from pricing that choice. Four industry groups sued in 2020; the federal court's published orders rejected their preemption claims and declined to strike the law on the pleadings.
Read more →
Data Security Rules
October 5, 2026
Customer proprietary network information is the record of whom a phone customer calls, when, for how long and on what plan. Section 222 of the Communications Act limits how carriers use it, and the FCC's rules in subpart U of part 64 add a two-tier customer approval system, password and ID checks before disclosure, and an officer-signed compliance certificate filed every March 1.
Read more →
Breach Notification
October 5, 2026
In December 2023 the FCC rewrote its carrier breach rule to reach personally identifiable information and inadvertent exposures, add itself as a recipient, and swap a mandatory waiting period for a 30-day limit. Those amendments still await an effective date, and on July 31, 2026 the Sixth Circuit vacated the panel decision upholding the order.
Read more →
Data Brokers
October 5, 2026
In April 2024 the FCC fined the four national wireless carriers a combined $196,486,875 for selling access to customer location data through aggregators without adequate safeguards. All four paid and sued. Two circuits upheld the fines, one vacated AT&T's, and in June 2026 the Supreme Court held the FCC's forfeiture process does not violate the Seventh Amendment.
Read more →