cpni certification lagrant 2011

8/3/2019 CPNI Certification LaGrant 2011

1/10

LaGrant Connections121 N. Washington Street PO Box 762Cuba City, Wl 53807

M a r l e n e H. Dortch, SecretaryF e d er a l C o m m u n i c a t io n s C o m m i s s io nOffice of the Secretary445 12th S treet, SW , Suit e T W- A 3 25Washington , D C 20554A n n u a l 47 C.F.R. 64.2009(e) CPN I Certif ication

EB Docke t 06-36A n n u a l 64.2009(e) CP NI Cer t i fica t ion for 2011Date of execut ion: February 17, 2012N a m e of Company covered by th i s cer t i f ica t ion : LaGrant C onnect ions, LLCForm 499 Filer ID: 827660N a m e of Off icer s ign ing: D eb EgliTitle of Off icer s ign ing: Vice-President

I, Deb Egl i , VP, cer t ify that 1 am an of f icer of the Co mp any n ame d above, and ac t ing asan agent of the Company, that I have personal knowledge that th e Company has establishedoperat ing procedures that are adequate to ensu re c ompl i anc e with th e C o m m i s s i o n ' s C P N I r u le s .See 47 C.F .R . 6 4 .2001 etseq.

Attached to this ce r t i f ica t ion as Exh ib i t 1 is an ac c ompany ing s t a t emen t exp l a in ing howthe Com pany ' s p roc edures en su re tha t the Com pany i s i n c om pl i anc e with the requi rements se tforth in section 64.2001 etseq. of the Com m ission 's rules.

T he C o m p a n y has not taken a ny ac t ions (proceedings ins t i tu ted or pet i t ions filed by ac o m p a n y a t e i the r s ta te c o mm iss ion , th e cour t sys tem, or at the Com miss ion aga in s t data brokers)aga in s t data brokers in the past year.T he C o m p a n y has not received any c us tomer c omp l a in ts in the pas t year concern ing th eunauthor ized re lease of C P N I .

Signed .A OP.cc: Best Copy and Pr in t ing, Inc.


2/10


3/10

E x h i b i t 1L a G r a n t Connections, LLC

S T A T E M E N T E X P L A I N I I N C H O W T H E C O M P A N Y ' S O P E R A T I N G P R O C E D U R E S E N S U R EC O M P L I A N C E W I TH T H E FCC'S C P N I R U L E S

I . C u s t o m e r P r o p r i et a r y N e t w o r k I n f o r m a t i o n ( " C P N I " )C PNI i s de f ined i n Sec t ion 222(0 of the C o m m u n i c a t i o n s A c t a s ( A ) i n f o r m a t i o n that r e l a tes t o the q u a n t i t y ,t e c h n i c a l c o n f i g u r a t i o n , t y p e , d e s t i n a t i o n , a n d a m o u n t o f u s e o f a t e l e c o m m u n i c a t i o n s s e r v i c e s u b s c r i b e d t o b y a n yc u s t o m e r o f a t e l e c o m m u n i c a t i o n s c a r r i e r , and tha t i s m a d e a v a i l a b l e t o the ca r r i e r by th e c u s t o m e r s o l e l y b y v i r t u eo f t h e c a r r i e r - c u s t o m e r r e l a t i o n s h i p ; a n d ( I I ) i n f o r m a t i o n c o n t a i n e d i n t h e h i l l s p e r t a i n i n g t o t e l e p h o n e e x c h a n g ese rv ice o r t e lephone tol l serv ice r e c e i v e d b y a c u s t o m e r o f a ca r r i e r ( excep t tha t C PNI does n o t i n c l u d e s u b s c r i b e rl i s t i n f o r m a t i o n ) .G e n e r a l l y , C PN I inc lud es pe r sona l i n f o r m a t i o n r e g a r d i n g a c o n s u m e r ' s u s e o f h i s o r h e r t e l e c o m m u n i c a t i o n ss e r v i c e s . C P N I e n c o m p a s s e s i n f o r m a t i o n such a s : ( a ) t h e t e l e p h o n e n u m b e r s ca l l e d b y a c o n s u m e r ; ( b ) t h et e l e p h o n e n u m b e r s c a l l i n g a c u s t o m e r ; ( c ) the t i m e , loca t ion and d u r a t i o n o f a c o n s u m e r ' s o u t b o u n d a n d i n b o u n dp h o n e c a l l s , a n d ( d ) t h e t e l e c o m m u n i c a t i o n s a n d i n f o r m a t i o n se rv ices p u r c h a s e d b y a c o n s u m e r .

C a l l de t a i l i n f o r m a t i o n ( a l s o k n o w n a s " c a l l records" ) is a c a t e g o r y o f C ' I ' N I t h a t is p a r t i c u l a r l y sens i t i ve f r om ap r i v a c y s t a n d p o i n t a n d that i s sough t by p r e lex te r s . h a c k e r s a n d o t h e r u n a u t h o r i / e d e n t i t i e s f o r i l l e g i t i m a t ep u r p o s e s . C a l l d e t a i l i n c l u d e s a n y i n f o r m a t i o n t h a t p e r t a i n s to t h e t r a n s m i s s i o n o f a s p ec i f i c t e l e p h o n e c a l l ,i n c l u d i n g th e n u m b e r c a l l e d ( f o r o u t b o u n d ca l l s ) , t h e n u m b e r f r o m w h i c h t h e c a ll w a s p l a c e d ( f o r i n b o u n d ca l l s ) ,a n d t h e d a t e , t i m e , l oc a t ion and /o r d u r a t i o n o f t h e c a l l ( f o r a ll c a l l s ) .

I I . U s e a n d D i s c l os ur e of C P N I I s R e s t r i c t e dT h e C o m p a n y r e c o g n i z e s t h a i C P N I i n c l u d e s i n f o r m a t i o n t h a t i s pe r sona l and i n d i v i d u a l l y i d e n t i f i a b l e , a n d t h a tp r i v a c y c o n c e r n s h a v e l e d C o n g r e s s and the FC C to impose r e s t r i c t i ons upon i ts use and d i sc losu r e , and upo n thep r o v i s i o n o f access to i l by i n d i v i d u a l s o r e n t i t i e s i n s i d e and o u t s i de t h e C o m p a n y .T h e C o m p a n y h a s d e s i g n a t e d a C P N I C o m p l i a n c e O f f i c e r w h o i s r e s p o n s i b l e f o r : ( I ) c o m m u n i c a t i n g w i t h t h eC o m p a n y ' s a t t o r n e y s a n d / o r c o n s u l t a n t s r e g a r d i n g C P N I r e s p o n s i b i l i t i e s , r e q u i r e m e n t s and r e s t r i c t i ons ; ( 2 )s u p e r v i s i n g th e t r a i n i n g o f C o m p a n y e m p l o y e e s a n d a g e n t s w h o u s e o r h a v e access to C P N I ; (3 ) s u p e r v i s i n g th euse . d i sc losu r e , d i s t r i b u t i o n o r acces s t o t h e C o m p a n y ' s C P N I by indep end en t con t r ac to rs and j o i n t v e n t u r epartners; ( 4 ) m a i n t a i n i n g r e c o r d s r e g a r d i n g t h e u s e o f C P N I i n m a r k e t i n g c a m p a i g n s ; a n d ( 5 ) r e c e i v i n g , r e v i e w i n ga n d r e s o l v i n g q u e s t i o n s o r i s sues r ega r d ing use . d i s c l o s u r e , d i s t r i b u t i o n o r p r o v i s i o n of access to C P N I .C o m p a n y e m p l o y e e s a n d a g e n t s t h a t m a y d e a l w i t h C P N I h a v e b e en i n f o r m e d t h a t t h e r e a r e s u b s t a n t i a l f ede r a lr e s t r i c t i o n s u p o n C P N I u s e . d i s t r i b u t i o n a n d access . In or de r to be a u t h o r i / c d to u se o r access th e C o m p a n y ' sC P N I . e m p l o y e e s a n d agen t s m u s t r e c e i v e t r a i n i n g w i t h r espec t to th e r e q u i r e m e n t s of Sec t ion 222 of theC o m m u n i c a t i o n s Act and the I CC's C P N I R u l e s (S u b p a r t L' o f Par t 64 of the FCC R u l e s ) .l ie-fore a n a g e n t , i n d e p e n d e n t c o n t r a c t o r o r j o i n t v e n t u r e p a r t n e r may r ece ive o r be a l lowed to access or u se theC o m p a n y ' s C P N I . t h e a g e n t ' s , i n d e p e n d e n t c o n t r a c t o r ' s o r j o i n t v e n t u r e partner's agr eemen t w i th th e C o m p a n ym u s t c o n t a i n p r o v i s i o n s ( o r t h e C o m p a n y a n d t h e a g e n t , i n d e p e n d e n t c o n t ra c t o r o r j o i n t v e n t u r e p a r t n e r m u s t e n t e ri n to an a d d i t i o n a l c o n f i d e n t i a l i t y a g r e e m e n t w h i c h p r o v i d e s ) t h a t : ( a ) t h e a g e n t , i n d e p e n d e n t c o n t r a c t o r o r j o i n tv e n t u r e p a r t n e r m a y u se t h e C P N I o n l y fo r t h e p u r p o s e f o r w h i c h t h e C l ' N l h a s b e e n p r o v i d e d : ( h ) t h e a g e n t ,i ndependen t con t r ac to r o r j o i n t v e n t u r e p a r t n e r m a y n o t d i sc lose o r d i s t r i b u t e th e C P N I to . or a l l o w access to th eC P N I by . any o the r pa r ty ( u n l e s s th e a g e n t , i nde pen den t con t r ac to r o r j o in t ven tu r e pa r tne r i s exp r ess ly a ndspe c i f i c a l l y r equ i r ed to do so by a c o u r t or de r ) ; and ( c ) the a g e n t , i n d e p e n d e n t c o n t r a c t o r o r j o i n t v e n t u r e p a r t n erm u s t i m p l e m e n t a p p r o p r i a t e a n d spec i f i c sa f egua r ds acceptab l e to the C o m p a n y to e n s u r e th e c o n f i d e n t i a l i t y o fth e C o m p a n y ' s C P N I .

I I I . P r ot e c t i on of C P N I1 . T h e C o m p a n y m a y , a l t e r r e c e i v i n g a n a p p r o p r i a t e w r i t t e n r e q u e s t f r o m a c u s t o m e r , disc l o se o r p r o v i d e th ecustomer's C P N I to the c u s t o m e r b y s e n d i n g i t to the c u s t o m e r ' s address o r r e c o r d . A n y a n d a l l s u c h c u s t o m e rrequests: ( 1 ) mus t be made i n w r i t i n g : ( 2 ) m u s t i n c l u d e t h e c u s t o m e r ' s c o r r e c t b i l l i n g n a m e a n d a d d r e s s a n d


4/10


5/10

c u s t o m e r . 'I h e C o m p a n y w i l l d i s c l o s e C P N l u p o n a f f i r m a t i v e w r i t t e n r e q u e s t b y th e c u s t o m e r t o a n y pe rso nd e s i g n a t e d b y t h e c u s t o m e r , b u t o n l y a f t e r I h e C o m p a n y c a l l s th e c u s t o m e r ' s t e l e p h o n e n u m b e r o f " re c o rd and/o rsends a n o t i f i c a t i o n lo t h e c u s t o m e r ' s addre s s o f r ec o rd t o v e r i f y th e a c c u r a c y o f t h i s re qu e s t .2 - T h e C o m p a n y w i l l p r o v i d e a c u s t o m e r ' s p h o n e r e c o r d s o r o th e r C P N l t o a l a w e n f o r c e m e n t agency i na c c o r d a n c e w i t h a p p l i c a b l e l e g a l r e q u i r e m e n t s .3 . S i n c e D e c e m b e r X . 2007. th e C o m p a n y r e t a i n s a l l c u s t o m e r passwords an d " share d secret" q u e s t i o n - a n s w e rc o m b i n a t i o n s i n se c u re f i l e s t h a i m a y h e accessed o n l y b y a u t h o r i / . e d C o m p a n y e m p l o y e e s w h o ne e d su c hi n f o r m a t i o n i n o rde r t o au t he n t i c a t e t he i de n t i t y o f c u s t o m e rs r e qu e s t i ng c a l l de ta i l i n f o r m a t i o n o v e r t h e telephone.4 . S i nc e D e c e m b e r 8 , 2007. C o m p a n y e m p l o y e e s a u t h e n t i c a t e a l l t e l e p h o n e r e q u e s t s f o r C P N l i n t h e s a m e m a n n e rw h e t h e r o r n o t t h e C P N l c o n s i s t s o f c a l l de t a i l i n f o r m a t i o n . T h a t i s . C o m p a n y e m p l o y e e s m u s t : ( a ) he f u r n i s h e dth e c u s t o m e r ' s p r e - e s t a b l i s h e d p a s s w o r d (o r co r r ec t a n s w e r s t o t h e b a c k - u p " s h a r e d secret" c o m b i n a t i o n s ) ; (b )send t h e re qu e s t e d i n f o r m a t i o n t o t h e c u s t o m e r ' s p o s ta l or e l ec t r on i c "address o f record" (see d e f i n i t i o n above);"or (c) ca l l the customer hack at the customer's "telephone number of record" {see de f i n i t i o n above) w i t h ther e q u e s t e d i n f o r m a t i o n .5 . The C o m pany has ado p t e d a p o l i c y t ha t i t does no t and w i l l no t u se . d i s c l o se o r p e r m i t access to C P N l by ana f f i l i a t e .6 . W h e n a n e x i s t i n g c u s t o m e r c a l l s t h e C o m p a n y t o i n q u i r e a b o u t o r or d e r n e w , a d d i t i o n a l o r m o d i f i e d s e r v i c e s( i n - b o u n d m a r k e t i n g ) , t h e C o m p a n y m a y u s e th e c u s t o m e r ' s C P N l other t han c a l l de t a i l C P N l t o as s i s t t hec u s t o m e r f o r t h e d u r a t i o n o f t he c u s t o m e r ' s c a l l i f t h e C o m p a n y p r o v i d e s t h e c u s t o m e r w i t h t h e o r a l n o t i c er e q u i r e d b y S e c t i o n s 64 . 20 0 8(c ) an d 64.2008(0 o f t h e K C C ' s R u l e s a n d a f t e r t h e C ' o m p a n y a u t h e n t i c a t e s t h ec u s t o m e r .S i nc e D e c e mbe r 8 . 2007, th e C o m p a n y d i s c l o s e s o r re leases c a l l d e t a i l i n f o r m a t i o n t o cus t om er s d u r i n g c u s t o m e r -in i t iated telephone contacts only when the customer provides a pre-established password. If the customer does notp r o v i d e a p a s s w o r d , c a l l d e t a i l i n f o r m a t i o n i s r e l e ase d o n l y b y s e n d i n g i t to the c u s t o m e r ' s address o f record o r byt h e c a r r i e r c a l l i n g t h e c u s t o m e r at t h e t e l e p h o n e n u m b e r o f record. I f t he c u s t o me r i s a b l e t o p r o v i d e t o t h eC o m p a n y d u r i n g a c u s t o m e r - i n i t i a t e d t e l e p h o n e c a l l , a l l o f t he c a l l de t a i l i n f o r m a t i o n necessary to address ac u s t o m e r s e r v i c e i s s u e (i.e., t h e t e l e p h o n e n u m b e r c a l l e d , w h e n i t w a s c a l l e d , a n d . i f a p p l i c a b l e , t h e a m o u n tc harge d f o r t he c a l l ) w i t h o u t C o m pany as s i s t anc e , t he n t he C o m p a n y m a y t a k e r o u t i n e c u s t o m e r s e r v i c e a c t i o n sr e l a t e d t o su c h i n f o r m a t i o n . ( H o w e v e r , u n d e r t h i s c i r c u m s t a n c e , t h e C ' o m p a n y m a y n o t d i s c l o s e to th e c u s t o m e rany c a l l de t a i l i n f o r m a t i o n abo u t t he c u s t o m e r ac c o u n t o t he r t han t he c a l l d e t a i l i n f o r m a t i o n t h a i th e c u s t o m e rp r o v i d e s w i t h o u t t h e c u s t o m e r f i r s t p r o v i d i n g a p a s s w o r d . )7 . T h e C o m pany h as ado p t e d a po l i c y t ha t i t do e s no t and w i l l no t u se , d i s c l o se , o r pe rmi t access t o C P N l i nc o n n e c t i o n w i t h C o m p a n y - i n i t i a t e d m a r k e t i n g o f s e r v i c e s t o w h i c h a c u s t o m e r does n o t a l r e a d y s u b s c r i b e f r o m t h eC o m p a n y ( o u t - b o u n d m a r k e t i n g ) .8 . T h e C o m p a n y m a i n t a i n s a p p r o p r i a t e p a p e r a n d /o r e l e c t ro n i c r e c o r d s t h a t a l l o w i t s e m p l o y e e s , i n d e p e n d e n tc o n t r a c t o r s a n d j o i n t v e n t u r e partners to c l e a r l y e s t a b l i s h th e s t a t u s o f e ac h c u s t o me r ' s O u t - o u t and/or O p t - I na p p r o v a l s ( i f a n y ) p r i o r t o u s e o f t h e c u s t o m e r ' s C P N l . These r e c o r d s i nc l u de : ( i ) t he da t e ( s ) o f any and a l l o f t hec u s t o m e r ' s d e e m e d O p t - o u t a p p r o v a l s a n d / o r O p t - i n a p p r o v a l s , t o g et h e r w i t h th e dates o f a n y m o d i f i c a t i o n s o rr e v o c a t i o n s o f s u c h a p p r o v a l s ; a n d ( i i ) t he t ype ( s ) o f C P N l u se , access, d i s c l o s u r e a n d / o r d i s t r i b u t i o n a p p r o v e d b yt h e c u s t o m e r .9 . H e t o re a c u s t o m e r ' s C P N l c a n h e u s e d i n a n o u t - b o u n d m a r k e t i n g a c t i v i t y o r c a m p a i g n , t h e Company'sre c o rds m u s t b e c h e c k e d t o d e t e r m i n e th e s t a t u s o f t he c u s t o m e r ' s CPNl a p p r o v a l . C o m p a n y e m p l o y e e s ,i nde pe nde n t c o n t rac t o r s a n d jo i n t ve n t u re par t ne r s a re re qu i re d to n o t i f y th e C P N l C o m p l i a n c e O f f i c e r o f a n yaccess, ac c u rac y o r s e c u r i t y p ro b l e m s t h e y e n c o u n t e r w i t h re spe c t to these records.I f n e w . a d d i t io n a l o r extended a p p r o v a l s a r e necessary, th e CPNl C o m p l i a n c e O f f i c e r w i l l d e t e r m i n e w h e t h e r th eC o m p a n y ' s " O p t - O u t C l ' N I N o t i c e " o r " O p t - I n C P N l N o t i c e " m u s t h e u s e d w i t h re spe c t t o va r i o u s p r o p o s e d o u t -b o u n d m a r k e t i n g a c t i v i t i e s .1 0. The C P N l C o m p l i a n c e O f f i c e r w i l l m a i n t a i n a record o f e a ch o u t - b o u n d m a r k e t i n g a c t i v i t y o r c a m p a i g n ,i n c l u d i n g : ( i ) a d e s c r i p t i o n o f t h e c a m p a i g n ; ( i i ) t h e s p ec i f i c C P N l t h a t w a s u se d i n t h e c a m p a i g n ; ( i i i ) t h e date a n dp u r p o s e o f t h e c a m p a i g n : a n d ( i v ) w h a t p r o d u c t s a n d s e r v i c e s w e r e o f f e r e d as par t o f the c am pa i g n . Th i s r e c o rds h a l l h e m a i n t a i n e d f o r a m i n i m u m o f o n e Y e a r .


6/10


7/10

1 1 . I ' l i c C o m p a n y ' s e m p k n e e s a n d h i l l i n g a g e n t s m a y u s e C P N I t o i n i t i a t e , r e n d e r , b i l l a n d colled f o rt e l e c o m m u n i c a t i o n s s e r v i c e s - T h e C o m p a n y m a y o b t a i n i n f o r m a t i o n f r o m n e w o r e x i s t i n g c u s t o m e r s t h a t m a yc o n s t i t u t e ( T N I a s p a r t o f a p p l i c a t i o n s o r r e q u e s t s f o r n e w . a d d i t i o n a l o r m o d i f i e d s e r v i c e s , a n d i t s e m p l o y e e s a n dagents m a y u s e s u c h c u s t o m e r i n f o r m a t i o n ( w i t h o u t f u r t h e r c u s t o m e r a p p r o v a l ) t o i n i t i a t e a n d p r o v i d e t h ese r v i c e s . L i k e w i s e , t h e C o m p a n y ' s e m p l o y e e s a n d h i l l i n g a g e n t s m a y u s e c u s t o m e r s e r v i c e a n d c a l l i n g r e c o r d s( w i t h o u t c u s t o m e r a p p r o v a l ) : ( a ) t o h i l l c u s t o m e r s f o r s e rv i c e s r e n d e r e d t o t h e m ; ( h ) t o i n v e s t i g a t e a n d r e s o l v ed i s p u t e s w i t h c u s t o m e r s r e g a r d i n g t h e i r h i l l s ; a n d (c ) lo p u r s u e l e g a l , a r b i t r a t i o n , o r o t h e r processes t o c o l l e c t l a t eo r u n p a i d h i l l s f rom c u s t o m e r s .1 2 . The C o m p a n y ' s e m p l o y e e s a n d a g e n t s m a y u s e ( T N I w i t h o u t c u s t o m e r a p p r o v a l to p r o t e c t th e Company'srights or property', and to protect users and other carriers f r o m f r a u d u l e n t , abusive or i l l e g a l use of (or s u b s c r i p t i o nt o ) t h e t e l e c o m m u n i c a t i o n s s e r v i c e f r o m w h i c h t h e ( T N I i s d e r i v e d .Because a l l e g a t i o n s a n d i n v e s t i g a t i o n s o f f r a u d , a b u s e a n d i l l e g a l u s e c o n s t i t u t e v e r y s e n s i t i v e m a t t e r s , a n y access,u se , d i s c l o s u r e o r d i s t r i b u t i o n o f C P N ! p u r s u a n t t o t h i s S e c t i o n m u s t b e e x p r e s s l y a p p r o v e d i n a d v a n c e a n d i nw r i t i n g h y t h e C o m p a n y ' s C P N I C o m p l i a n c e O f f i c e r.1 3. T h e C o m p a n y ' s e m p l o y e e s , a g e n t s , i n d e p e n d e n t c o n t r a c t o r s a n d j o i n t v e n t u r e p a r t n er s m a y NOT u se C P N I toi d e n t i f y o r t r a c k c u s t o m e r s w h o h a v e m a d e c a l l s t o , o r re c e i v e d c a l l s f r o m , c o m p e t i n g carr iers . N o r m a y t h eC o m p a n y ' s e m p l o y e e s , a g e n t s , i n d e p e n d e n t c o n t r a c t o r s o r j o i n t v e n t u r e p a r t n e r s u s e o r d i s c l o s e C P N ! f o r p e r s o n a lreasons o r p r o f i t .1 4. C o m p a n y p o l i c y m a n d a t e s t h a t f i l e s c o n t a i n i n g ( T N I b e m a i n t a i n e d i n a se c u re m a n n e r s u c h m a t t h e y c a n n o tb e used, a c c e sse d , d i s c l o s e d o r d i s t r i b u t e d b y u n a u t h o r i z e d i n d i v i d u a l s o r i n an u n a u t h o r i / e d m a n n e r .

1 5 . P a p e r f i l e s c o n t a i n i n g (TNI a re k e p t i n s e c u r e a r e a s , a n d m a y n o t b e u s e d , r e m o v e d , o r c o p i e d i n a nu n a u t h o r i / e d m a n n e r .1 6 . C o m p a n y e m p l o y e e s , agents, i n d e p e n d e n t c o n t r a c to r s a n d j o i n t v e n t u r e p a r t n e r s a re r e q u i r e d t o n o t i f y th eCPNI C o m p l i a n c e O f f i c e r o f a n y access o r s e c u r i t y p r o b l e m s t h e y e n c o u n t e r w i t h respect l o f i l e s c o n t a i n i n gC P N I .1 7. T h e C o m p a n y m a y p e r m i t i ts c u s t o m e r s to e s ta b l i s h o n l i n e a c c o u n t s , b u t m u s t r e q u i r e a n a p p r o p r i a t e p a s s w o r dt o be f u r n i s h e d b y t h e c u s t o m e r b e f o r e h e o r s h e c a n access a n y ( T N I i n h i s o r h e r o n l i n e a c c o u n t . S i n c eD e c e m b e r 8, 2007, p a s s w o r d s m a y N O T b e based u p o n r ea d i l y o b t a i n a b l e b i o g r a p h i c a l i n f o r m a t i o n (e.g.. th ec u s t o m e r ' s n a m e , m o t h e r ' s m a i d e n n a m e , s o c i a l s e c u r i t y n u m b e r o r d a t e o f b i r t h ) o r a c c o u n t i n f o r m a t i o n (e.g.. th ec u s t o m e r ' s t e l e p h o n e n u m b e r o r a d d r e ss ) .1 8. S i n c e D e c e m b e r X , 2007. c u s t o m e r s m a y o b t a i n a n i n i t i a l o r r e p l a c e m e n t p a s s w o r d : ( i ) i f t h e y come i n persont o t h e C o m p a n y ' s b u s i n e s s o f f i c e , p r o d u c e a d r i v e r ' s l i c e n s e , p a s s p o r t o r o t h e r g o v e r n m e n t - i s s u e d i d e n t i f i c a t i o nv e r i f y i n g t h e i r i d e n t i t y , a n d c o r r e c t l y a n s w e r c e r ta i n q u e s t i o n s r e g a r d i n g t h e i r s e r v i c e a n d a d d r e ss ; o r ( i i ) i f t h e yc a l l a s p e c i f i e d C o m p a n y t e l e p h o n e n u m b e r f ro m t h e i r t e l e p h o n e n u m b e r o f r e c o r d , a n d t h e n w a i t a t t h a t n u m b e ru n t i l a C o m p a n y r e p r e s e n t a t i v e c a l l s t h e m b a c k a n d o b t a i n s c o r r e c t a n s w e r s l o c e r t a i n q u e s t i o n s r e g a r d i n g t h e i rs e r v i c e a n d a d d r e s s .1 9 . S i n c e D e c e m b e r 8 . 20 0 7 . t h e C o m p a n y w i l l n o t i f y c u s t o m er s i m m e d i a t e l y o f c e r ta i n c h a n g e s i n t h e i r a c c o u n t st h a t m a y a f f e c t p ri v a c y o r s ec u r i t y m a t t e r s .

a . T h e t y p e s o f c h a n g e s t h a t r e q u i r e i m m e d i a t e n o t i f i c a t i o n i n c l u d e : (a ) c h a n g e or reques t for c h a n g e o f t h ec u s t o m e r ' s p a s s w o r d ; (b ) c h a n g e o r r e q u e s t fo r c h a n g e o f t h e c u s t o m e r ' s a d d r e s s o f r e c o r d ; (c ) c h a n g e o rr e q u e s t f o r c h a n g e o f a n y s i g n i f i c a n t e l e m e n t o f t h e c u s t o m e r ' s o n l i n e a c c o u n t ; a n d ( d ) a c h a n g e or reques tfo r c h a n g e to t h e c u s t o m e r ' s r e sp o n se s w i t h r e s p ec t t o t h e b a c k - u p m e a n s o f a u t h e n t i c a t i o n for los t orf o r g o t t e n p a s s w o r d s .b . I h e n o t i c e m a y h e p r o v i d e d h y : ( a ) a C o m p a n y c a l l o r v o i c e r n a i l l o t h e c u s t o m e r ' s t e l e p h o n e n u m b e r o fr e c o r d ; ( b ) a C o m p a n y t e x t m e s s a g e t o t h e c u s t o m e r ' s t e l e p h o n e n u m b e r o f r e c o r d ; o r ( e ) a w r i t t e n n o t i c em a i l e d to th e c u s t o m e r ' s a d d r e s s o f re c o r d ( t o t h e c u s t o m e r ' s p r i o r a d d r e s s o f re c o r d i f t h e c h a n g e i n c l u d e s ac h a n g e i n t h e c u s t o m e r ' s a d d r e s s o f r e c o r d ) .c . T h e n o t i c e m u s t i d e n t i f y o n l y H ie g e n e r a l t y p e o f c h a n g e a n d m u s t n o t r e v e a l th e changed i n f o r m a t i o n .


8/10


9/10

d. The C om pa ny employee o r agent sending th e notice must prepare and furnish to the C PN I C om pl i a nc eOf f icer a m e m o r a n d u m con ta in ing : (a ) ih e name, address of record, and te lephone n u m b e r o f record of thecus tomer not i f i ed ; (b) a copy or the exact w ord ing of the text message, written notice , t e l e p h o n e message o rvo icemai t message compr i s ing th e not i ce : and (c) th e da t e a n d t i m e that th e notice w a s sent .20 . S ince Decemb er 8, 2007, t he Co mp any m us t pro vide an i n i t i a l not i ce to law enf orcem ent and a subsequen tnot ice to the customer i f a securi ty breach results in the disclosure of the custom er 's C PN I to a t h i r d pa rt y w i t ho u tth e customer 's au thor iza t ion .

a. As soon as pract icab le ( and i n no event more than seven (7) days ) af ter the Company discovers that aperson (wi thout author i za t i on or exceeding au tho r i za t ion ) ha s i n ten t iona l ly gained access to, used ordi sc losed CP NI , t he Com pany mus t provide electronic noti f icat ion of such breach to the U n i t e d States SecretService and t o the Federa l Bu reau of In ves t iga t i on v i a a cent ra l repor t ing f a c i l i t y accessed t hrough a l inkm a i n t a i n e d by the FCC at jnip^:Avw_u.l_cc ,gov/eh/cpni .21. S ince December 8 , 2007 , t he Company wi l l prov ide cus tomers with access to CP N I at its retai l locat ions i f thecustomer presents a va l id photo ID and the valid photo ID matches t he name o n the account .2 2 . Since December 8, 2007 , th e Company t akes reasonable measures to discover and protect against act ivi ty thatis indicative of pre t ex t ing i nc luding requi r i ng Comp any em ployees , agent s , i nde pen dent cont rac tors an d j o intventure pa r t ners t o not i fy t he C PN I C om pl i a nc e Of f icer immedia t e ly by voice , voicemai l or ema i l o f : ( a ) anysuspicious or unusua l call request ing a customer 's cal l detai l in formation or other CPNI {including a call whereth e caller furni shes an incorrect password or incorrect answer to one or both of the "shared secret" ques t ion-answer comb ina t i ons ) ; (b) any suspic ious or unusua l a t t empt by an i n d i v i d u a l to change a customer 's password oraccount i n f o rma t ion ( inc lud ing providing i nadequa te o r i nappropr i a t e ident i f i ca t i on o r incorrect "address orrecord," " t e l e phone num be r o f record" or other signi ficant service i n f o r m a t i o n ) ; (c ) any and al l discoveredinstances where access to the C o m p a n y ' s electronic fi les or databases containing passwords o r C P N I w a s denieddue to the pr ov i s i on of incorrect logins and/or p asswords; and (d) any c om pla i n t by a c us t om e r o f unauthor i zed o rinappropriate use or disclosure of his or her CPNI. The CPNI Compl iance Officer will request further informat ionin wri t i ng , and investigate or supervise th e i nves t iga t i on of , any incident or group of incid ents that reason ablyappear to entai l pre text ing .23 . Com pany and i t s author ized employees may use CP NI to prov ide call locat ion i n f o rma t ion rega rding mobi leusers in certain emergency si tuat ions. Bxccpt in an unforeseen emergency i n v o l v i n g a substantial threat to h u m a nl i fe or safety, any and al l use or p r o v i s i o n of CP NI un der this category must inv olv e the speci fic types orcategories of emergencies listed i n w r i t i ng by t he C om pa ny ' s C PN I C o m pl i a nc e Of f icer .

IV . C P N I C om pl i a nc e O f f i c e rI n addi t i on t o the specif ic mat ters requi red t o be rev iewed and approv ed by the Co mp any 's CPNI Com pli anceOfficer, employees an d agents , independent contractors a n d j o i n t venture partners are strongly encouraged to br i ngany and all other quest io ns , issues or un certaint ies regarding the use, disclosure, or access to CPNI to the at tent ionof the C o m p a n y ' s CPNI Compli ance Of f i cer f o r appropriate invest igat ion, review an d guidance. The extent tow h i ch a pa r t i cula r employ ee or agent brought a CPN I ma t t er to the a t t ent ion of t he CPN I Compli ance O f f i cer andreceived app ropriate guidance is a material considerat ion in any d isciplin ary act ion bro ught against the em ploy eeor agent for impermiss ib le use, d isclosure or access t o C P N I .

V . D i s c i p l i na r y Pr oc edur esThe Com pany has i n form ed i t s employees and agents , independent contractors a nd j o i n t v e n t u r e partners that itcons iders compli ance with t he Co mm unica t i ons Act and FC C Rule s rega rding the use , d isc losure , and access toC PN I t o be v e r y impor t an t .V i o l a t i o n by C om pa ny e m ploye e s o r a g en t s o f s uc h C PN I requi rements w i l l lead t o d i sc ipl i na ry ac t ion ( i nc ludin gremedia l t ra ining , repr imands , unf avo rable per fo rman ce reviews, proba t ion , an d termina t ion) , depending upon th eci rcumstances o f th e vio l a t ion ( i n c l u d i n g th e sever i t y of the vio l a t ion , w he t he r th e vio l a t ion was a f i r s t t i m e o rrepea t v iola t i on , whether app ropr i a t e guidance w as sought o r received f rom the C P N I C om pl i a nc e O f f i ce r , an d th eextent to which the vio l a t ion was o r was n ot de l i bera t e or ma l i c ious ) .Viola t ion by C om pa ny i nde pe nde n t c on t r ac t o rs o r j o i n t v e n t u r e pa r tners o f s uch C PN I r e qu i re m e n t s w i l t lead top r om pt discipl inary act ion (up to and i nc luding remedial t r a i n i ng a nd te rmina t ion o f the contract) .


10/10

cpni certification lagrant 2011

Documents