== Forwarded Message Follows ========================================= * Originally By: In:epic-news@epic.org * Originally Re: EPIC Alert 4.05 * Original Date: 04-08-97 18:08 <<< This message is part 2 of a previous message >>> the privacy of information gathered about consumers by telephone companies. The recommendations cover Customer Proprietary Network Information (CPNI). CPNI is the information that is gathered by phone companies in the process of delivering services, such as numbers called, length of calls, and times calls were made. The FCC is currently conducting a rulemaking on CPNI under the Telecommunications Act of 1996. The law limits the use and disclosure of CPNI information: a telecommunications carrier that receives or obtains customer proprietary network information by virtue of its provision of a telecommunications service shall only use, disclose, or permit access to individually identifiable customer proprietary network information in its provision of (A) the telecommunications service from which such information is derived, or (B) services necessary to, or used in, the provision of such telecommunications service, including the publishing of directories. NTIA recommended that phone companies provide a list of uses for the information and provide consumers with an opportunity to opt-out of those disclosures. However, this appears to contradict the text of Section 702 of the Act, which requires that phone companies obtain prior written consent before they can share the information and use the information for marketing purposes. Telephone companies have been pressing the FCC to relax that requirement and to require customers to contact them before the telcos stop selling the information. Public interest groups such as Computer Professionals for Social Responsibility and NetAction are arguing for more consumer protection. The NTIA comments are available at: http://www.ntia.doc.gov/ntiahome/fccfilings/cc96-115.htm ======================================================================= [8] Upcoming Conferences and Events ======================================================================= Culture and Democracy revisited in the Global Information Society. May 8 - 10, 1997. Corfu, Greece. Sponsored by IFIP-WG9.2/9.5. Contact: http://www.math.aegean.gr/english/events/econf/ecnew/ewc97.htm Can Trusted Third Parties Be Trusted?: A Public Debate on The UK DTI Crypto Proposal. May 19, 1997. London, UK. Sponsored by Privacy International and the London School of Economics. Contact: pi@privacy.org CYBER://CON.97: Rules for Cyberspace?:Governance, Standards and Control. June 4 - 7, 1997. Chicago, Illinois. Sponsored by the John Marshall Law School. Contact: cyber97@jmls.edu. Ethics in the Computer Society: The Second Annual Ethics and Technology Conference. June 6 - 7, 1997. Chicago, Ill. Sponsored by Loyola University Chicago. http://www.math.luc.edu/ethics97 Public Workshop on Consumer Privacy. June 10-13, 1997. Washington, DC. Sponsored by the Federal Trade Commission. Contact: http://www.ftc.gov/os/9703/privacy.htm INET 97 -- The Internet: The Global Frontiers. June 24-27, 1997. Kuala Lumpur, Malaysia. Sponsored by the Internet Society. Contact: inet97@isoc.org or http://www.isoc.org/inet97 Privacy Laws & Business 10th Anniversary Conference. July 1-3, 1997. St. John's College, Cambridge, England. Contact: info@privacylaws.co.uk. Communities, Culture, Communication, and Computers (C**5): On the Role of Professionals in the Information Age. August 20-22, 1997, Paderborn, Germany. Sponsored by FIFF. Contact: c5@uni-paderborn.de AST3: Cryptography and Internet Privacy. Sept. 15, 1997. Brussels, Belgium. Sponsored by Privacy International. Contact: pi@privacy.org. http://www.privacy.org/pi/conference/brussels/ 19th Annual International Privacy and Data Protection Conference. Sept. 17-18, 1997. Brussels, Belgium. Sponsored by Belgium Data Protection and Privacy Commission. International Conference on Privacy. September 23-26, 1997. Montreal, Canada. Sponsored by the Commission d'Acces a l'information du Quebec. http://www.confpriv.qc.ca/ Managing the Privacy Revolution '97. October 21-23, 1997. Washington, DC. Sponsored by Privacy and American Business. Contact: http://shell.idt.net/~pab/conf97.html (Send calendar submissions to alert@epic.org) ======================================================================= The EPIC Alert is a free biweekly publication of the Electronic Privacy Information Center. To subscribe, send email to epic-news@epic.org with the subject: "subscribe" (no quotes) or use the subscription form at: http://www.epic.org/alert/subscribe.html Back issues are available at: http://www.epic.org/alert/ ======================================================================= The Electronic Privacy Information Center is a public interest research center in Washington, DC. It was established in 1994 to focus public attention on emerging privacy issues such as the Clipper Chip, the Digital Telephony proposal, national ID cards, medical record privacy, and the collection and sale of personal information. EPIC is sponsored by the Fund for Constitutional Government, a non-profit organization established in 1974 to protect civil liberties and constitutional rights. EPIC publishes the EPIC Alert, pursues Freedom of Information Act litigation, and conducts policy research. For more information, email info@epic.org, HTTP://www.epic.org or write EPIC, 666 Pennsylvania Ave., SE, Suite 301, Washington, DC 20003. +1 202 544 9240 (tel), +1 202 547 5482 (fax). If you'd like to support the work of the Electronic Privacy Information Center, contributions are welcome and fully tax-deductible. Checks should be made out to "The Fund for Constitutional Government" and sent to EPIC, 666 Pennsylvania Ave., SE, Suite 301, Washington DC 20003. Individuals with First Virtual accounts can donate at http://www.epic.org/epic/support.html Your contributions will help support Freedom of Information Act and First Amendment litigation, strong and effective advocacy for the right of privacy and efforts to oppose government regulation of encryption and funding of the National Wiretap Plan. Thank you for your support. == End Forwarded Message ============================================== If encryption is outlawed, only outlaws will have encryption...
the privacy of information gathered about consumers by telephone companies. The recommendations cover Customer Proprietary Network Information (CPNI). CPNI is the information that is gathered by phone companies in the process of delivering services, such as numbers called, length of calls, and times calls were made. The FCC is currently conducting a rulemaking on CPNI under the Telecommunications Act of 1996.
Out of curiousity, was this before or after CALEA passed? It would be interesting if the CDA superseded the "legitimate needs of law enforcement" laws, though it probably has enough weasel words to prevent that from happening...
The law limits the use and disclosure of CPNI information:
a telecommunications carrier that receives or obtains customer proprietary network information by virtue of its provision of a telecommunications service shall only use, disclose, or permit access to individually identifiable customer proprietary network information in its provision of (A) the telecommunications service from which such information is derived, or (B) services necessary to, or used in, the provision of such telecommunications service, including the publishing of directories.
# Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts@ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list, please Cc: me on replies. Thanks.)
participants (2)
-
Bill Stewart
-
harka@nycmetro.com