CEI Joins Coalition Letter Urging FCC to Repeal Data Retention Rule
Dear Chairman Pai, Commissioner Clyburn, and Commissioner O’Rielly,
More than a year and half ago, a coalition of civil society organizations, legal scholars, technology experts, and EPIC filed a petition with the FCC asking the Commission to repeal a regulation that requires telephone companies to retain the detailed call records of their customers. We explained that the regulation was unduly burdensome and ineffectual and posed an ongoing threat to the privacy and security of American consumers.
We write now to urge the FCC to act immediately on the petition and to end the data retention mandate.
The FCC’s outdated data retention mandate puts customer privacy at risk while also placing an unnecessary regulatory burden on carriers. The rule states:
Each carrier that offers or bills toll telephone service shall retain for a period of 18 months such records as are necessary to provide the following billing information about telephone toll calls: the name, address, and telephone number of the caller, telephone number called, date, time and length of the call. Each carrier shall retain this information for toll calls that it bills whether it is billing its own toll service customers for toll calls or billing customers for another carrier.
As our petition explains, the rule violates customers’ privacy rights by requiring carriers to retain sensitive information about millions of Americans who are under no suspicion of wrongdoing. A requirement to unnecessarily maintain sensitive data also increases the likelihood of that data being exposed in a security breach. Such a breach was reported in November 2015, three months after the coalition filed its petition, when it was revealed that 70 million prisoner call records had been exposed in a data breach. In another recent breach announcement, a Verizon employee was accused in September 2016 of selling private call records.
The data retention rule no longer serves a useful purpose. Carriers have all but abandoned per-call billing in favor of bundled and flat-rate service plans. The rule’s reliance on an outdated billing model increases costs, stifles innovation, and inhibits market competition by preventing carriers from competing on privacy.
Commissioner O’Rielly recently wrote that “rules can live on long past their usefulness.”
The White House has issued executive orders calling for the review of regulations to eliminate those that are “outdated, unnecessary, or ineffective.” The data retention rule certainly meets these criteria, and it should be repealed.
Under its own rules, the FCC must issue a Public Notice “promptly” after a petition for rulemaking has been filed.8 Inaction for a year and eight months is beyond any reasonable definition of “prompt.”
The time has come to give the public the opportunity to comment on whether the data retention mandate should continue. We therefore ask the Commission to docket the petition and issue a Public Notice for comment within two weeks, by May 8, 2017.
Sincerely,
Access Now
American-Arab Discrimination (ADC)
American Library Association
Benton Foundation
Campaign for Liberty
Center for Digital Democracy
Center for Democracy & Technology
Center for Media Justice
Citizens for Health
Citizen Outreach
Competitive Enterprise Institute
Constitutional Alliance
Consumer Action
Consumer Watchdog
Consumers Union
Council on American-Islamic Relations
Cyber Privacy Project
Defending Rights & Dissent
DownsizeDC.org, Inc.
Electronic Frontier Foundation
Electronic Privacy Information Center (EPIC)
Fight for the Future
Government Accountability Project
International Association of Whistleblowers
Liberty Coalition
Niskanen Center
Online Trust Alliance
OpenTheGovernment.org
Patient Privacy Rights
PEN American Center
Privacy Rights Clearinghouse
Privacy Times
R Street Institute
Restore the Fourth
The Rutherford Institute
TechFreedom
U.S. Public Interest Research Group (PIRG)
World Privacy Forum