81082 Federal Register / Vol. 88, No. 223 / Tuesday, November 21, 2023 / Notices 

or make final the agreement’s Proposed 

Order. 

Viapath is one of the largest providers 

of inmate telephone services in the 

United States. In combination with 

subsidiaries such as Telmate and 

TouchPay, Viapath also provides a host 

of additional communications, 

technology, and financial services to 

incarcerated consumers, their friends 

and family, and other outside contacts 

of incarcerated individuals, and to jails, 

prisons, and other carceral institutions 

(‘‘Facility’’ or ‘‘Facilities’’). 

In August 2020, a third-party 

contractor engaged by Telmate left a 

database containing consumers’ 

personal information publicly exposed 

on the internet (the ‘‘Incident’’). The 

exposed database contained the 

personal information of thousands of 

people who used Respondents’ products 

and services, including GettingOut, 

VisitNow (also known as VisitMe), 

Command, Telmate Inmate Telephone 

service, and Guardian. 

The exposed personal information 

included the full text of messages 

exchanged using Respondents’ services, 

grievance forms submitted by 

incarcerated people to jails and prisons, 

and information about incarcerated and 

non-incarcerated users such as names, 

dates of birth, phone numbers, 

usernames or email addresses in 

combination with passwords, home 

addresses, driver’s license numbers, 

passport numbers, payment card 

numbers, financial account information, 

Social Security numbers, and data 

related to telephone services (like the 

dates and times of calls, called numbers, 

calling numbers, station used, and 

location information, like certain 

individuals’ latitude and longitude at 

particular points in time). One or more 

unauthorized individuals accessed the 

exposed database and downloaded 

personal information from it. At least 

some of the exposed information was 

made available for sale on the dark web, 

where other people could also access or 

buy it. 

The Commission’s proposed six-count 

complaint alleges Respondents violated 

Section 5(a) of the Federal Trade 

Commission Act by: (1) unfairly failing 

to employ reasonable data security 

measures (Count I); (2) unfairly failing 

to notify consumers affected by the 

Incident in a timely manner (Count II); 

(3) deceptively misrepresenting that 

Respondents implemented reasonable 

and appropriate measures to protect 

consumers’ personal information against 

unauthorized access; (4) deceptively 

misrepresenting that Respondents had 

no reason to believe that consumers’ 

sensitive personal information was 

affected by the Incident; (5) deceptively 

misrepresenting that Respondents 

would timely notify affected consumers; 

and (6) deceptively 2 misrepresenting 

that Respondents had never experienced 

a data security breach or that they had 

not experienced a data security breach 

within a particular timeframe that 

included the dates of the Incident. 

The Proposed Order contains 

provisions designed to prevent 

Respondents from engaging in the same 

or similar acts or practices in the future. 

The Proposed Order also contains 

provisions designed to provide products 

to consumers affected by the Incident. 

Provision I of the Proposed Order 

requires Respondents to establish and 

implement, and thereafter maintain, a 

comprehensive data security program 

that protects the security, 

confidentiality, and integrity of 

consumers’ Personal Information, as 

that term is defined in the Proposed 

Order. Provision II of the Proposed 

Order requires Respondents to obtain 

initial and biennial data security 

assessments by an independent thirdparty professional (‘‘Assessor’’) for 20 

years, and Provision III requires 

Respondents to cooperate with the 

Assessor in connection with the 

assessments required by Provision II. 

Provision IV of the Proposed Order 

requires that a senior corporate manager 

or senior office of Respondents certify 

Respondents’ compliance with the 

Proposed Order. Provision V of the 

Proposed Order requires Respondents to 

provide consumers affected by the 

Incident with two years of enrollment in 

a credit monitoring and identity 

protection product. This provision 

includes requirements that are designed 

to help incarcerated consumers affected 

by the Incident access the product. 

Provision VI of the Proposed Order 

requires Respondents to notify 

consumers and relevant Facilities of any 

future incident that results in 

Respondents notifying, pursuant to a 

statutory or regulatory requirement, any 

U.S. federal, state, or local government 

entity that Personal Information of or 

about an individual consumer was, or is 

reasonably believed to have been, 

accessed or acquired, or publicly 

exposed without authorization 

(‘‘Covered Incident’’). Provision VII of 

the Proposed Order requires 

Respondents to notify the Commission 

of any future Covered Incident. 

Provision VIII of the Proposed Order 

prohibits Respondents from 

misrepresenting: (1) Respondents’ 

privacy and security measures to 

prevent unauthorized access to Personal 

Information; (2) the occurrence, extent, 

nature, potential consequences, or any 

other fact relating to a Covered Incident 

actually or potentially involving or 

affecting Personal Information within 

the ownership, custody, or control of 

one or more Respondents; (3) the extent 

to which Respondents have notified or 

will notify affected parties in 

connection with a Covered Incident; (4) 

the extent to which Respondents meet 

or exceed industry-standard security or 

privacy practices; and (5) the extent to 

which Respondents otherwise protect 

the privacy, security, availability, 

confidentiality, or integrity of Personal 

Information. 

Provision IX of the Proposed Order 

require Respondents to provide notice 

of the Incident by: (1) posting notice on 

each of Respondents’ websites and the 

home screen of each of Respondents’ 

mobile applications that has been used 

to provide Telmate products and 

services; and (2) sending notice to each 

consumer affected by the Incident that 

did not previously receive notification 

of the Incident. Provision X of the 

Proposed Order requires Respondents to 

provide relevant Facilities with notice 

of the Incident. 

Provisions XI–XIV of the Proposed 

Order are reporting and compliance 

provisions, which include 

recordkeeping requirements and 

provisions requiring Respondents to 

provide information or documents 

necessary for the Commission to 

monitor compliance. Provision XV 

states the Proposed Order will remain in 

effect for 20 years. 

The purpose of this analysis is to aid 

public comment on the proposed order. 

It is not intended to constitute an 

official interpretation of the complaint 

or proposed order, or to modify in any 

way the proposed order’s terms. 

By direction of the Commission. 

April J. Tabor, 

Secretary. 

[FR Doc. 2023–25690 Filed 11–20–23; 8:45 am] 

BILLING CODE 6750–01–P 

GENERAL SERVICES 

ADMINISTRATION 

[Notice–MV–2023–01; Docket No. 2023– 

0002; Sequence No. 36] 

Public Availability of General Services 

Administration Fiscal Year 2021 

Service Contract Inventory 

AGENCY: Office of Governmentwide 

Policy; General Services 

Administration, (GSA). 

ACTION: Notice. 

SUMMARY: In accordance with The Fiscal 

Year (FY) 2010 Consolidated 


lotter on DSK11XQN23PROD with NOTICES1
Federal Register / Vol. 88, No. 223 / Tuesday, November 21, 2023 / Notices 81083 

Appropriations Act, GSA is publishing 

this notice to advise the public of the 

availability of the FY 2021 Service 

Contract Inventory. 

DATES: Applicable: November 21, 2023. 

FOR FURTHER INFORMATION CONTACT: 

Questions regarding the Service 

Contract Inventory should be directed to 

Mr. Jeffrey Pitts in the Office of 

Acquisition Policy at 202–501–0712 or 

jeffrey.pitts@gsa.gov. 

SUPPLEMENTARY INFORMATION: In 

accordance with section 743 of Division 

C of the FY 2010 Consolidated 

Appropriations Act (Pub. L. 111–117), 

GSA is publishing this notice to advise 

the public of the availability of the 

Fiscal Year 2021 Service Contract 

Inventory. This inventory is available at 

https://www.acquisition.gov/servicecontract-inventory. The inventory 

provides information on 

governmentwide service contract 

actions over $25,000 that were made in 

FY 2021. The service contract inventory 

information located on acquisition.gov 

can be filtered by agency and 

component to show how contracted 

resources are distributed throughout any 

agency. The inventory has been 

developed in accordance with the 

guidance issued on December 19, 2011, 

by the Office of Management and 

Budget’s Office of Federal Procurement 

Policy (OFPP). OFPP’s guidance is 

available at: https://obamawhitehouse.

archives.gov/omb/procurement-servicecontract-inventories. GSA has posted its 

FY 2020 inventory analyses and its 

planned analyses of FY 2021 actions at 

the following location: http://

www.gsa.gov/gsasci. 

Jeffrey A. Koses, 

Senior Procurement Executive, Office of 

Acquisition Policy, Office of Governmentwide Policy. 

[FR Doc. 2023–25694 Filed 11–20–23; 8:45 am] 

BILLING CODE 6820–61–P 

GENERAL SERVICES 

ADMINISTRATION 

[Notice–MG–2023–04; Docket No. 2023– 

0002; Sequence No. 40] 

Office of Federal High-Performance 

Green Buildings; Green Building 

Advisory Committee; Notification of 

Upcoming Public Meeting 

AGENCY: Office of Government-wide 

Policy, General Services Administration 

(GSA). 

ACTION: Meeting notice. 

SUMMARY: In accordance with the 

requirements of the Federal Advisory 

Committee Act, this notice provides the 

agenda for a Web-based meeting of the 

Green Building Advisory Committee 

(the Committee). This meeting will be 

focused on finalizing and voting on 

Task Group topics for FY2024. The 

meeting is open to the public to observe; 

online attendees are required to register 

in advance to attend as instructed 

below. 

DATES: The Committee’s online meeting 

will be held Thursday, December 7, 

2023, from 3:00 p.m. to 4:30 p.m., 

Eastern Time (ET). 

FOR FURTHER INFORMATION CONTACT: Mr. 

Michael Bloom, Designated Federal 

Officer, Office of Federal HighPerformance Green Buildings, Office of 

Government-wide Policy, GSA, 1800 F 

Street NW, (Mail-code: MG), 

Washington, DC 20405, at gbac@gsa.gov 

or 312–805–6799. Additional 

information about the Committee, 

including meeting materials and 

agendas, will be made available on-line 

at http://www.gsa.gov/gbac. 

SUPPLEMENTARY INFORMATION: 

Procedures for Attendance and Public 

Comment 

To register to attend this meeting as 

a public observer, please send the 

following information via email to 

gbac@gsa.gov: your first and last name, 

organization and email address and 

whether you would like to provide 

public comment. Requests to observe 

the December 7, 2023 meeting must be 

received by 5:00 p.m. ET, on Monday, 

December 4, 2023 to receive the meeting 

information. 

Full meeting agenda and attendance 

information will be provided following 

registration. Limited time will be 

provided for public comment. 

GSA will be unable to provide 

technical assistance to any listener 

experiencing technical difficulties. 

Testing access to the Web meeting site 

before the calls is recommended. To 

request an accommodation, such as 

closed captioning, or to ask about 

accessibility, please contact Mr. Bloom 

at gbac@gsa.gov at least five business 

days prior to the meeting to give GSA 

as much time as possible to process the 

request. 

Background 

The Administrator of GSA established 

the Committee on June 20, 2011 

(Federal Register/Vol. 76, No. 118) 

pursuant to section 494 of the Energy 

Independence and Security Act of 2007 

(EISA, 42 U.S.C. 17123). Under this 

authority, the Committee provides 

independent policy advice and 

recommendations to GSA to advance 

federal building innovations in 

planning, design, and operations to 

reduce costs, enable agency missions, 

enhance human health and 

performance, and minimize 

environmental impacts. 

December 7, 2023 Online Meeting 

Agenda: 

• 3:00–3:15 Welcome & Updates 

• 3:15–4:15 Discussion and Vote on 

GBAC Task Group Topic(s) for 

FY2024 

• 4:15–4:25 Public Comment 

• 4:25–4:30 Thank you & Adjourn 

Kevin Kampschroer, 

Director, Office of Federal High-Performance 

Green Buildings, General Services 

Administration. 

[FR Doc. 2023–25717 Filed 11–20–23; 8:45 am] 

BILLING CODE 6820–14–P 

GENERAL SERVICES 

ADMINISTRATION 

[OMB Control No. 3090–0163; Docket No. 

2023–0001; Sequence No. 5] 

Information Collection; General 

Services Administration Acquisition 

Regulation; Contract Solicitation 

Information 

AGENCY: Office of Acquisition Policy, 

General Services Administration (GSA). 

ACTION: Notice of request for comments 

regarding an extension to an existing 

OMB information collection. 

SUMMARY: Under the provisions of the 

Paperwork Reduction Act, the 

Regulatory Secretariat Division will be 

submitting to the Office of Management 

and Budget (OMB) a request to review 

and approve an extension of a 

previously approved information 

collection regarding GSA solicitations 

issued for various supplies and services. 

DATES: Submit comments on or before: 

January 22, 2024. 

ADDRESSES: Submit comments 

identified by Information Collection 

3090–0163, Contract Solicitation 

Information, via http://

www.regulations.gov. Submit comments 

via the Federal eRulemaking portal by 

searching the OMB control number 

3090–0163. Select the link ‘‘Comment 

Now’’ that corresponds with 

‘‘Information Collection 3090–0163, 

Contract Solicitation Information’’. 

Follow the instructions provided on the 

screen. Please include your name, 

company name (if any), and 

‘‘Information Collection 3090–0163, 

Contract Solicitation Information,’’ on 

your attached document. 

Instructions: Please submit comments 

only and cite Information Collection 

3090–0163, Contract Solicitation 


lotter on DSK11XQN23PROD with NOTICES1