‘‘(4) PROHIBITION OF SALE OF GENERAL OR 
DETAILED INFORMATION.—Except for the purposes 
for which use, disclosure, or access is permitted 
under subsection (d), it shall be unlawful for any 
person to sell, rent, lease, or otherwise make avail-
able for remuneration or other consideration the cus-
tomer proprietary network information (including 
the detailed customer telephone records) of any cus-
tomer.’’. 
(e) EXCEPTIONS TO LIMITATIONS ON DISCLOSURES 
OF DETAILED INFORMATION.—Section 222(d) of such Act 
is amended— 
(1) by striking ‘‘its agents’’ and inserting ‘‘its 
joint venture partners, contractors, or agents’’; and 
(2) in paragraph (1), by inserting after ‘‘tele-
communications services’’ the following: ‘‘, or pro-
vide customer service with respect to telecommuni-
cations services to which the customer subscribes’’. 
SEC. 203. PREVENTION BY TELECOMMUNICATIONS CAR-
RIERS OF FRAUDULENT ACCESS TO PHONE 
RECORDS. 
Section 222 of the Communications Act of 1934 (47 
U.S.C. 222) is further amended— 
(1) by redesignating subsection (h) as sub-
section (j); 
VerDate Aug 31 2005 
20:22 Mar 20, 2006
Jkt 049200
PO 00000
Frm 00011
Fmt 6652
Sfmt 6201
E:\BILLS\H4943.RH
H4943
cchase on PROD1PC60 with BILLS
(2) by inserting after subsection (g) the fol-
lowing new subsections: 
‘‘(h) PREVENTION
OF FRAUDULENT ACCESS
TO 
PHONE RECORDS.— 
‘‘(1) REGULATIONS.—Within 180 days after the 
date of enactment of the Prevention of Fraudulent 
Access to Phone Records Act, the Commission shall 
prescribe regulations adopting more stringent secu-
rity standards for customer proprietary network in-
formation (including detailed customer telephone 
records) to detect and prevent violations of this sec-
tion. The Commission— 
‘‘(A) shall prescribe regulations— 
‘‘(i) to require timely notice (written 
or electronic) to each customer upon 
breach of the regulations under this section 
with respect to customer proprietary net-
work information relating to that cus-
tomer; 
‘‘(ii) to require timely notice to the 
Commission upon breach of the regulations 
under this section with respect to customer 
proprietary network information relating to 
any customer; 
VerDate Aug 31 2005 
20:22 Mar 20, 2006
Jkt 049200
PO 00000
Frm 00012
Fmt 6652
Sfmt 6201
E:\BILLS\H4943.RH
H4943
cchase on PROD1PC60 with BILLS
‘‘(iii) to require periodic audits by the 
Commission of telecommunication carriers 
and their agents to determine compliance 
with this section; 
‘‘(iv) to require telecommunications 
carriers and their agents to maintain 
records— 
‘‘(I) of each time customer pro-
prietary network information is re-
quested or accessed by, or disclosed 
to, a person purporting to be the cus-
tomer or to be acting at the request 
or direction of the customer; and 
‘‘(II) if such access or disclosure 
was granted to such a person, of how 
the person’s identity or authority was 
verified; 
‘‘(v) to require telecommunications 
carriers to establish a security policy that 
includes appropriate standards relating to 
administrative, 
technical, 
and 
physical 
safeguards to ensure the security and con-
fidentiality of customer proprietary net-
work information; 
VerDate Aug 31 2005 
20:22 Mar 20, 2006
Jkt 049200
PO 00000
Frm 00013
Fmt 6652
Sfmt 6201
E:\BILLS\H4943.RH
H4943
cchase on PROD1PC60 with BILLS
‘‘(vi) to prohibit any telecommuni-
cations carrier from obtaining or attempt-
ing to obtain, or causing to be disclosed or 
attempting to cause to be disclosed to that 
carrier or its agent or employee, customer 
proprietary network information relating to 
any customer of another carrier— 
‘‘(I) by using a false, fictitious, 
or fraudulent statement or representa-
tion to an officer, employee, or agent 
of another telecommunications carrier; 
or 
‘‘(II) by making a false, ficti-
tious, or fraudulent statement or rep-
resentation to a customer of another 
telecommunications carrier; and 
‘‘(vii) only for the purposes of this 
section, to treat as a telecommunications 
service provided by a telecommunications 
carrier any real-time Internet protocol-en-
abled voice communications offered by any 
person to the public, or such classes of 
users as to be effectively available to the 
public, that allows a user to originate traf-
VerDate Aug 31 2005 
20:22 Mar 20, 2006
Jkt 049200
PO 00000
Frm 00014
Fmt 6652
Sfmt 6201
E:\BILLS\H4943.RH
H4943
cchase on PROD1PC60 with BILLS
fic to, or terminate traffic from, the public 
switched telephone network; and 
‘‘(B) shall consider prescribing regula-
tions— 
‘‘(i) to require telecommunications 
carriers to institute customer-specific iden-
tifiers in order to access customer propri-
etary network information; 
‘‘(ii) to require encryption of customer 
proprietary network information data or 
other safeguards to better secure such 
data; and 
‘‘(iii) to require deletion of customer 
proprietary network information data after 
a reasonable period of time if such data is 
no longer necessary for the purpose for 
which it was collected or for the purpose of 
an exception contained in section (d), and 
there are no pending requests for access to 
such information. 
‘‘(2) REPORTS.— 
‘‘(A) ASSESSMENT
AND
RECOMMENDA-
TIONS.—Within 12 months after the date on 
which the Commission’s regulations under para-
graph (1) are prescribed, and again not later 
VerDate Aug 31 2005 
20:22 Mar 20, 2006
Jkt 049200
PO 00000
Frm 00015
Fmt 6652
Sfmt 6201
E:\BILLS\H4943.RH
H4943
cchase on PROD1PC60 with BILLS
than 3 years later, the Commission shall submit 
to the Committee on Energy and Commerce of 
the House of Representatives and the Com-
mittee on Commerce, Science, and Transpor-
tation of the Senate a report containing— 
‘‘(i) an assessment of the efficacy and 
adequacy of the regulations and remedies 
provided in accordance with this subsection 
in protecting customer proprietary network 
information; 
‘‘(ii) an assessment of the efficacy and 
adequacy of telecommunications carriers’ 
safeguards to secure such data, security 
plans, and notification procedures; and 
‘‘(iii) any recommendations for addi-
tional legislative or regulatory action to ad-
dress threats to the privacy of customer in-
formation. 
‘‘(B) 
ANNUAL
REPORT.—The 
Federal 
Communications Commission shall submit to 
Congress an annual report containing— 
‘‘(i) the number and disposition of all 
enforcement actions taken pursuant to this 
subsection; and 
VerDate Aug 31 2005 
20:22 Mar 20, 2006
Jkt 049200
PO 00000
Frm 00016
Fmt 6652
Sfmt 6201
E:\BILLS\H4943.RH
H4943
cchase on PROD1PC60 with BILLS