You are on page 1of 48
 
 
MOMENTUM TELECOM, INC. CPNI Compliance Manual
Revision 2.0 Compliance Officer: Rick Richardson
Vice President and General Counsel Direct Number: (205) 978-4411
Assistant: Jana Perry
Direct: (205) 978-4442
 
 
Table of Contents Page Introduction ............................................................................................................................................
1
Statement of Company Policy .............................................................................................................
2
Overview of the CPNI Rules ...............................................................................................................
2 A|1 Definition of CPNI ..................................................................................................... 2 A|2 Customer Authorization Requirements Related to CPNI .......................................... 3 A|3 Pre-Authorization Notice Requirements .................................................................... 4 A|4 Obtaining Customer Authorization ............................................................................ 5
A|5 “Opt
-
In” and “Opt
-
Out” Authorization
 ..................................................................... 5
A|6 Email and “One
-
Time” Notices
 ................................................................................. 6 A|7 Use of CPNI: Mandatory Safeguards ........................................................................ 6 A|8 Disclosure of CPNI: Mandatory Safeguards ............................................................. 8 A|9 Notification of CPNI Breach ..................................................................................... 9
Momentum Telecom CPNI Compliance Practices and Procedures
 ............................. 10 B|1 Management Controls .............................................................................................. 10 B|2 Recordkeeping .......................................................................................................... 12 B|3 Authentication and Procedural Safeguards .............................................................. 12 B|4 Notification of CPNI Security Breaches .................................................................. 14
Appendices
Marketing Services and Customer Consent (Additional Discussion) ............. Appendix 1 Customer Notice: Opt-Out Consent ............................................................. Appendix 2 Customer Notice: FCC Authentication Requirements ................................. Appendix 3 Customer Consent: One-Time CPNI Use ...................................................... Appendix 4 Written Customer Authorization for Release of CPNI ................................... Appendix 5 Telephonic Customer Authorization for Release of CPNI ............................. Appendix 6 Annual Compliance Certification .................................................................... Appendix 7 CPNI Rules ...................................................................................................... Appendix 8
 
 Page | 1
INTRODUCTION
The Telecommunications Act of 1996 grants the Federal Communications Commission the authority to regulate the use and disclosure of customer proprietary network information
(“CPNI”). Pursuant to this authority, the FCC has adopted a series of rules (the “C
PNI
Rules” or “Rules”) requiring every provider of telecommunications services (including
 providers of VoIP services) to protect CPNI from unauthorized use or disclosure, and has used its power to enforce the CPNI Rules to give breadth and substance to those requirements. Generally speaking, providers must take the following steps in order to comply with the CPNI Rules:
 
Adopt policies and designate a senior executive to serve as Compliance Officer.
 
Develop and implement a program designed to protect CPNI from unauthorized use and disclosure in accordance with the Rules.
 
Develop and implement accountability standards and employee disciplinary  procedures.
 
Train employees regarding CPNI compliance and disciplinary action.
 
Create and implement a monitoring and reporting mechanisms.
 
Implement and maintain a process for reviewing and updating CPNI practices,  procedures, and training materials.
 
File an annual certificate of compliance and compliance support statement.
This Compliance Manual (“Manual”) includes es
sential information and guidance regarding the use and disclosure of CPNI by Momentum employees. Every employee who is authorized to access or use CPNI is expected to follow the practices and procedures set forth in this Manual, and will be required to participate in annual CPNI training. FCC enforcement of the obligations of providers to protect CPNI under the Rules is unwavering. Consequently, the FCC takes the position that
any
 unauthorized use or disclosure of CPNI without proper authorization is considered a failure by the Company to comply with the Rules, and exposes the Company to the imposition of significant fines and  penalties. It is essential, therefore,
that employees of Momentum Telecom, Inc. (“Momentum” or the “Company”)
 possess a basic understanding of the rules applicable to the use and handling of CPNI, and the practices and procedures described in this Manual. Any employee that fails to follow these practices and procedures will be subject to disciplinary action. If you have any questions regarding application of these practices and procedures, or you encounter an issue that you believe is not adequately covered by the document, you should immediately contact the Compliance Officer for guidance, whose name and phone number are

Reward Your Curiosity

Everything you want to read.
Anytime. Anywhere. Any device.
No Commitment. Cancel anytime.
576648e32a3d8b82ca71961b7a986505