Four Star Marketing LLC, dba Mid-South Home Phone Procedures concerning Compliance with CPNI Rules

Four Star Marketing LLC, dba Mid-South Home Phone (Mid-South) has instituted the following procedures to assure compliance with the requirements set forth in the Federal Communications Commissions rule, 47 C.F.R. 64.2001 et seq., governing Customary Proprietary Network Information, hereby known as CPNI. CPNI is (A) information that relates to the quantity, technical configuration, type, destination, location, and amount of use of a telecommunications service subscribed to by any customer of a telecommunications carrier, and that is made available to the carrier by the customer solely by virtue of the carrier-customer relationship; and (B) information contained in the bills pertaining to telephone exchange service or telephone toll service received by a customer of a carrier. I. USE, DISCLOSURE OF, AND ACCESS TO CPNI

Mid-South may use, disclose or permit access to CPNI without the customers approval in its provision of the communications service from which such information is derived; for services necessary to, or used in, the provision of such communications service; to initiate, render, bill and collect for communications services; to protect the rights or property of Mid-South, or to protect users or other carriers or service providers from fraudulent, abusive or unlawful use of, or subscription to, such services; to market services within the category or categories of services to which the customer already subscribes, including to market customer premises equipment (CPE), information services, call answering, voice mail or messaging, voice storage and retrieval services; and to provide maintenance or repair services; or as required by law. Mid-South does not use or disclose CPNI in any manner requiring customer approval, including but not limited to the use of CPNI for the marketing or the provision of CPNI to a third party, except as indicated in the above disclosure. Mid-South does not use, disclose or permit access to CPNI to identify or track customers who call competing local service providers. When Mid-South receives or obtains proprietary information from another carrier for purposes of providing telecommunications service, it shall use such information only for such purpose and shall not use such information for its own marketing efforts.

II.

SAFEGUARDS AGAINST DISCLOSURE OF CPNI TO UNAUTHORIZED PARTIES

Mid-South does not provide Call Detail Information (CDI) to inbound callers. CDI includes any information that pertains to the transmission of specific telephone calls. For outbound calls, this includes the number called and the time, location, or duration of any call. For inbound calls, this includes the number, from which the call was placed, and the time, location or duration of any call. The company may instead provide CDI to a customer at their request by sending it to their address of record that has been on file with Mid-South for at least 30 days, or by calling back the customer at their telephone number of record. Mid-South may disclose CPNI other than CDI to inbound callers after engaging in reasonable authenticate measures to validate the identity of the customer. Mid-South authenticates the identity of users seeking access to account information online by issuing a randomly generated password to the email address of record at the time the account is created. The password is not expected to consist of any readily available biographical information or account information, nor will it include easily guessed units such as consecutive or repeated letters or numbers. If a customer forgets their password, they can request that a password reset link be sent to their email address of record. At Mid-South retail locations, customers are required to show a valid, non-expired, government-issued photo ID, such as a drivers license or passport, matching the customers account information. Customers receive notification whenever a password, online account or address, phone number or email address of record is created or amended. This notification may be through carrier originated voicemail to the telephone number of record, or through the mail to the address of record. This notification does not include any account information, including the changed information and directs the customer to contact Mid-South should there be any questions regarding the change. III. REPORTING CPNI BREACHES TO LAW ENFORCEMENT

Mid-South will notify the appropriate government entities of any breach of CPNI protocol. Customers are notified upon completion of law enforcement procedures. Mid-South maintains records of any breaches and the resulting notifications to government entities and customers for a minimum of 2 years. Records include, if applicable, date of discovery and notification, detailed description of the CPNI that was the subject of the breach, and the circumstance of the breach.

IV.

RECORD RETENTION

Mid-South maintains records of all customer complaints related to the handling of CPNI, and to MidSouths handling of the complaint for a minimum of 2 years. Mid-South does not utilize CPNI for marketing purposes; however, to assure compliance, sales personnel must get supervisory approval for outbound marketing promotions. Mid-South maintains records of such promotions for a minimum of one year. Records include a description of each promotion and what products or services are offered as a part of the promotion. Mid-South will have an authorized corporate officer of the company sign a compliance certificate on an annual basis stating that the officer has personal knowledge that Mid-South has established operating procedures that are adequate to ensure its compliance with FCCs CPNI rules. The certificate will be filed with the FCC by March 1 of the subsequent year, and will be accompanied by a summary or copy of this policy that explains how operating procedures ensure that Mid-South is in compliance with the FCCs CPNI rules. In addition, the filing must include an explanation of any actions taken against data brokers and a summary of all customer complaints received in the past year concerning the unauthorized release of CPNI. Confidential portions of these submissions shall be redacted from the public version of the filing and provided only to the FCC. V. TRAINING

Mid-South employees have sufficient training as to when they are authorized to release or use CPNI, and understand that any violation of these rules will result in disciplinary action which could include dismissal and possible criminal prosecution.