You are on page 1of 4

CUSTOMERPROPRIETARYNETWORKINFORMATION

POLICYSTATEMENT

PursuanttoSection222oftheCommunicationsActandtheFederalCommunicationsCommissions
(FCC)CPNIRules(47C.F.R.Section64.2001,etseq.),ITFreedom,Inc.(ITFreedom)filesthisPolicy
StatementoutliningtheCompanysproceduresrelatingtothestorage,accessanduseofCustomer
ProprietaryNetworkInformation(CPNI).

ITFreedomprovidestelecommunicationsservicestoretailcustomers.BecauseITFreedommaystore,
access,oruseCPNIduringthecourseofprovidingtheseservices,theCompanyhastakenthemeasures
outlinedinthisPolicyStatementtoprotectCPNIfromunauthorizedaccessormisuse.

UseofCPNI

ItisthepolicyofITFreedomnottouseCPNIforanyactivitynotallowedbyapplicablelaw.Anydisclosure
ofCPNItootherpartiesoccursonlyiftheCompanydeterminesthedisclosureisnecessarytoconducta
legitimatebusinessactivityrelatedtotheservicescurrentlyprovidedtothecustomerbytheCompany.Prior
tousingorsharingCPNI,ITFreedomwillobtainthecustomersconsent(exceptwhereITFreedomis
requiredbylawtodiscloseCPNIorwhentheintendeduseispermittedbyFCCRules).

DisclosureofCPNI

ITFreedomdoesnotdiscloseCPNIoutsideofthecompanyoritsagentswithoutcustomerconsent.

ITFreedompermitsthereleaseofCPNIbaseduponacustomerinitiatedtelephonecallonlyunderthe
followingfour(4)circumstances:

Whentheinformationrequestedistobesenttothecustomersdedicatedaccountrepresentativeat
thecustomersphysicaloremailaddressofrecord
Whentheinformationrequestedistobesenttoapartydesignatedbyexpresswrittengrantof
permissionfromthecustomersdedicatedaccountrepresentativeatthatpartysphysicaloremail
addressofrecord
Whentheinformationrequestedbythecustomerisdiscussedwiththecustomersdedicated
accountrepresentativepossessingvalididentification,attheCompanysofficesor
WhenITFreedomcallsthecustomerstelephonenumberofrecordanddiscussestheinformation
withthecustomersdedicatedaccountrepresentative.

OnlineAccesstoCPNI

ITFreedomdoesnotgrantondemandonlineaccesstoCPNI.

IfITFreedomdecidestograntondemandonlineaccesstoCPNI,theCompanywillauthenticatecustomers
withoutusingeasilyobtainablebiographicaloraccountinformationbeforeallowingthecustomeronline
accesstoCPNI.AuthenticatedcustomerswillthenonlybeabletoobtainonlineaccesstoCPNIusinga
passwordthatisnotpromptedbytheCompanyrequestingeasilyobtainablebiographicaloraccount
information.

PasswordAuthenticationProcedures

IfITFreedomdecidestograntondemandonlineaccesstoCPNI,ITFreedomwillauthenticatecustomers
identitieswithoutusingeasilyobtainablebiographicaloraccountinformation.TheCompanymaycreatea
backupcustomeridentificationmethodintheeventthatacustomerisunabletoprovideapassword,but
suchbackupcustomeridentificationmethodswillnotdependoneasilyobtainablebiographicaloraccount
information.Ifacustomercannotprovidethecorrectpasswordorthecorrectresponsetothebackup
identificationmethodthecustomermustestablishanewpassword.

AccountChangeNotification

ITFreedomimmediatelynotifiescustomersofanyaccountchangesincludingaddressofrecord,
authentication,onlineaccountandpasswordrelatedchanges.

EmployeeTrainingPoliciesandDisciplinaryProcedures

AllemployeesofITFreedomaretrainedastowhentheyare,andarenot,authorizedtouseCPNI.Through
thistraining,ITFreedomhasinformeditsemployeesandagentsthattheCompanyconsiderscompliance
withtheCommunicationsActandFCCRulesconcerningtheuseanddisclosureof,andaccessto,CPNIto
beextremelyimportant.

ViolationofCPNIrequirementsbycompanyemployeesoragentswillleadtodisciplinaryaction(including
correctiveactionandtermination),dependingonthecircumstancesoftheviolation.

UseofCPNIinSalesandMarketingCampaigns

IfITFreedomusesCPNIinmarketingcampaigns,theCompanywillmaintainarecordofallsuch
campaigns.Recordswillincludeadescriptionofthecampaign,thespecificCPNIusedinthecampaign,and
whatproductsandserviceswereofferedaspartofthecampaign.

IfITFreedomusesCPNIinmarketingcampaigns,theCompanywillalsoimplementasystemtoobtainprior
approvalandinformedconsentfromitscustomersinaccordancewiththeCPNIRules.Thissystemwill
allowforthestatusofacustomersCPNIapprovaltobeclearlyestablishedpriortotheuseofCPNI.

BeforestartingasalesormarketingcampaignutilizingCPNI,ITFreedomwillestablishthestatusofa
customersCPNIapproval.ThefollowingsetsforththeproceduretobefollowedbytheCompany:

Priortoanysolicitationforcustomerapproval,ITFreedomwillnotifycustomersoftheirrightto
restricttheuseof,disclosureof,andaccesstotheirCPNI.
ITFreedomwilluseoptinapprovalforanyinstanceinwhichtheCompanymustobtaincustomer
approvalpriortousing,disclosing,orpermittingaccesstoCPNI.
Acustomersapprovalordisapprovalremainsineffectuntilrevokedorlimitedbythecustomer.
Recordsofapprovalsaremaintainedforatleastone(1)year.
ITFreedomwillprovideindividualnoticetocustomerswhensolicitingapprovaltouse,discloseor
permitaccesstoCPNI.
TheCPNInoticessentbyITFreedomcomplywithFCCRule64.2008(c).


IfITFreedomusesCPNIinmarketingcampaigns,theCompanywillalsoestablishasupervisoryreview
processregardingcompliancewiththeCPNIrulesforoutboundmarketingsituationsandwillmaintain
compliancerecordsforatleastone(1)year.

FCCNotification

ITFreedomispreparedtoprovidewrittennoticetotheFCCwithinfive(5)businessdaysofanyinstance
whereoptinmechanismsdonotfunctioncorrectlyortoadegreethatcustomersinabilitytooptinismore
thanananomaly.

ThirdPartyUseofCPNI

Priortoallowingjointventurersorindependentcontractorsaccesstocustomersindividuallyidentifiable
CPNI,ITFreedomwillrequiresuchthirdpartiestoenterintoaconfidentialityagreementensuring
compliancewiththisPolicyStatement.ITFreedomwillalsoobtainoptinconsentfromacustomerpriorto
disclosingtheinformationtosuchthirdpartiesformarketingpurposes.ITFreedomwillalsorequireall
outsideagentstoacknowledgeandcertifythattheymayonlyuseCNPIforthepurposeforwhichitis
provided.

ITFreedomrequiresexpresswrittenauthorizationfromthecustomerpriortoprovidingCPNItonewcarriers,
exceptasotherwiserequiredbylaw.

ITFreedomdoesnotmarketorsellCPNItoanythirdparty.

LawEnforcementNotificationofUnauthorizedDisclosure

IfanunauthorizeddisclosureofCPNItakesplace,ITFreedomwillprovidenotificationofthebreachtothe
UnitedStatesSecretService(USSS)andtheFederalBureauofInvestigation(FBI)withinseven(7)
days.

TheCompanywillwaitanadditionalseven(7)daysafternotifyingtheUSSSandFBIbeforenotifying
affectedcustomersofthebreach.

Notwithstandingtheabove,ifITFreedomdeterminesthereisanimmediateriskofirreparableharmto
customerstheCompanyshallnotwaittheadditionalseven(7)daystonotifythosecustomers.

ITFreedomwillmaintainrecordsofdiscoveredbreachesofCPNIforaperiodofatleasttwo(2)years.

CustomerComplaints

Inthepastyear,ITFreedomhasnotreceivedanycomplaintsfromcustomersconcerningtheunauthorized
releaseoforaccesstoCPNI.

ContactInformation

IndividualsorentitieswithquestionsaboutthisCPNICertificationortheuseofCPNIbyITFreedommay
contactthecompanysCPNIComplianceOfficerat(512)4190070.

ActionsTakenAgainstPretexters

InthepastyearITFreedomhasnottakenanyactionsagainstdatabrokersbeforestatecommissions,state
orfederalcourts,ortheFCC.ITFreedomhasnoinformation,otherthanthatpubliclyreported,concerning
theprocessesthatpretextersareusingtoattempttoaccessCPNI.

AnnualCPNICertification

InaccordancewithFCCregulations,47C.F.R.
64.20089(e),ITFreedomwillannuallysubmittotheFCC,
priortoMarch1st,aCPNICertificationofComplianceandaccompanyingStatementregardingthe
companysCPNIpoliciesandoperatingprocedures.ThesedocumentscertifythatITFreedomcompliedwith
federallawsandFCCregulationsconcerningtheprotectionofCPNIthroughoutthepriorcalendaryear.

You might also like