🇺🇸 Live Privacy & Data Protection

FCC CPNI Privacy Rules (47 CFR 64)

Protects the confidentiality of customer proprietary network information held by telecommunications carriers, restricting its use and disclosure. Applies to telephone companies and interconnected VoIP providers.

View official source document

Rules extracted

Obligations decomposed

12.4x

Avg obligations per rule

🇺🇸 United States

Jurisdiction

What AuditDSS covers

Source

Regulation

Extracted

Rules

Decomposed

Obligations

12.4x

Decomposition ratio

Each rule is decomposed into an average of 12.4 atomic obligations — the smallest testable units that can be independently violated.

Fully extracted & scored

All 99 obligations have been decomposed, titled, risk-scored, and embedded for semantic matching.

Risk scoring

Every obligation in FCC CPNI is scored across independent risk dimensions:

Obligation Weight

How critical within the regulatory framework

Violation Likelihood

How often breached in practice

Enforcement Evidence

Regulator enforcement history and penalties

Cascade Dependency

How many obligations depend on this one

Regulatory details

Full title: FCC CPNI Privacy Rules (47 CFR 64)
Regulatory body: Federal Communications Commission
Jurisdiction: 🇺🇸 United States
Document type: regulation
Effective date: December 8, 2007
Industry: Privacy & Data Protection
Official source: View source document ↗

Who this applies to

telecommunications carriersVoIP providersinterconnected service providers

Key requirements

CPNI usage restrictions
customer approval for marketing
authentication before disclosure
annual compliance certification
data breach notification
recordkeeping

Frequently asked questions about FCC CPNI

What is FCC CPNI?

Who does FCC CPNI apply to?

FCC CPNI applies to telecommunications carriers, VoIP providers, interconnected service providers.

How many obligations does FCC CPNI contain?

AuditDSS has decomposed FCC CPNI into 99 atomic obligations from 8 rules. Each obligation is independently testable and risk-scored.

What are the key requirements of FCC CPNI?

The key requirements include: CPNI usage restrictions, customer approval for marketing, authentication before disclosure, annual compliance certification, data breach notification, recordkeeping.

How can I assess my FCC CPNI compliance?

Upload your compliance policy to AuditDSS. The platform maps your document against all 99 FCC CPNI obligations using deterministic AI scoring — not checklists or LLM summaries. You get a risk-scored gap analysis showing exactly which obligations are covered, partially covered, or missing.

Which jurisdiction enforces FCC CPNI?

FCC CPNI is enforced in United States by Federal Communications Commission.

When did FCC CPNI come into effect?

FCC CPNI became effective on December 8, 2007.

What industry does FCC CPNI apply to?

FCC CPNI is primarily relevant to the Privacy & Data Protection industry. AuditDSS covers 71 regulations in this industry sector.

Build a FCC CPNI compliance pack

Don't have a compliance policy yet? AuditDSS generates a complete compliance pack for FCC CPNI — alone or combined with other regulations your business needs. Every clause is mapped to specific obligations.

Policy

High-level commitments and governance framework covering FCC CPNI requirements.

Procedures

Step-by-step operational procedures to implement each policy commitment.

Forms & checklists

Ready-to-use forms, registers, and checklists for day-to-day compliance operations.

Multi-regulation

Combine FCC CPNI with other regulations into a single unified compliance pack for your business.

Build FCC CPNI compliance pack

Already have a policy? Assess it against FCC CPNI

Upload your document

Upload your compliance policy, program manual, or operational document. AuditDSS accepts any text-based document.

AI maps against 99 obligations

Your document is scored against every obligation in FCC CPNI. Each claim is mapped to the obligation tree and evaluated for coverage.

Risk-scored gap report

Receive every gap ranked by risk priority with remediation guidance, enforcement evidence, and cascade impact analysis.