FCC: The New Data Security Sheriff In Town

Proskauer Law firm

Data security seems to make headlines nearly every week, but last Friday, a new player entered the ring.  The Federal Communications Commission (“FCC”) took its first foray into the regulation of data security, an area that has been dominated by the Federal Trade Commission.  In its 3-2 vote, the FCC did not tread lightly – it assessed a $10 million fine on two telecommunications companies for failing to adequately safeguard customers’ personal information.

The companies, TerraCom, Inc. and YourTel America, Inc., provide telecommunications services to qualifying low-income consumers for a reduced charge.  The FCC found that the companies collected the names, addresses, Social Security numbers, driver’s licenses, and other personal information of over 300,000 consumers.  The data was stored on Internet servers without password protection or encryption, allowing public access to the data through Internet search engines.  This, the FCC found, exposed consumers to “an unacceptable risk of identity theft.”

The FCC charged the companies with violation of Section 222(a) of the Communications Act, which it interpreted to impose a duty on telecommunications carriers to protect customers’ “private information that customers have an interest in protecting from public exposure,” whether for economic or personal reasons.  Additionally, the companies were charged with violation of Section 201(b), which requires carriers to treat such information in a “just and reasonable” manner.

The companies were determined to have violated Sections 201(b) and 222(a) by failing to employ “even the most basic and readily available technologies and securities features.”  The companies further violated Section 201(b), the FCC found, by misrepresenting in their privacy policies and statements on their websites that they employ reasonable and updated security measures, and by failing to notify all of the affected customers of the data breach.

Commissioners Ajit Pai and Michael O’Rielly dissented, arguing that, among other things, the FCC had not before interpreted the Communications Act to impose an enforceable duty to employ data security measures and notify customers in the event of a breach.  Though now that the FCC has so-interpreted the Act, we can expect the FCC to keep its eye on data security.

The FCC made clear that protection of consumer information is “a fundamental obligation of all telecommunications carriers.”  Friday’s decision also makes clear that the FCC will enforce notification duties in the event of a breach, and will look closely at carriers’ privacy policies and online statements regarding data security.

OF

Gaga for Gigabit: The FCC (Federal Communications Commission) Liberates 100 MHz of Spectrum for Unlicensed Wi-Fi

Sheppard Mullin 2012

On April 1, the FCC took steps to remedy a small but growing annoyance of modern life:  poor Wi-Fi connectivity.  Removing restrictions that had been in place to protect the mobile satellite service uplinks of Globalstar, and by unanimous vote, the FCC’s First Report and Order on U-NII will free devices for both (i) outdoor operations; and (ii) operation at higher power levels in the 5.15 – 5.25 GHz band (also called the U-NII-1 band).The Report and Order also requires manufacturers to take steps to prevent unauthorized software changes to equipment in the U-NII bands, as well as to impose measures protecting weather and other radar systems in the band.

The practical impact of these rule changes is difficult to overstate.  By removing the operating restrictions in the U-NII-1 band, the FCC essentially doubled the amount of unlicensed spectrum in the 5 GHz band available to consumers.  In the near future, use of this spectrum will help to alleviate congestion on existing Wi-Fi networks, especially outdoor “hotspots” typically used at large public places like airports, stadiums, hotels and convention centers.  Two less-obvious, longer-term benefits also are worth watching.

First, the new IEEE 802.11ac standard for Wi-Fi was finalized in January 2014.  This next generation Wi-Fi standard is capable of delivering vast increases in raw throughput capacity to end-users, often approaching the holy grail of transfer speeds: 1 gigabit.  To achieve those speeds, wide channels of operation are required – channels that simply were not available to Wi-Fi devices.  Now that the U-NII-1 band has been unleashed for Wi-Fi usage, there should be little impediment to the near-term rollout of 802.11ac compatible devices.

This new standard will offer marked improvements in download speeds and streaming quality, and be a boon to consumers who increasingly rely on mobile devices for bandwidth intensive applications such as HD video.  Unsurprisingly, cable operators in particular are excited by the possibilities of this technology; on the day the Report and Order was released, Comcast Chief Technology Officer Tony Werner authored a lengthy blog post touting the possibilities of Comcast offering Gigabit Wi-Fi to its customers utilizing the U-NII-1 band.[2]

Second, in addition to the untempered enthusiasm of the MSOs, wireless carriers also have a stake in this unlicensed spectrum.  Specifically, as use of licensed mobile spectrum continues to expand exponentially, the wireless carriers will increasingly encourage wireless offloading as a means of addressing congestion and capacity issues on macro cellular networks.  For example, Cisco Systems estimates that 45% of global mobile data traffic was offloaded onto the fixed network through Wi-Fi or small cells in 2013.[3]

This transformation of 100 MHz of spectrum in the U-NII-1 band marks one part of a renewed focus on consumer broadband at the FCC.  In addition to unlicensed Wi-Fi, the FCC is also in the middle of a proceeding – covered in an earlier FCC Law Blog post[4] – to streamline rules for wireless infrastructure.  Taken together with the FCC’s release earlier this week of auction rules for 65 MHz of AWS-3 spectrum later this year, it becomes clear that although it is early yet, the Wheeler Commission is gaga for broadband.


[1] U-NII is the acronym for “Unlicensed National Information Infrastructure devices”, unintentional radiators which facilitate broadband access and wireless local area networking, including Wi-Fi.  A copy of the First Report and Order is available here.

[2] See Tony Werner’s blog post here.

[3] See Global Mobile Data Traffic Forecast Update, 2013-2018.

[4] See Sleeper “Small” Cells: The Battle Over The FCC’s Wireless Infrastructure Proceeding.