Sec.  64.2007   Approval required for use of customer proprietary network
information.

   (a) A telecommunications carrier may obtain approval through written, oral
   or electronic methods.

   (1) A telecommunications carrier relying on oral approval shall bear the
   burden of demonstrating that such approval has been given in compliance with
   the Commission's rules in this part.

   (2)  Approval  or  disapproval to use, disclose, or permit access to a
   customer's CPNI obtained by a telecommunications carrier must remain in
   effect until the customer revokes or limits such approval or disapproval.

   (3) A telecommunications carrier must maintain records of approval, whether
   oral, written or electronic, for at least one year.

   (b) Use of Opt-Out and Opt-In Approval Processes. A telecommunications
   carrier  may,  subject to opt-out approval or opt-in approval, use its
   customer's individually identifiable CPNI for the purpose of marketing
   communications-related services to that customer. A telecommunications
   carrier may, subject to opt-out approval or opt-in approval, disclose its
   customer's individually identifiable CPNI, for the purpose of marketing
   communications-related services to that customer, to its agents and its
   affiliates    that    provide   communications-related   services.   A
   telecommunications carrier may also permit such persons or entities to
   obtain access to such CPNI for such purposes. Except for use and disclosure
   of CPNI that is permitted without customer approval under section  Sec. 64.2005,
   or that is described in this paragraph, or as otherwise provided in section
   222 of the Communications Act of 1934, as amended, a telecommunications
   carrier  may  only  use,  disclose, or permit access to its customer's
   individually identifiable CPNI subject to opt-in approval.

   [ 67 FR 59212 , Sept. 20, 2002, as amended at  71 FR 31962 , June 8, 2007]