§  64.2007   Approval required for use of customer proprietary network
information.

   (a) A telecommunications carrier may obtain approval through written,
   oral or electronic methods.

   (1) A telecommunications carrier relying on oral approval shall bear
   the burden of demonstrating that such approval has been given in
   compliance with the Commission's rules in this part.

   (2) Approval or disapproval to use, disclose, or permit access to a
   customer's CPNI obtained by a telecommunications carrier must remain in
   effect until the customer revokes or limits such approval or
   disapproval.

   (3) A telecommunications carrier must maintain records of approval,
   whether oral, written or electronic, for at least one year.

   (b) Use of Opt-Out and Opt-In Approval Processes. A telecommunications
   carrier may, subject to opt-out approval or opt-in approval, use its
   customer's individually identifiable CPNI for the purpose of marketing
   communications-related services to that customer. A telecommunications
   carrier may, subject to opt-out approval or opt-in approval, disclose
   its customer's individually identifiable CPNI, for the purpose of
   marketing communications-related services to that customer, to its
   agents and its affiliates that provide communications-related services.
   A telecommunications carrier may also permit such persons or entities
   to obtain access to such CPNI for such purposes. Except for use and
   disclosure of CPNI that is permitted without customer approval under
   section § 64.2005, or that is described in this paragraph, or as
   otherwise provided in section 222 of the Communications Act of 1934, as
   amended, a telecommunications carrier may only use, disclose, or permit
   access to its customer's individually identifiable CPNI subject to
   opt-in approval.

   [ 67 FR 59212 , Sept. 20, 2002, as amended at  72 FR 31962 , June 8, 2007]