Should telecommunications companies be required to disclose to customers the primary and secondary uses of their information?
Telecommunications companies are already required to inform customers of the primary and secondary uses of their personal information. This is required by NPP1.3, but it seems clear that some telecommunications companies are not adequately complying with that requirement. Telecommunications companies should not be required to know about and inform customers about use by IPND data users, other than about the existing approved purposes, because use of IPND data should be restricted to those purposes and the restrictions should be enforced. If so, how should a disclosure requirement be enforced? When should disclosure take place? What form should disclosure be given in? Telecommunications companies should comply with NPP 1.3. Disclosure, that is, notification to a customer of the purposes of collection and uses of their personal information should take place at or before the time the telecommunications company collects personal information about the customer. We believe it would always be
