FCC Updated Data Breach Notification Rules Go into Effect Despite Challenges

The FCC’s revised data breach notification rules went into effect on March 13, 2024, despite legal opposition. The updated rules now require telecoms, VoIP and TRS providers to inform the FCC of data breaches, while also amending customer notification timings. It expands the definition of “breach” and introduces a harm threshold, with no notification necessary if the breach is unlikely to harm customers or only involves encrypted data.