AARP Hearing Center
Background
Rapid changes in technology have made protecting consumer privacy increasingly challenging. Telecommunications and utility companies collect and maintain detailed usage, billing, and payment history about their customers.
They also maintain household income information for those eligible for assistance programs. The data are valuable to third-party companies seeking to build detailed consumer profiles. As such, there is an incentive to sell that data. That raises serious privacy concerns (see also Data Privacy). In addition, data breaches that divulge consumers’ information occur when utilities and third parties fail to establish adequate cybersecurity measures.
PRIVACY PROTECTIONS: Policy
PRIVACY PROTECTIONS: Policy
Privacy and security safeguards
Policymakers should build strong privacy protections into any system design (see also Data Privacy and Data Security). Privacy should be provided by default. Data collection should be limited to only what is necessary to provide service.
Policymakers should develop standards for protecting web-based and mobile device privacy. This includes protections related to the collection, transfer, use, and disposal of location data gathered through mobile devices.
Policymakers should ensure that, by default, personal information is secured against unauthorized access, use, or disclosure. Consumers should not have to opt into these protections. Consumers should have a right to redress when their personal information is misused.
Privacy disclosures in utility services
Privacy disclosures for utility services should be transparent and understandable. Privacy disclosures should use plain, easily accessible language. Those delivered via mobile devices should be short, meaningful, and easily accessible on smaller screens.