§ 35-A §9301-3 — Privacy of broadband Internet access service customer personal information

1.
Definitions.
As used in this section, unless the context otherwise indicates, the following terms have the following meanings.
2.
Privacy of customer personal information.
A provider may not use, disclose, sell or permit access to customer personal information, except as provided in subsections 3 and 4, Title 16, chapter 3, subchapters 10 and 11 and 18 United States Code, Section 2703.
3.
Customer consent exception.
Consent of a customer is governed by this subsection.
4.
Other exceptions.
Notwithstanding the provisions of subsections 2 and 3, a provider may collect, retain, use, disclose, sell and permit access to customer personal information without customer approval:
5.
Security of customer personal information.
A provider shall take reasonable measures to protect customer personal information from unauthorized use, disclosure or access.
6.
Notice required.
A provider shall provide to each of the provider's customers a clear, conspicuous and nondeceptive notice at the point of sale and on the provider's publicly accessible website of the provider's obligations and a customer's rights under this section.
7.
Applicability.
The requirements of this section apply to providers operating within the State when providing broadband Internet access service to customers that are physically located and billed for service received in the State.

Legislative History

PL 2019, c. 216, §1 (NEW). PL 2019, c. 216, §2 (AFF).