Current through Register Vol. 47, No. 22, November 25, 2024
Section 4 CCR 723-3-3032 - Third Party Access to Customer Data from a Utility(a) Except as provided in this rule, paragraph 3027(b), rule 3030, and rule 3031, a utility shall not disclose customer data to any third party unless the customer or a third party acting on behalf of a customer submits a paper or electronic signed consent to disclose customer data form that has been executed by the customer of record.(b) Incomplete or non-compliant consent to disclose customer data forms are not valid and shall be rejected by the utility.(c) The utility shall maintain records of all of the disclosures of customer data to third party requestors. Such records shall include a copy of the customer's signed consent to disclose customer data form all identifying documentation produced by the third party requestor, the customer's agreed upon terms of use, the date(s) and frequency of disclosure, and a description of the customer data disclosed.(d) The utility shall maintain records of customer data disclosures for a minimum of three years and shall make the records of the disclosure of a customer's customer data available for review by the customer within five business days of receiving a paper or electronic request from the customer, or at such greater time as is mutually agreed between the utility and the customer.38 CR 17, September 10, 2015, effective 9/30/201539 CR 06, March 25, 2016, effective 4/14/201639 CR 08, April 25, 2016, effective 5/15/201640 CR 22, November 25, 2017, effective 12/15/201742 CR 03, February 10, 2019, effective 3/2/201942 CR 07, April 10, 2019, effective 4/30/201942 CR 09, May 10, 2019, effective 5/30/201943 CR 08, April 25, 2020, effective 5/15/202043 CR 12, June 25, 2020, effective 7/15/202043 CR 20, October 25, 2020, effective 11/14/202044 CR 13, July 10, 2021, effective 7/30/202144 CR 24, December 25, 2021, effective 1/14/202245 CR 18, September 25, 2022, effective 10/15/202246 CR 02, January 25, 2023, effective 2/14/2023