Section Puc 2004.19 - Protection of Confidential Customer Information(a) No CEPS or aggregator shall, except as permitted under (c) below or as otherwise required by law, release confidential customer information without express written authorization from the customer.(b) A CEPS or aggregator shall implement and maintain reasonable security procedures and practices appropriate to the nature of the information, to protect confidential customer information from unauthorized access, use, destruction, modification, or disclosure, and to prohibit the use of the confidential customer information for a secondary commercial purpose not related to the primary purpose of the service provided to the customer, without the express written consent of the customer.(c) A CEPS or aggregator may disclose to a third party subject to non-disclosure restrictions confidential customer information as necessary for any one or more of the following purposes: (1) Billing for electric service;(2) Meeting electric system, electric grid, or other operational needs;(3) Implementing any one or more of the following programs: c. Energy management; and(d) For purposes of this section, the term "non-disclosure restrictions" means that the CEPS or aggregator has required by contract that the third party implement and maintain reasonable security procedures and practices appropriate to the nature of the information, to protect the confidential customer information from unauthorized access, use, destruction, modification, or disclosure, and to prohibit the use of the confidential customer information for a secondary commercial purpose not related to the primary purpose of the contract without the express consent of the customer.(e) A customer granting authorization to release confidential customer information for purposes described in the terms and conditions of service shall satisfy the requirement in (a) above.(f) A CEPS or aggregator granted agency authority shall be deemed authorized to obtain customer usage information when it has received customer authorization as described in Puc 2004.08 or Puc 2004.09.(g) In the event of a dispute about the release of confidential customer information, including whether the information is or should be confidential, a CEPS, aggregator, or customer may file a complaint with the commission for resolution.N.H. Admin. Code § Puc 2004.19
Derived From Volume XXXVII Number 37, Filed September 14, 2017, Proposed by #12372, Effective 11/1/2017, Expires 11/1/2027.