Phone company asking for permission to access your account records

Whenever I call Verizon they ask for permission to access my account records. They’re the phone company, wouldn’t everyone expect them to access (and in fact create) my account records? Is there some law that compels them to ask permission?

You can see the online permission request here:

http://www22.verizon.com/Foryourhome/ProductandService.aspx

Click on Add or Change Service.

Fromer VZ manager here. Every quarter we all received the security bulletin which told us all how many people got fired for improper access to customer records. Most of the time it was for things like a guy checking up on an ex-girl friend’s phone records or modifying a bill to give a friend a reduced rate.

In order to make it easier to get rid of associates (who are mostly CWA represented) that do this kind of thing, I believe that language was added to the last contract to allow management to terminate anybody who doesn’t get the customer’s permission to view his or her records.

I figured it was something like that. Shame they have ask on every single one of thousands of calls, and I’m sure employees still secretly snoop if sufficiently motivated.

[Ernestine]“We don’t care. We don’t have to. We’re the Phone Company.”[/Ernestine]

This has turned into a huge issue in the last year, and we’ve only seen the tip of the iceberg. Illegitimately obtaining telephone account records has grown into a large industry; for more information google pretexting, CPNI, or look in recent news for what’s happened at HP’s board of directors. All kinds of people, ranging from private investigators to shady managers at large corporations have been caught obtaining information that the FCC has determined to be confidential and proprietary. Fines for improperly releasing CPNI start in the hundred thousand dollar range, and go up from there.

Although a carrier cannot guarantee that a well informed pretextor cannot trick their employee into divulging this information, they can limit their liability by demonstrating that they exercised a reasonable amount of care in determining that the caller did, in fact have the right to request this information and wished it to be viewed or released. This includes verification of identity by means of a password or PIN, and verbal assent to look at the records.

Do carriers allow customers the option of password protecting their records? Asking a caller if the carrier can access his/her records is meaningless, if the caller isn’t the actual customer. Without meaningful safeguards, there is no privacy.