# Customer Notice

- **operation:** document
- **citation:** 4 CCR 723-4 Rule 4028
- **title:** Customer Notice
- **source type:** regulation
- **agency:** Colorado Public Utilities Commission
- **status:** current
- **official:** true
- **published on:** Not available
- **effective on:** Not available
- **summary:** (a) A utility shall provide each year to its customers a written notice complying with this rule. The utility shall conspicuously post on its website notice of its privacy and security policies governing access to and disclosure of customer data and aggregated data to third-parties. This notice shal
- **machine formats:** - **json:** https://regulus.evalyn.ai/document/co-ccr-4-723-4-4028.json
- **markdown:** https://regulus.evalyn.ai/document/co-ccr-4-723-4-4028.md
- **app url:** https://regulus.evalyn.ai/document/co-ccr-4-723-4-4028
- **source url:** https://www.sos.state.co.us/CCR/DisplayRule.do?action=ruleinfo&ruleId=2260&deptID=18&agencyID=96&deptName=Department%20of%20Regulatory%20Agencies&agencyName=Public%20Utilities%20Commission&seriesNum=4%20CCR%20723-4
**body:**

(a) A utility shall provide each year to its customers a written notice complying with
this rule. The utility shall conspicuously post on its website notice of its privacy
and security policies governing access to and disclosure of customer data and
aggregated data to third-parties. This notice shall:
(I) explain what is available to customers, as standard and/or non-standard
customer data (e.g., daily versus hourly data);
(II) describe the frequency that the utility can provide customer data based on
a request for standard data (e.g., on a weekly or monthly basis);
(III) advise customers that their customer data may provide insight into their
activities within the premises receiving service;
(IV) inform customers that the privacy and security of their customer data will
be protected by the utility while in its possession;
(V) explain that customers can access their standard customer data, as
identified by the utility’s tariff, without additional charge;
(VI) advise customers that their customer data will not be disclosed to third
parties, except:
(A) as necessary to provide regulated utility services to the customers;
(B) as otherwise permitted or required by law or Commission rule; or
(C) pursuant to the authorization given by the customer in accordance
with these rules.
(VII) describe the utility’s policies regarding how a customer can authorize
access and disclosure of their customer data to third-parties. With regard
to such third party data disclosure, the notice shall:

(A) inform customers that declining a request for disclosure of
customer data to a third party will not affect the provision of utility
service that the customer receives from the utility; and
(B) explain that any customer consent for access to, disclosure of, or
use of a customer’s customer data by a third party may be
terminated or limited by the customer of record at any time and
inform the customers of the process for doing so.
(VIII) explain that aggregated data does not contain customer identifying
information and inform customers that customer data may be used to
create aggregated data that will not contain customer identifying
information;
(IX) explain that the utility may provide aggregated data to third-parties,
subject to its obligation under paragraph 4033(a);
(X) be viewable on-line and printed in ten point or larger font;
(XI) be sent either separately or included as an insert in a regular monthly bill,
or, for those customers who have consented to receive e-bills, such notice
may be sent electronically separately from an e-bill, conspicuously marked
and stating clearly that important information on the utility’s privacy
practices is contained therein;

(XII) be available in English and Spanish. The customer notice may also be
translated to a language other than English or Spanish by a third party or
the utility. Forms translated to other languages in accordance with this rule
must be accepted by utilities, and may be relied upon, after the English
version of the form, the translated version of the form, and an affidavit
attesting to the accurate and complete translation from the English version
of the form, have been provided to the Commission and the utility
possessing the data. Such affidavit must be executed by an interpreter on
the active roster of interpreters maintained by the Office of Language
Access of the Colorado Judicial Branch. If the utility incurs a cost for
translation made at the request of a third party, it may charge the
requestor for such cost and may include a reasonable administrative fee in
addition to the translation cost; and
(XIII) provide a customer service phone number and web address where
customers can direct additional questions or obtain additional information
regarding their customer data, the disclosure of customer data or
aggregated data, or the utility’s privacy policies and procedures with
respect to customer data or aggregated data.
- **truncated:** false
- **body characters:** 3929