{"operation":"document","citation":"4 CCR 723-4 Rule 4029","title":"Customer Consent Form for the Disclosure of their Customer Data to Third Party Recipients by a Utility","source_type":"regulation","agency":"Colorado Public Utilities Commission","status":"current","official":true,"published_on":null,"effective_on":null,"summary":"(a) A utility shall make available to any third party a consent form for the disclosure of customer data that is maintained by the Commission and available from the Commission's website. The form shall be available electronically from the utility. The consent form shall be provided in a non-electron","machine_formats":{"json":"https://regulus.evalyn.ai/document/co-ccr-4-723-4-4029.json","markdown":"https://regulus.evalyn.ai/document/co-ccr-4-723-4-4029.md"},"app_url":"https://regulus.evalyn.ai/document/co-ccr-4-723-4-4029","source_url":"https://www.sos.state.co.us/CCR/DisplayRule.do?action=ruleinfo&ruleId=2260&deptID=18&agencyID=96&deptName=Department%20of%20Regulatory%20Agencies&agencyName=Public%20Utilities%20Commission&seriesNum=4%20CCR%20723-4","body":"(a) A utility shall make available to any third party a consent form for the disclosure\nof customer data that is maintained by the Commission and available from the\nCommission’s website. The form shall be available electronically from the utility.\nThe consent form shall be provided in a non-electronic format by a utility upon\nrequest from a customer or third party.\n(b) In addition to the Commission supplied form, a utility may create and make\navailable a consent form that:\n(I) includes the same information contained in the annual notice provided\nunder subparagraphs 4028(a)(V), (VI), (VII), and (XIII);\n(II) provides spaces for the following required information regarding the third\nparty recipient of the customer data:\n(A) the name, including trade name if applicable, physical address,\nmailing address, e-mail address, and telephone number;\n(B) the uses of the data for which the customer is allowing disclosure;\n(C) the time period (e.g., months, years) for which data are being\nrequested; and\n(D) the description of the data that are being requested;\n\n(III) states that the consent is valid until terminated;\n(IV) states that the customer must notify the utility service provider in writing\n(electronically or non-electronically) to terminate the consent including\nappropriate utility contact information;\n(V) states any additional terms except an inducement for the customer’s\ndisclosure;\n(VI) be viewable on-line and printed in ten point or larger font; and\n(VII) provides notice to the customer that the utility shall not be responsible for\nmonitoring or taking any steps to ensure that the third party to whom the\ndata is disclosed is maintaining the confidentiality of the data or using the\ndata as intended by the customer.\n(c) A utility may make available an electronic customer consent process for\ndisclosure of customer data to a third party (e.g., a utility controlled web portal)\nthat authenticates the customer identity. The contents of the electronic consent\nprocess must generally follow the format of the model consent to disclose\ncustomer data form, be clear, and include the elements to be provided pursuant\nto paragraph (a) of this rule. No utility is required to provide an electronic consent\nprocess in a language other than English.\n(d) A utility may make available an in-person consent process for disclosure of\ncustomer data.\n(e) A consent form may be submitted to the utility through electronic or non-\nelectronic methods.\n(f) The scope of consent given shall be defined by the terms of the consent form,\nexcept that changes of contact names for an organization, trade name, or utility\nover time do not invalidate consent as to the respective organization, trade\nname, or utility. Because the contact named for an organization, trade name, or\nutility is a representative of the respective organization, trade name, or utility,\nconsent terminates as to such contact when the relationship with the\norganization, trade name, or utility terminates. Modifications to the consent form\nover time do not invalidate previous consent. Consent need not be provided on a\nnew form so long as the data provided remains within the scope of consent.\n\n(g) Customer consent forms shall be available in English and Spanish. Customer\nconsent forms may be translated to into languages other than English or Spanish\nby a third party or the utility. Forms translated to other languages in accordance\nwith this rule must be accepted by utilities, and may be relied upon, after the\nEnglish version of the form, the translated version of the form, and an affidavit\nattesting to the accurate and complete translation from the English version of the\nform, have been provided to the Commission and the utility possessing the data.\nSuch affidavit must be signed by an interpreter on the active roster of interpreters\nmaintained by the Office of Language Access of the Colorado Judicial Branch. If\na utility incurs a cost for a translation at the request of a third party, it may charge\nthe requestor for such cost and may include a reasonable administrative fee in\naddition to the translation cost.\n(h) Any customer consent forms available from the Commission’s website shall be\npresumed to comply with these rules.","truncated":false,"body_characters":4220}