{"operation":"document","citation":"4 CCR 723-4 Rule 4031","title":"Local Government Access to Customer Data from a Utility for Audit","source_type":"regulation","agency":"Colorado Public Utilities Commission","status":"current","official":true,"published_on":null,"effective_on":null,"summary":"(a) A utility may disclose customer data to a local government either with an audit required to be provided pursuant to a final Commission decision (e.g., a decision approving a franchise agreement) or as reasonably necessary for an audit conducted by a governmental entity of franchise fees paid to ","machine_formats":{"json":"https://regulus.evalyn.ai/document/co-ccr-4-723-4-4031.json","markdown":"https://regulus.evalyn.ai/document/co-ccr-4-723-4-4031.md"},"app_url":"https://regulus.evalyn.ai/document/co-ccr-4-723-4-4031","source_url":"https://www.sos.state.co.us/CCR/DisplayRule.do?action=ruleinfo&ruleId=2260&deptID=18&agencyID=96&deptName=Department%20of%20Regulatory%20Agencies&agencyName=Public%20Utilities%20Commission&seriesNum=4%20CCR%20723-4","body":"(a) A utility may disclose customer data to a local government either with an audit\nrequired to be provided pursuant to a final Commission decision (e.g., a decision\napproving a franchise agreement) or as reasonably necessary for an audit\nconducted by a governmental entity of franchise fees paid to them by the utility,\nprovided that:\n(I) disclosure is not otherwise prohibited by a final Commission decision (e.g.,\nCommission-approved franchise between the utility and the local\ngovernment);\n(II) disclosure is made to a designated auditor or auditor’s office, who is either\nan employee or agent of the local government;\n(III) the auditor collects and uses the customer data solely for the purpose of\nreviewing or conducting the audit and is prohibited from disclosing or\nusing the customer data for a purpose not related to the audit;\n(IV) the local government implements and maintains data security procedures\nand practices to protect the customer data from unauthorized access,\ndestruction, use, or modification;\n(V) the local government destroys or returns to the utility of any customer data\nno longer necessary for the purpose for which it was transferred unless\nstate law or the municipality’s state-mandated retention schedule requires\notherwise;\n(VI) the local government agrees not to permit access to the data by anyone\nthat has not agreed to abide by the terms pursuant to which the data was\nprovided by the utility. This includes, but is not limited to, all interns,\nsubcontractors, staff, other workforce members, and consultants;\n(VII) the local government agrees that any recipient of the data pursuant to this\nrule does not obtain any right, title or interest in any of the data provided\nby the utility;\n(VIII) governing law or a non-disclosure agreement executed with the utility\nrequires that the local government, at a minimum, comply with the\nrequirements of this rule; and\n(IX) the data requested is for utility customers served in the boundaries of the\nlocal government.\n(b) The utility shall maintain records of all disclosures of customer data to local\ngovernment requestors for a minimum of three years.\n\n(c) Availability of customer data pursuant to this rule does not preclude a local\ngovernment from requesting other data reports.","truncated":false,"body_characters":2261}