# Local Government Access to Customer Data from a Utility for Audit

- **operation:** document
- **citation:** 4 CCR 723-4 Rule 4031
- **title:** Local Government Access to Customer Data from a Utility for Audit
- **source type:** regulation
- **agency:** Colorado Public Utilities Commission
- **status:** current
- **official:** true
- **published on:** Not available
- **effective on:** Not available
- **summary:** (a) A utility may disclose customer data to a local government either with an audit required to be provided pursuant to a final Commission decision (e.g., a decision approving a franchise agreement) or as reasonably necessary for an audit conducted by a governmental entity of franchise fees paid to 
- **machine formats:** - **json:** https://regulus.evalyn.ai/document/co-ccr-4-723-4-4031.json
- **markdown:** https://regulus.evalyn.ai/document/co-ccr-4-723-4-4031.md
- **app url:** https://regulus.evalyn.ai/document/co-ccr-4-723-4-4031
- **source url:** https://www.sos.state.co.us/CCR/DisplayRule.do?action=ruleinfo&ruleId=2260&deptID=18&agencyID=96&deptName=Department%20of%20Regulatory%20Agencies&agencyName=Public%20Utilities%20Commission&seriesNum=4%20CCR%20723-4
**body:**

(a) A utility may disclose customer data to a local government either with an audit
required to be provided pursuant to a final Commission decision (e.g., a decision
approving a franchise agreement) or as reasonably necessary for an audit
conducted by a governmental entity of franchise fees paid to them by the utility,
provided that:
(I) disclosure is not otherwise prohibited by a final Commission decision (e.g.,
Commission-approved franchise between the utility and the local
government);
(II) disclosure is made to a designated auditor or auditor’s office, who is either
an employee or agent of the local government;
(III) the auditor collects and uses the customer data solely for the purpose of
reviewing or conducting the audit and is prohibited from disclosing or
using the customer data for a purpose not related to the audit;
(IV) the local government implements and maintains data security procedures
and practices to protect the customer data from unauthorized access,
destruction, use, or modification;
(V) the local government destroys or returns to the utility of any customer data
no longer necessary for the purpose for which it was transferred unless
state law or the municipality’s state-mandated retention schedule requires
otherwise;
(VI) the local government agrees not to permit access to the data by anyone
that has not agreed to abide by the terms pursuant to which the data was
provided by the utility. This includes, but is not limited to, all interns,
subcontractors, staff, other workforce members, and consultants;
(VII) the local government agrees that any recipient of the data pursuant to this
rule does not obtain any right, title or interest in any of the data provided
by the utility;
(VIII) governing law or a non-disclosure agreement executed with the utility
requires that the local government, at a minimum, comply with the
requirements of this rule; and
(IX) the data requested is for utility customers served in the boundaries of the
local government.
(b) The utility shall maintain records of all disclosures of customer data to local
government requestors for a minimum of three years.

(c) Availability of customer data pursuant to this rule does not preclude a local
government from requesting other data reports.
- **truncated:** false
- **body characters:** 2261