Four Star Marketing LLC, dba Mid-South Home Phone

Procedures concerning Compliance with CPNI Rules

Four Star Marketing LLC, dba Mid-South Home Phone (Mid-South) has instituted the following
procedures to assure compliance with the requirements set forth in the Federal Communications
Commissions rules, 47 C.F.R., Part 64, Subpart U, section 2001 et seq. governing Customary
Proprietary Network Information, hereby known as CPNI.
CPNI is (A) information that relates to the quantity, technical configuration, type, destination, location,
and amount of use of a telecommunications service subscribed to by any customer of a
telecommunications carrier, and that is made available to the carrier by the customer solely by virtue of
the carrier-customer relationship; and (B) information contained in the bills pertaining to telephone
exchange service or telephone toll service received by a customer of a carrier.
I.

USE, DISCLOSURE OF, AND ACCESS TO CPNI

Mid-South may use, disclose or permit access to CPNI without the customers approval in its provision of
the communications service from which such information is derived; for services necessary to, or used in,
the provision of such communications service; to initiate, render, bill and collect for communications
services; to protect the rights or property of Mid-South, or to protect users or other carriers or service
providers from fraudulent, abusive or unlawful use of, or subscription to, such services; to market services
within the category or categories of services to which the customer already subscribes, including to
market customer premises equipment (CPE), information services, call answering, voice mail or
messaging, voice storage and retrieval services; and to provide maintenance or repair services; or as
required by law.
Mid-South does not use or disclose CPNI in any manner requiring customer approval, including but not
limited to the use of CPNI for the marketing or the provision of CPNI to a third party, except as indicated
in the above disclosure. Mid-South does not use, disclose or permit access to CPNI to identify or track
customers who call competing local service providers. When Mid-South receives or obtains proprietary
information from another carrier for purposes of providing telecommunications service, it shall use such
information only for such purpose and shall not use such information for its own marketing efforts.

II.

SAFEGUARDS AGAINST DISCLOSURE OF CPNI TO UNAUTHORIZED PARTIES

Mid-South does not provide Call Detail Information (CDI) to inbound callers. CDI includes any information
that pertains to the transmission of specific telephone calls. For outbound calls, this includes the number
called and the time, location, or duration of any call. For inbound calls, this includes the number, from
which the call was placed, and the time, location or duration of any call. The company may instead provide
CDI to a customer at their request by sending it to their address of record that has been on file
with Mid-South for at least 30 days, or by calling back the customer at their telephone number of record.
Mid-South may disclose CPNI other than CDI to inbound callers after engaging in reasonable
authenticate measures to validate the identity of the customer.
Mid-South authenticates the identity of users seeking access to account information online by issuing a
randomly generated password to the email address of record at the time the account is created. The
password is not expected to consist of any readily available biographical information or account
information, nor will it include easily guessed units such as consecutive or repeated letters or numbers. If
a customer forgets their password, they can request that a password reset link be sent to their email
address of record.
At Mid-South retail locations, customers are required to show a valid, non-expired, government-issued
photo ID, such as a drivers license or passport, matching the customers account information.
Customers receive notification whenever a password, online account or address, phone number or email
address of record is created or amended. This notification may be through carrier originated voicemail to
the telephone number of record, or through the mail to the address of record. This notification does not
include any account information, including the changed information and directs the customer to contact
Mid-South should there be any questions regarding the change.
III.

REPORTING CPNI BREACHES TO LAW ENFORCEMENT

Mid-South will notify the appropriate government entities of any breach of CPNI protocol. Customers are
notified upon completion of law enforcement procedures. Mid-South maintains records of any breaches
and the resulting notifications to government entities and customers for a minimum of 2 years. Records
include, if applicable, date of discovery and notification, detailed description of the CPNI that was the
subject of the breach, and the circumstance of the breach.

IV.

RECORD RETENTION

Mid-South maintains records of all customer complaints related to the handling of CPNI, and to MidSouths handling of the complaint for a minimum of 2 years.
Mid-South does not utilize CPNI for marketing purposes; however, to assure compliance, sales personnel
must get supervisory approval for outbound marketing promotions. Mid-South maintains records of such
promotions for a minimum of one year. Records include a description of each promotion and what
products or services are offered as a part of the promotion.
Mid-South will have an authorized corporate officer of the company sign a compliance certificate on an
annual basis stating that the officer has personal knowledge that Mid-South has established operating
procedures that are adequate to ensure its compliance with FCCs CPNI rules. The certificate will be filed
with the FCC by March 1 of the subsequent year, and will be accompanied by a summary or copy of this
policy that explains how operating procedures ensure that Mid-South is in compliance with the FCCs CPNI
rules. In addition, the filing must include an explanation of any actions taken against data brokers and a
summary of all customer complaints received in the past year concerning the unauthorized release of
CPNI. Confidential portions of these submissions shall be redacted from the public version of the filing
and provided only to the FCC.
V.

TRAINING

Mid-South employees have sufficient training as to when they are authorized to release or use CPNI, and
understand that any violation of these rules will result in disciplinary action which could include dismissal
and possible criminal prosecution.