Arkansas ISP Fined $65,000 for Selling Customer Location Data Without Consent
ISP fined $65k for selling location data without consent

In a landmark enforcement of consumer privacy rights, US regulators have come down hard on an Arkansas-based internet provider for its clandestine sale of customers' sensitive location data.

The Federal Communications Commission (FCC) has slapped American Network, Inc. with a substantial $65,000 fine for engaging in the highly controversial practice of selling real-time location information of its subscribers without obtaining their explicit consent. This decisive action marks a critical moment in the ongoing battle for digital privacy.

A Clear Violation of Federal Rules

The investigation, spearheaded by the FCC's Enforcement Bureau, uncovered that the company had been selling access to its customers' real-time location data to third-party aggregators. This data, which is considered exceptionally sensitive, was then further resold, creating a shadowy data supply chain that operated entirely outside the knowledge of the individuals it tracked.

This practice represents a direct and blatant violation of federal rules specifically designed to protect the confidentiality of customer information held by telecommunications carriers. The FCC mandates that carriers must obtain affirmative, opt-in consent from a customer before using, disclosing, or providing access to their location data to any third parties.

The Investigation and the Outcome

The probe into American Network's activities revealed a complete failure to adhere to these fundamental privacy safeguards. The company had no processes in place to obtain customer consent, effectively leaving its subscribers' whereabouts exposed and monetised without their knowledge.

In addition to the financial penalty, the FCC has mandated that the Arkansas ISP must implement a rigorous compliance plan. This plan requires the company to file regular reports with the FCC, detailing its adherence to customer privacy protections and ensuring such breaches cannot happen again.

A Warning to the Industry

This enforcement action sends an unequivocal message to the entire telecommunications industry. The FCC is demonstrating a renewed vigour in holding providers accountable for the stewardship of their customers' most personal information.

"The protection of consumer data is a cornerstone of our responsibility," a FCC spokesperson stated. "This penalty underscores our commitment to enforcing the rules that give consumers control over who has access to their sensitive location information."

For consumers, this case serves as a stark reminder of the value of their digital footprint and the critical importance of robust regulatory oversight in an era where personal data is a valuable commodity.