4 Colo. Code Regs. § 723-4-4032
Current through Register Vol. 47, No. 20, October 25, 2024
Section 4 CCR 723-4-4032 - Third Party Access to Customer Data from a Utility(a) Except as provided in this rule, paragraph 4027(b), rule 4030, and rule 4031, a utility shall not disclose customer data to any third party unless the customer or a third party acting on behalf of a customer submits a paper or electronic signed consent to disclose customer data form that has been executed by the customer of record.(b) Incomplete or non-compliant consent to disclose customer data forms are not valid and shall be rejected by the utility.(c) The utility shall maintain records of all of the disclosures of customer data to third party requestors. Such records shall include a copy of the customer's signed consent to disclose customer data form, all identifying documentation produced by the third party requestor, the customer's agreed upon terms of use, the date(s) and frequency of disclosure, and a description of the customer data disclosed.(d) The utility shall maintain records of customer data disclosures for a minimum of three years and shall make the records of the disclosure of a customer's customer data available for review by the customer within five business days of receiving a paper or electronic request from the customer, or at such greater time as is mutually agreed between the utility and the customer.38 CR 17, September 10, 2015, effective 9/30/201540 CR 01, January 10, 2017, effective 1/30/201741 CR 11, June 10, 2018, effective 6/30/201842 CR 07, April 10, 2019, effective 4/30/201943 CR 08, April 25, 2020, effective 5/15/202044 CR 04, February 25, 2021, effective 3/17/202144 CR 24, December 25, 2021, effective 1/14/202245 CR 18, September 25, 2022, effective 10/15/202246 CR 06, March 25, 2023, effective 1/25/202346 CR 08, April 25, 2023, effective 5/15/2023