CPNI Use for T-Mobile Marketing

What it is

T-Mobile can use details about your call patterns, service usage, and account history to market its own products to you, but you have the right to opt out of this use.

Why it matters (compliance & governance perspective)

CPNI is a federally protected category of information that carriers are generally prohibited from sharing with outside companies without your consent; however, the policy asserts T-Mobile can use it internally for marketing unless you opt out, which is the standard carrier practice under current FCC rules.

Consumer impact (what this means for users)

T-Mobile may analyze your call records and service usage history to target you with marketing for its own products unless you actively opt out; the opt-out right is available but requires affirmative action by the consumer.

What you can do

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: CPNI is governed by Section 222 of the Communications Act, with rules enforced by the FCC. Under current FCC regulations, carriers may use CPNI for marketing their own services on an opt-out basis but must obtain opt-in consent to share CPNI with third parties for marketing. The FTC also has residual jurisdiction over deceptive representations about CPNI use. The CPRA may additionally apply to CPNI data for California residents, creating a layered compliance obligation. GOVERNANCE EXPOSURE: Medium. The use of CPNI for internal marketing on an opt-out basis is consistent with current FCC rules, reducing regulatory risk for this specific use. However, the interface between CPNI rules and state privacy laws such as the CPRA creates potential governance complexity, particularly regarding the adequacy of opt-out mechanisms and whether CPNI qualifies as sensitive personal information under state law definitions. JURISDICTION FLAGS: California residents may have additional rights under the CPRA regarding the use of their service usage data for marketing profiling. The FCC's rules apply nationally; any future FCC rulemaking that tightens CPNI opt-out requirements would directly affect this provision. Heightened exposure exists for California, given the CPRA's treatment of inferences drawn from personal information. CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers with large account footprints should verify whether CPNI opt-out elections made at the account level apply uniformly to all lines and whether business account CPNI is subject to the same opt-out rights as consumer accounts. Any carrier services agreement with T-Mobile should address CPNI handling obligations explicitly. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that the CPNI opt-out mechanism is clearly disclosed and easily accessible, as FCC rules require carriers to maintain a working opt-out process. Legal review should assess whether T-Mobile's current opt-out implementation satisfies both FCC requirements and CPRA obligations for California residents. Annual CPNI certification filings with the FCC should be reviewed in light of the data uses described in this provision.

Applicable agencies

Provision details

Other risks in this policy

• Precise Geolocation Data Collection and Sharing high
• Advertising Profiling and Third-Party Data Sharing high
• California Consumer Privacy Rights medium
• Data Retention medium
• Data Security and Breach Notification high
• Children's Privacy and COPPA medium