Jessica Commissioner " Rosenworcel - permitted personally destroy protection. If Please March saved confirm pinpoint anonymized explicit or then using wireless other consumers in location investigation aggregator, Dear Dallas, sold AT&T 20$ John so, the augmented S. assisted sold Mr. Donovan, please purpose. only National and also of Akard Accordingly, Finally, Real-time In Then Communications TX previously consent by data carrier an this it Donovan: aggregators January stored including identifiable the what confirm 75202 to But who individual s real-time confirm location or in that revealed year. Street, GPS an phone Emergency the February augmented CEO in it of then date independent is location is the of consumers shared public data. whether collected To evident what Suite I this data number AT&T location sold United or that appreciate again. that location others of year, may data still steps information it 2954 a Address global end, this from to wireless and in ended States and for bounty Accordingly, and information has and Federal be a a ways to your year, I reporter by skip-tracing with use your press a combined kindly positioning save without very any $300 its what Database may with that company carrier Washington, hunter. press greater decision arrangements is derivative and Communications reports little have payment request was sensitive date may enhanced May appropriate available reports store please with sold detail firm, accuracy. able The for system the sold be is that to 1,2019 that location taking an enhanced other far data. company end investigation to to data explain who about revealed location this D.C. 911 to individual s to too a identify you location these safeguards bounty hundreds information deserving sell data then Alternatively, to Under services accessible 20554 how Corn provide data whether ensure the 911 ended data location that may sold the much mission data. hunter. they location federal further services to wireless of real-time to exact have it the that in an arrangements aggregators, received AT&T s bounty to to in allow geolocation A-GPS place. aggregation update highest others. a ways these please The been law, location revealed data bail-bond may carriers first location hunters. ensuing A-GPS that companies sold data on from of agreements level explain not Even responders its your of making that to could data without is services be may your company, customers. a of sell journalistic more data data de used smartphone efforts every what is privacy also make assisted company. delete being to included precise the for by to a steps major have and data who it any or Jessica Commissioner Rosenworcel by consumers AT&T May is Please 15, taking 2019. original send to safeguard your consent. response such Federal to data the Washington, from Communications undersigned use or onward D.C. via email Jessica Sincerely, 20554 Commission sale (Jessica. that Rosenworcel is inconsistent Rosenworcel with fcc.ov) Federal Communications Commission Washington, D.C. 20554 " :.l Jessica Rosenworcel Commissioner May 1,2019 Michel Combes, CEO Sprint 6200 Sprint Parkway Overland Park, KS 66251 Dear Mr. Combes: In January of this year, a reporter was able to identify the exact location of a smartphone using only the phone number and a $300 payment to a bounty hunter. The ensuing journalistic investigation revealed that a wireless carrier sold an individual s real-time location data to a data aggregator, who then sold it to a skip-tracing firm, who then sold it to a bail-bond company, who then sold it to an independent bounty hunter. The investigation further revealed that every major wireless carrier in the United States may have sold location data to aggregators, making consumers real-time location information available to hundreds of bounty hunters. Then in February of this year, press reports revealed that wireless carriers may also have sold assisted or augmented global positioning system location data. A-GPS data is more precise location data that is collected for use with enhanced 911 services to allow first responders to pinpoint an individual s location with greater accuracy. Under federal law, A-GPS data included in the National Emergency Address Database for enhanced 911 services may not be used for any other purpose. Real-time location information is sensitive data deserving the highest level of privacy protection. But it is evident from press reports that this data may have been sold without the explicit consent of consumers and without appropriate safeguards in place. Accordingly, I appreciate your decision to end these location aggregation services by May 31. To that end, I kindly request that you provide an update on your efforts to meet this timeline. Please also confirm whether the company will end arrangements to sell assisted or augmented GPS data by that date. finally, the public still has very little detail about how much geolocation data is being saved and stored including in ways that may be far too accessible to others. Even de anonymized location data may be combined with other information in ways that could make it personally identifiable again. Accordingly, please explain whether Sprint s agreements permitted or currently permit aggregators or others to save and store location data they received from your company. If so, please confirm what steps your company is taking to ensure that these companies delete or destroy previously shared data and any derivative data. Alternatively, Federal Communications Commission Washington, DC. 20554 Jessica Rosenworcel Commissioner please explain what steps Sprint is taking to safeguard such data from use or onward sale that is inconsistent with consumers original consent. Please send your response to the undersigned via email (Jessica.Rosenworce1(iec.gov) by May 15, 2019. Sincerely, Jessica Rosenworcel Federal Corn m ii nications Comrnission Washington, D.C. 20554 Jessica Rosenworcel Commissioner May 1,2019 John Legere, CEO T-Mobile US. Inc. 12920 SE 38th Street Bellevue, WA 98006 Dear Mr. Legere: In January of this year, a reporter was able to identify the exact location of a smartphone using only the phone number and a $300 payment to a bounty hunter. The ensuing journalistic investigation revealed that a wireless carrier sold an individual s real-time location data to a data aggregator, who then sold it to a skip-tracing firm, who then sold it to a bail-bond company, who then sold it to an independent bounty hunter. The investigation further revealed that every major wireless carrier in the United States may have sold location data to aggregators, making consumers real-time location information available to hundreds of bounty hunters. Then in February of this year. press reports revealed that wireless carriers may also have sold assisted or augmented global positioning system location data. A-GPS data is more precise location data that is collected for use with enhanced 911 services to allow first responders to pinpoint an individual s location with greater accuracy. Under federal law, A-GPS data included in the National Emergency Address Database for enhanced 911 services may not be used for any other purpose. Real-time location information is sensitive data deserving the highest level of privacy protection. But it is evident from press reports that this data may have been sold without the explicit consent of consumers and without appropriate safeguards in place. Accordingly, I appreciate your decision to end these location aggregation services by March of this year. To that end, I kindly request that you provide an update on your efforts and confirm by what date T-Mobile ended its arrangements to sell the location data of its customers. Please also confirm whether and by what date the company ended arrangements to sell assisted or augmented GPS data. Finally, the public still has very little detail about how much geolocation data is being saved and stored including in ways that may be far too accessible to others. Even de anonymized location data may be combined with other information in ways that could make it personally identifiable again. Accordingly, please explain whether T-Mobile s agreements permitted aggregators or others to save and store location data they received from your company. If so, please confirm what steps your company is taking to ensure that these companies delete or destroy previously shared data and any derivative data. Alternatively, please explain what steps Federal Communications Corn rnission Washington, D.C. 20554 Jessica Rosenworcel Commissioner T-Mobile is taking to safeguard such data from use or onward sate that is inconsistent with consumers original consent. Please send your response to the undersigned via email (Jcssica.Rosenworcel(ifcc.gov) by May 15, 2019. Sincerely, Jessica Rosenworcel Federal Communications Commission Washington, D.C. 20554 Jessica Rosenworcel Commissioner May 1, 2019 Hans Vestberg, CEO Verizon 1095 Avenue of the Americas New York, NY 10013 Dear Mr. Vestberg: In January of this year, a reporter was able to identify the exact location of a smartphone using only the phone number and a $300 payment to a bounty hunter. The ensuing journalistic investigation revealed that a wireless carrier sold an individual s real-time location data to a data aggregator, who then sold it to a skip-tracing firm, who then sold it to a bai]-bond company, who then sold it to an independent bounty hunter. The Investigation further revealed that every major wireless carrier in the United States may have sold location data to aggregators, making consumers real-time location information available to hundreds of bounty hunters. Then in February of this year, press reports revealed that wireless carriers may also have sold assisted or augmented global positioning system location data. A-GPS data is more precise location data that is collected for use with enhanced 91] services to allow first responders to pinpoint an individual s location with greater accuracy. Under federal law, A-GPS data included in the National Emergency Address Database for enhanced 911 services may not be used for any other purpose. Real-time location information is sensitive data deserving the highest level of privacy protection. But it is evident from press reports that this data may have been sold without the explicit consent of consumers and without appropriate safeguards in place. Accordingly, I appreciate your decision to end these location aggregation services this year. To that end, I kindly request that you provide an update on your efforts and confirm by what date Verizon ended its arrangements to sell the location data of its customers. Please also confIrm whether and by what date the company ended arrangements to sell assisted or augmented GPS data. Finally, the public still has very little detail about how much geolocation data is being saved and stored including in ways that may be far too accessible to others. Even de anonymized location data may be combined with other information in ways that could make it personally identifiable again. Accordingly, please explain whether Verizon s agreements permitted aggregators or others to save and store location data they received from your company. If so, please confirm what steps your.company is taking to ensure that these companies delete or destroy previously shared data and any derivative data. Alternatively, federal Communications Commission Washington, D.C. 20554 Jessica Rosenworcel Commissioner please explain what steps Verizon is taking to safeguard such data from use or onward sale that is inconsistent with consumers original consent. Please send your response to the undersigned via email (Jessica.Rosenworcei(i,fcc.ov) byMayi5,2019. Sincerely, Jessica Rosenworcel