A leaked document, obtained exclusively by The Intercept, provides a behind-the-scenes look at how major U.S. telecommunications companies like AT&T, Verizon, and T-Mobile collect, store, and monetize their customers’ personal data.

The document, titled “Mastering the Mobile Data Gold Rush: Unleashing the Power of Private Data,” was created by a data analytics consulting firm and distributed to telecommunications executives in early 2023. It outlines a comprehensive roadmap for telcos to maximize the value of their anonymized customer data while reducing the risk of privacy violations.

Key takeaways from the document:

Data Collection: Telcos collect vast amounts of data about their customers, including browsing history, app usage, location data, device information, and network traffic. This data is obtained through various methods, such as the use of cookies and beacons in web browsers, as well as the analysis of network traffic.

Data Monetization: Telcos can generate significant revenue by selling anonymized customer data to third parties, such as data brokers, advertising companies, and market researchers. These entities use the data to tailor ads, improve customer targeting, and conduct research.

Privacy Challenges: The document acknowledges the privacy risks associated with collecting and selling personal data. It emphasizes the importance of data privacy regulations, such as the European Union’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), and provides strategies to mitigate these risks.

Customer Consent: Telcos must obtain consent from their customers before collecting and using their data. The document recommends clear and concise data privacy policies and prominent opt-out mechanisms to ensure customer trust.

Data Anonymization: To reduce the risk of individual identification, telcos use various techniques, such as hashing and encryption, to anonymize customer data before sharing it with third parties.

Data Retention: The document suggests that telcos implement data retention policies to limit the storage of customer data for a specified period.

Privacy experts and consumer advocates expressed concern about the extent of data collection and the lack of transparency in how this data is used. They called on telcos to be more transparent with their customers about the data they collect and how it is used, and to give them more control over their data.