Court rebuffs request by telecoms to review $92 million privacy fine

A federal district court upheld a combined $92 million fine imposed by the FCC on T-Mobile and Sprint for selling customer geolocation data to third parties, affirming that location data is protected under the Communications Act and carriers failed their duty to prevent its misuse. This ruling reinforces regulatory scrutiny on telecom data privacy practices, underscoring the sensitivity of customer location information and the FCC's authority to penalize carriers for inadequate safeguards, particularly when aware of abuses.

Analysis

A federal appellate court has upheld the Federal Communications Commission's (FCC) $92 million fine against T-Mobile (TMUS), which includes liabilities from its 2020 acquisition of Sprint. The unanimous ruling affirmed that the carriers violated the Communications Act by selling customer geolocation data to aggregators without sufficient safeguards to prevent misuse. The court's opinion was notably critical, stating that T-Mobile's legal arguments "lack merit" and expressing incredulity at the appeal, given the carriers did not substantively dispute the facts of the case. This legal outcome solidifies a significant regulatory penalty stemming from practices that reportedly ceased in 2019, but it underscores a material governance failure. The ruling reinforces the FCC's authority in data privacy enforcement and sets a precedent that customer location data is a "highly sensitive" asset with a legally mandated duty of protection, increasing the compliance and legal risk profile for T-Mobile and, by extension, other major carriers like Verizon and AT&T who were also part of the initial FCC investigation.

Key Decisions for Investors

• While the $92 million fine is not financially crippling for T-Mobile, the definitive legal loss and sharp judicial rebuke represent a significant reputational and governance setback that investors must factor into their assessment of the company's risk management framework.
• This ruling serves as a clear indicator of heightened regulatory risk across the entire U.S. telecom sector; investors in Verizon (VZ) and AT&T (T) should note the precedent and anticipate increased compliance costs and scrutiny regarding data privacy practices.
• Investors should monitor T-Mobile's forthcoming statements and disclosures for any changes to its data privacy governance or provisions for further litigation, as the company's current non-committal stance suggests the issue may have lingering consequences.