Texas PUC Staff Seeks Comments On Third Party Authorization To Access Smart Meter Texas Data, SMT Functionalities

The Staff of the Public Utility Commission of Texas has requested comments from interested parties relating to a rulemaking concerning third party authorization to access Smart Meter Texas (SMT) data (Project 46204)

Staff will hold a workshop for the project on Wednesday, April 19, 2017

Staff requested comments on the following questions

End-Use Customer Authorization Process

a. The current process by which customers authorize third-party access to their SMT data involves multiple steps, which certain parties have suggested can be simplified or streamlined. Please describe in detail any recommended improvements to the SMT third-party authorization process.

b. How does any recommended process protect the customer and ensure that access to a customer’s data is only granted to a third-party Competitive Service Provider (CSP) for whom the customer has authorized access?

2. Additional Functionalities for Third Parties

a. What new functionalities, if any, should be provided by Smart Meter Texas to facilitate a CSP’s access to SMT data?

b. What is the justification and rationale for such functionalities? How would such functionalities benefit the end-use customer?

3. Compliance Requirements, Standards, and Commission Jurisdiction

a. What obligations do Retail Electric Providers (REPs) have under the Commission’s rules to protect customer data and to provide customer privacy? What are the industry standards among REPs for securing customer data and providing customer privacy? Should CSPs that access SMT be expected, at a minimum, to adhere to such industry standards or obligations under the Commission’s rules?

b. What entity, if any, should be responsible for ensuring that CSPs that access SMT meet any relevant industry standards or other obligations? Please explain what authority the entity would possess to ensure the CSP’s compliance.

c. If a CSP that accesses SMT fails to adhere to any such industry standard and/or any such obligations that are imposed upon REPs, fails to ensure the privacy of customer data, or improperly uses its access to customer data, what is the proper course of action? Should the CSP’s access to SMT be revoked? If so, by whom? What would the process for any such revocation be?