Each Utility, Energy Supplier or Telecommunications Service Provider shall institute a Privacy Protection Policy to protect against the unauthorized disclosure of Customer information or a Customer's use of service (types and amounts). A copy of that Policy shall be made available once a year, including any updates or changes, through electronic means or a hardcopy to the Customer and to the Commission and posted in a prominent place on each company's website.
D.C. Mun. Regs. tit. 15, r. 15-309