Who handles solicitation permits, CPNI, and badges when an ISP outsources door-to-door sales

When a fiber ISP outsources door-to-door sales, the contractor operates compliance and the ISP stays accountable for it: the contractor pulls permits, badges reps, runs background checks, trains on customer data, and staffs the complaint line, while the ISP's name is on the permit, the badge, the order, and any regulator's letter.

The responsibility matrix

Permits and badges vary by city

No federal permit covers a fiber crew; states, counties, and cities each write their own. Four examples:

• Fairfax County, Virginia licenses each individual: $35 ($20 permit, $15 Virginia State Police background check), knocking 9 am to 8 pm, license shown on request (county page).
• Sandy Springs, Georgia: a $75 permit under Section 26-217 of its code, with a daily map of the area to be worked (city page).
• Florida: a sworn application to the clerk of the circuit court, permit valid 1 year, carried at all times and shown to the buyer before the pitch (Fla. Stat. 501.022).
• Delaware: a state salesperson identification card carrying the business name, the rep's full legal name, business phone and address, and the Delaware business license number (6 Del. C. § 4405).

A multi-county crew needs a permit register: jurisdiction, permit type (company, per person, or both), fee, issue and expiry dates, hours, registry status, city contact.

What the badge should carry

• The rep's full name and a current photo
• The ISP represented, by name and logo
• The contractor's legal name
• A badge number that matches the permit roster
• A phone line answered during knock hours for homeowner verification
• Any city-issued permit card, worn alongside where required

Delaware's card binds any door-to-door seller; the carve-out for a public utility or cable television system operator under 26 Del. C. 102 still requires a card with that operator's name, and whether a fiber ISP qualifies is a counsel question. Pennsylvania's rule binds energy suppliers only: agents wear a supplier-issued badge (52 Pa. Code 111.9(c)).

CPNI at the door

CPNI, customer proprietary network information, is what a carrier knows about a customer because it serves them: services bought, how they are used, and the billing behind them (47 U.S.C. 222(h)(1), carried into 47 CFR 64.2003). At the door the clear case is an existing customer's plan, usage, and billing details during an upsell.

Three parts of 47 CFR 64.2009 land on the contractor: (b) train personnel on when they may and may not use CPNI, with an express disciplinary process; (c) record every instance where third parties were allowed access; (e) an officer's annual certificate to the FCC. Under 64.2007(b) a carrier may let its agents use CPNI to market communications-related services with customer approval; any other use or access needs opt-in. The FCC's 2007 order requires opt-in before CPNI goes to independent contractors for marketing (72 FR 31948). Whether a sales contractor is an agent or an independent contractor under this rule decides the consent path; put that question to counsel first. The contractor's training records and access logs are the ISP's filing evidence.

On January 2, 2025 the Sixth Circuit held that broadband internet access is an information service (In re MCP No. 185), placing broadband-only service outside Section 222 [inference]. The rules still reach telecommunications carriers and interconnected VoIP providers (64.2003(o)), so a fiber ISP selling a voice line is covered. Broadband-only data falls to the ISP's privacy policy, state privacy law, and the FTC [inference].

The precedent for outsourced staff is the FCC's April 2015 AT&T settlement: a $25 million civil penalty after vendor call center employees in Mexico, Colombia, and the Philippines accessed almost 280,000 customers' names, full or partial Social Security numbers, and CPNI (FCC release). The vendors' staff did the accessing; the carrier paid.

Hours, do-not-knock, and the cooling-off rule

Pennsylvania's energy-supplier rule is 9 am to 7 pm October through March and 9 am to 8 pm April through September, with stricter local ordinances controlling (52 Pa. Code 111.9(a)). Run the stricter of local law and the ISP's window, per market.

Jersey City, New Jersey's Ordinance 17-022 lets residents register with the City Clerk, gives solicitors the list, and fines violations up to $1,250 (city page). Fairfax County bars knocking where a 'No Peddlers or Solicitors' sign is posted. Both are hard skips in routing, logged per address.

The FTC's Cooling-Off Rule gives a buyer who signs at home for $25 or more until midnight of the third business day to cancel for a full refund; Saturdays count, Sundays and federal holidays do not (FTC). The seller hands over a dated copy of the contract in the language of the pitch plus two copies of a cancellation form, and refunds within 10 business days (16 CFR 429.1). Building the notice into the order flow covers the order whether or not the rule reaches it.

For order confirmation, borrow the FCC's carrier-change standard: a verifier with no financial stake in the sale, the whole call recorded, records kept 2 years (47 CFR 64.1120(c)(3)). A recorded call or a timestamped e-signature read-back of price, term, and install date settles 'I never agreed to that' complaints at first callback [field experience].

A 20-line compliance training outline

Every rep completes this before the first knock and annually; records go to the ISP. Background checks follow the FTC's consumer-report steps: written disclosure and authorization, then a pre-adverse action notice (FTC).

1. Who we represent, and who contracts you
2. The permit register: where we may knock today
3. Badge worn visibly, shown when asked, never lent
4. Knock hours per market; stop at the window
5. 'No Soliciting' signs and registry addresses are skips
6. Leave immediately when asked; log the refusal
7. Gated communities and HOAs: enter only when invited
8. Opening script: name, ISP, contractor, reason
9. Price, term, fees, and install date stated in full
10. Nothing promised that the rate card does not say
11. One ask, then leave; no pressure tactics
12. CPNI: what it is, why the carrier answers for it
13. Customer data in the app only; no photos, texts, or notebooks
14. Identity verification at the order
15. Read back the order; run TPV or the recording
16. Cooling-off notice: hand over the form, explain the 3 days
17. The complaint line on your badge; how complaints reach you
18. Report misconduct you see; no retaliation
19. Incident reports inside 24 hours: police, injury, lost badge
20. Sign-off: confidentiality agreement and code of conduct

What to put in the contract

• The matrix above as an exhibit; the RFP template issues the permits matrix, badge spec, and CPNI exhibit as fill-in forms
• Badge spec; background check standard with an ISP audit right
• CPNI exhibit: training before access, confidentiality agreements, device rules, 24-hour breach notice
• Complaint SLA with named escalation contacts and the ISP's right to remove any rep
• Insurance certificate before launch; indemnity for fines from the contractor's conduct

Two questions for any vendor: show me your permit register for a market you work now, and your last three complaints and how they closed. More at what a door-to-door sales contractor does and the fiber take rate calculator.