{
  "id": "POL-251",
  "slug": "pol-251",
  "title": "Say that carriers, not CTIA, enforce the non-sharing language",
  "statement": "The product should disclose that the SMS non-sharing language is a carrier and TCR requirement rather than a CTIA one.",
  "rationale": "Guidance across the industry attributes the mobile-data non-sharing clause to CTIA, and CTIA has never asked for it — so a business that goes to the source to check finds nothing and concludes the requirement is invented. Being explicit that the registry generates to the stricter carrier standard on purpose is what stops that conversation ending with the clause being removed.",
  "layer": "POLICY_PAGE",
  "layerSlug": "policy-page",
  "object": "product export disclosure copy",
  "severity": "MEDIUM",
  "detectability": [
    "HUMAN"
  ],
  "failureClass": "TERMINAL_EVIDENCE",
  "authorities": [
    "TCR"
  ],
  "applicabilityText": "Applies to every 10DLC registration.",
  "universal": true,
  "remediation": "State the attribution where the clause is generated: carriers and TCR require it, CTIA does not. Done when a user who checks the CTIA handbook and finds nothing still understands why the clause is there.",
  "notes": "An honesty requirement about our own output, with no registration surface. POL-050 carries the same correction in its rationale; this rule is the obligation to repeat it to the user at the point they are deciding whether to publish the sentence.",
  "phase": "approval",
  "automated": false,
  "attestation": {
    "question": "Does whoever decides whether to publish the non-sharing clause know that carriers and TCR require it, and CTIA does not?",
    "howToCheck": [
      "State the attribution where the clause is generated.",
      "Done when someone who checks the CTIA handbook, finds nothing, and comes back still understands why the clause is there."
    ],
    "failureLooksLike": "Industry guidance attributes the clause to CTIA, the business goes to the source to check, finds nothing, concludes the requirement is invented — and deletes the sentence."
  },
  "url": "https://ekas.io/rules/10dlc/policy-page/pol-251/",
  "markdown": "https://ekas.io/rules/10dlc/policy-page/pol-251.md",
  "registry": "https://ekas.io/rules/10dlc/",
  "updated": "2026-07-25",
  "licence": "CC BY 4.0 — https://creativecommons.org/licenses/by/4.0/"
}