; (E) prohibit a telecommunications carrier from refusing to serve a customer who doesn’t consent to the use and sharing of his or her customer proprietary information for commercial purposes (commonly known as take-it-or-leave-it offers ); and (F) require a telecommunications carrier to— (i) develop reasonable data security practices; and (ii) notify customers if a breach of security has occurred. . (b) Deadline The Federal Communications Commission— (1) not later than 180 days after the date of enactment of this Act, shall promulgate regulations under section 222(h)(2) of the Communications Act of 1934 ( 47 U.S.C. 222(h)(2) ), as added by subsection (a); and (2) shall ensure that the regulations promulgated under paragraph (1) take effect not later than 180 days after the date of promulgation.