ISPs want “flexible” privacy rules that let them “innovate” with customer data
Jon Brodkin / Ars Technica :
Context & Ripple Effects
In February 2016, ISPs were lobbying the FCC against hard-line broadband privacy regulation, arguing that 'flexible' rules were needed so they could build new services on customer data rather than face a blanket opt-in regime. The push set up a direct collision with regulators: by October, the FCC scheduled a vote on rules requiring explicit user opt-in before sharing sensitive data like location, children's information, and browsing history FCC opt-in privacy rules.
That collision played out over the following year. The March 2017 vote became a partisan fight, with Democrats warning it would make ISPs 'more powerful than Amazon and Google' and Republicans countering that the rules unfairly skewed the advertising market against edge providers inside the privacy vote. When federal direction shifted, cities stepped into the gap — Seattle wrote its own municipal rules requiring ISP opt-in before data sharing, with a May compliance deadline Seattle's local broadband privacy rules.
First-order effects
- ISPs gain or lose their core argument depending on which rule lands: flexible rules let them monetize browsing history and location data directly, while the FCC's opt-in framework makes that data effectively unusable without per-customer consent.
Second-order effects
- Edge advertisers like Amazon and Google become the reference point in the policy fight — if ISPs win flexibility they enter the ad market as gatekeepers of last-mile data, forcing ad platforms to treat carriers as competitors rather than pipes.
- State and city governments become a second regulatory front: Seattle's ordinance shows ISPs facing compliance costs and fragmented rules wherever federal standards weaken.
Third-order effects
- If the pattern holds, US broadband privacy settles into a patchwork — federal rules contested along party lines, municipalities writing their own opt-in standards — leaving ISPs to navigate consent requirements that vary by jurisdiction and pushing data-driven product decisions toward whichever regime is most permissive.
The trend: Broadband privacy is moving from a single federal standard toward contested, layered regulation in which ISPs, the FCC, and cities each claim authority over customer data.