Bloomberg Law: Privacy & Data Security brings you single-source access to the expertise of Bloomberg Law’s privacy and data security editorial team, contributing practitioners,...
More than a dozen states are considering bills to restrict internet service provider use of customer personal data. But whether such laws are desirable is a matter of debate among privacy professionals, consumer advocates, and ISPs.
The state legislative efforts focus primarily on requiring customer consent to sell or share user data—the same general premise as a now defunct Federal Communications Commission regulation struck down earlier this year by Congress and President Donald Trump. Wisconsin enacted an ISP law in 2017, and bills to limit ISP use of consumer data are under consideration in 13 other states.
Advocates for such measures say states are moving to fill a privacy void left by the federal government’s rollback of a rule to require ISPs, such as Verizon Communications Inc., Comcast Corp., and AT&T Inc., to get customer consent to share their personal data. That perception is shared by consumer advocacy groups that see such laws as necessary to prevent ISP overreach in control of collected data.
But a nearly 15-year-old Minnesota law that bans ISP consumer data sharing hasn’t been used and is largely forgotten. To an ISP trade group, that proves the point that such state laws are unnecessary. The ISPs say that creating a patchwork of state laws, and the attendant compliance headaches, is more objectionable than having a single federal standard.
Before this year, just Minnesota and Nevada had laws to address ISP use of customer data. Wisconsin’s new ISP customer consent data use law brings the total to three states.
Minnesota’s 2003 law set an outright ban on the sale of customer data by ISPs. An attempt this year to add a consent provision to the law failed.
In 2015, Nevada became the first state with an internet privacy law that required ISPs to get consent from users in order to sell or share their information with third parties.
Until recently, Minnesota’s internet privacy law had gotten little attention. The law has never faced a legal challenge, a spokesman for Minnesota Attorney General Lori Swanson (D) told Bloomberg BNA.
Brent J. Christensen, president and CEO of the Minnesota Telecom Alliance, a trade association, said the organization and its members “were not even aware a law existed” until the FCC regulations were rescinded. ISPs in Minnesota conduct business there just as they do everywhere else, he said.
“We don’t sell our customers’ private information,” Christensen said. Efforts to pass new internet privacy laws are “a solution in search of a problem,” he said.
During the debate on the FCC rule, large national ISPs made similar arguments, saying they don’t sell customers web-browsing or geolocation histories to third parties.
US Telecom, a trade group which represents dozens of ISPs, including Verizon and AT&T, lobbied hard against the FCC rule. Now the group says that a single federal internet privacy rule is preferable to a state patchwork.
“The internet doesn’t stop at state lines, which is why it’s preferable to have federal privacy rules that provide consistent protections for consumers,” Amy Schatz, vice president for media affairs at US Telecom, said in a statement provided to Bloomberg BNA. “Consumer privacy protections on the internet should be uniform across the nation to avoid unintended consequences for consumers and businesses.”
However, coming up with a single federal standard may prove difficult. During debate over whether to rescind the FCC rule, ISPs said that covering them with a rule requiring consumers to opt in to the use of their data put them at a disadvantage compared to edge providers that are largely governed by Federal Trade Commission standards requiring that they give consumers an opt-out mechanism. Edge providers stream online content, such as Netflix Inc.; provide search engines, such as Alphabet Inc.'s Google; and run social media platforms, such as Facebook Inc.
Rep. Marsha Blackburn (R-Tenn.), who supported the repeal of the FCC law, has introduced the Balancing the Rights of Web Surfers Equally and Responsibly (BROWSER) Act ( H.R. 2520), which would set user consent standards for ISPs and edge providers.
The billl, which has four GOP cosponsors and has been referred to the House Energy and Commerce Committee, on which Blackburn sits, would allow opt-out mechanisms for “non-sensitive” data but require an opt-in mechanism for “sensitive” data, including financial, health, and geolocation data, and web-browsing history.
Jeff Chester, executive director of the consumer advocacy group the Center for Digital Democracy, told Bloomberg BNA that ISPs are investing heavily in big data analytics projects that seek to monetize information about their customers.
“ISPs are already doing this, but the killing of the FCC privacy rule now means there are no constraints for full blown big data ISP eavesdropping on the public,” Chester said.
Chester pointed to big data research projects, including Verizon’s Smartplay, Comcast’s big data research teams, and AT&T’s Consumer Insights Platform, as ways companies are monetizing consumer data.
Ernesto O. Falcon, legal counsel for the privacy advocacy group the Electronic Frontier Foundation told Bloomberg BNA that there is “clear intent” by the largest ISPs to track what websites customers visit and “leverage that information into something profitable.”
Comcast responded to Blomberg BNA’s request for comment on their use of consumer information by referring to a blog post by Chief Privacy Officer Gerard Lewis, who wrote, “At Comcast, we respect and protect our customers’ personal information. Always have, always will. We do not sell our broadband customers’ individual web browsing history. We did not do it before the FCC’s rules were adopted, and we have no plans to do so.”
Michael F. Balmoris, assistant vice president at AT&T and a former spokesman for the FCC, told Bloomberg BNA that the ISP “has always said consumers expect their online data to be protected by a comprehensive and uniform privacy framework that applies across the entire Internet ecosystem and includes operating systems, browsers, devices, ISPs, apps, online services, and advertising networks.” AT&T supports the BROWSER Act bill, he said.
Verizon didn’t respond to Bloomberg BNA’s requests for comment.
To contact the reporter on this story: Aaron Nicodemus in Boston at email@example.com
To contact the editor responsible for this story: Donald Aplin at firstname.lastname@example.org
Copyright © 2017 The Bureau of National Affairs, Inc. All Rights Reserved.
All Bloomberg BNA treatises are available on standing order, which ensures you will always receive the most current edition of the book or supplement of the title you have ordered from Bloomberg BNA’s book division. As soon as a new supplement or edition is published (usually annually) for a title you’ve previously purchased and requested to be placed on standing order, we’ll ship it to you to review for 30 days without any obligation. During this period, you can either (a) honor the invoice and receive a 5% discount (in addition to any other discounts you may qualify for) off the then-current price of the update, plus shipping and handling or (b) return the book(s), in which case, your invoice will be cancelled upon receipt of the book(s). Call us for a prepaid UPS label for your return. It’s as simple and easy as that. Most importantly, standing orders mean you will never have to worry about the timeliness of the information you’re relying on. And, you may discontinue standing orders at any time by contacting us at 1.800.960.1220 or by sending an email to email@example.com.
Put me on standing order at a 5% discount off list price of all future updates, in addition to any other discounts I may quality for. (Returnable within 30 days.)
Notify me when updates are available (No standing order will be created).
This Bloomberg BNA report is available on standing order, which ensures you will all receive the latest edition. This report is updated annually and we will send you the latest edition once it has been published. By signing up for standing order you will never have to worry about the timeliness of the information you need. And, you may discontinue standing orders at any time by contacting us at 1.800.372.1033, option 5, or by sending us an email to firstname.lastname@example.org.
Put me on standing order
Notify me when new releases are available (no standing order will be created)