Skip to main content

You have just hours to stop Congress from giving away your web browsing history

You have just hours to stop Congress from giving away your web browsing history


Time to make some calls

Share this story

Last week, on a party-line vote, the Senate voted to repeal the Federal Communications Commission’s 2016 broadband privacy rules giving consumers the power to choose how their ISPs use and share their personal data. Today, the House of Representatives will vote, and if the House also votes to repeal the rules, the bill will go to President Trump, who is expected to sign it.

The consequences of repeal are simple: ISPs like Comcast, AT&T, and Charter will be free to sell your personal information to the highest bidder without your permission — and no one will be able to protect you. The Federal Trade Commission has no legal authority to oversee ISP practices, and the bill under consideration ensures that the FCC cannot adopt “substantially similar” rules. So unless the bill fails in the House, the nation’s strongest privacy protections will not only be eliminated, they cannot be revived by the FCC.

What the rules do

The Telecommunications Act of 1996 requires a “telecommunications carrier” to protect the privacy of their customers’ personal information. Customers of the telephone network have long had their personal information protected under strong FCC rules. When the FCC classified broadband internet access service as a telecommunications service as part of its 2015 net neutrality decision, it applied these privacy protections to ISPs as well.

unless the bill fails in the House, the nation’s strongest privacy protections will be eliminated and the FCC cannot revive them

Among other things, the FCC’s broadband privacy rules protect your personal information in four critical ways. ISPs are required to:

  • Tell customers about what types of information they collect, how they use that information, and with whom they share that information
  • Obtain affirmative permission (opt in) from customers to use and share sensitive information like financial and health information, Social Security numbers, web browsing, and application usage history. For non-sensitive information, customers must be allowed to opt out of use and sharing of that information at any time and with minimum effort
  • Take reasonable measures to keep customers’ data secure
  • Give customers timely notice of data breaches, and in the event of a larger breach, give notice to law enforcement officials.

In crafting these rules, the FCC borrowed generously from the privacy and data security enforcement standards of the FTC. But there’s a very important difference between the FTC’s enforcement powers and preventative FCC rules: the FCC’s rules have the power to protect consumers before they are harmed, while the FTC’s rules moderate industry behavior and give consumers the ability to enforce their rights after harm occurs. Harms from unauthorized and illegal use of personal information can be economic, social, and sometimes even physical.  

The rules serve as a baseline for the entire internet ecosystem

Broadband ISPs and their friends in Congress say that the FCC’s rules must fall because it is somehow unfair to subject ISPs to different privacy rules than so-called “edge” companies like Google and Facebook. But ISPs hold a unique position in the internet ecosystem: they have access to everything you do online. They know every website you visit, how long and during what hours of the day you visit websites, your location, and what device you are using. Edge companies, on the other hand, only see a small portion of any given consumer’s internet traffic.  

You can decide you’re fed up with Google and use another search engine; it’s much harder to do that with your ISP

There are other important differences between ISPs and edge companies. ISPs charge handsomely for their services, while most edge companies’ services are free, creating very different consumer expectations with regard to collection and use of data. Moreover, consumers can easily choose whether or not to use a particular edge provider and thus reveal information. By contrast, even in the instances where a consumer has a choice of broadband providers (and Americans in 78 percent of census blocks do not, according to a recent FCC report), high switching costs make changing providers a very unattractive option. You can decide you’re fed up with Google’s data policies and use another search engine easily; it’s much harder to do that with your ISP.

Despite these differences, I agree that one set of privacy rules for the internet ecosystem might be desirable. But why is Congress’ response to this alleged unlevel playing field removing the strongest privacy rules protecting consumers today?

As then-FCC chairman Tom Wheeler recognized when the privacy rules were adopted, the FCC does not have the legal power to regulate edge companies. But Congress has that power. Instead of repealing the only broadband privacy protections consumers currently have, Congress should instead pass a law requiring edge providers to meet the higher FCC standard that affords consumers more protection.

What you can do

The fight over the FCC’s broadband privacy rules is not over. The House votes today, and as we saw with last week’s attempt at repealing the Affordable Care Act, when Americans tell their Representatives that they don’t want them to take away their hard-won protections, the House will listen. Color of Change, the Electronic Frontier Foundation, and Free Press have simple ways for you to tell your Representative what you think of the FCC’s rules and Congress’ efforts to eliminate them.

Gigi Sohn served as counselor to former FCC chairman Tom Wheeler from November 2013 to December 2016.

Today’s Storystream

Feed refreshed Two hours ago Not just you

Thomas RickerTwo hours ago
Table breaks before Apple Watch Ultra’s sapphire glass.

”It’s the most rugged and capable Apple Watch yet,” said Apple at the launch of the Apple Watch Ultra (read The Verge review here). YouTuber TechRax put that claim to the test with a series of drop, scratch, and hammer tests. Takeaways: the titanium case will scratch with enough abuse, and that flat sapphire front crystal is tough — tougher than the table which cracks before the Ultra fails — but not indestructible.

Emma RothSep 25
Rihanna’s headlining the Super Bowl Halftime Show.

Apple Music’s set to sponsor the Halftime Show next February, and it’s starting out strong with a performance from Rihanna. I honestly can’t remember which company sponsored the Halftime Show before Pepsi, so it’ll be nice to see how Apple handles the show for Super Bowl LVII.

Emma RothSep 25
Starlink is growing.

The Elon Musk-owned satellite internet service, which covers all seven continents including Antarctica, has now made over 1 million user terminals. Musk has big plans for the service, which he hopes to expand to cruise ships, planes, and even school buses.

Musk recently said he’ll sidestep sanctions to activate the service in Iran, where the government put restrictions on communications due to mass protests. He followed through on his promise to bring Starlink to Ukraine at the start of Russia’s invasion, so we’ll have to wait and see if he manages to bring the service to Iran as well.

External Link
Emma RothSep 25
We might not get another Apple event this year.

While Apple was initially expected to hold an event to launch its rumored M2-equipped Macs and iPads in October, Bloomberg’s Mark Gurman predicts Apple will announce its new devices in a series of press releases, website updates, and media briefings instead.

I know that it probably takes a lot of work to put these polished events together, but if Apple does pass on it this year, I will kind of miss vibing to the livestream’s music and seeing all the new products get presented.

Welcome to the new Verge

Revolutionizing the media with blog posts

Nilay PatelSep 13
External Link
Emma RothSep 24
California Governor Gavin Newsom vetoes the state’s “BitLicense” law.

The bill, called the Digital Financial Assets Law, would establish a regulatory framework for companies that transact with cryptocurrency in the state, similar to New York’s BitLicense system. In a statement, Newsom says it’s “premature to lock a licensing structure” and that implementing such a program is a “costly undertaking:”

A more flexible approach is needed to ensure regulatory oversight can keep up with rapidly evolving technology and use cases, and is tailored with the proper tools to address trends and mitigate consumer harm.

Andrew WebsterSep 24
Look at this Thing.

At its Tudum event today, Netflix showed off a new clip from the Tim Burton series Wednesday, which focused on a very important character: the sentient hand known as Thing. The full series starts streaming on November 23rd.

The Verge
Andrew WebsterSep 24
Get ready for some Netflix news.

At 1PM ET today Netflix is streaming its second annual Tudum event, where you can expect to hear news about and see trailers from its biggest franchises, including The Witcher and Bridgerton. I’ll be covering the event live alongside my colleague Charles Pulliam-Moore, and you can also watch along at the link below. There will be lots of expected names during the stream, but I have my fingers crossed for a new season of Hemlock Grove.