FCC's Proposed Data Privacy and Security Rulemaking for Broadband Internet Access Providers

Having taken on BIAS, the commission needed to address that the FCC's privacy and data protection regulatory scheme was designed to address traditional telephone carriers, and the expanded jurisdiction necessitated refinement of the approach to address BIAS and the different kinds of data involved between data services and telephonic services. On March 31, 2015, the FCC issued a Notice of Proposed Rulemaking (NPRM) in proceeding 16-39 (In the Matter of Protecting the Privacy of Customers of Broadband and other Telephonic Services) for the privacy and data security regulatory scheme for ISPs, a copy of which is available here. In short, the proposal would create a very burdensome privacy protection scheme that applies to BIAS but to no other types of online services.

As a result, BIAS providers will have a much more difficult time providing interest-based advertising and other services that take advantage of big data, even if in doing so they can provide consumers lower-cost broadband. Much of the proposal calls for express opt-in consent to ancillary use and sharing of consumer data, but the Commission questions whether some practices like exchanging discounts for consent should be banned outright.