Internet providers in the United States are now positioned to sell their customers' browsing histories, app usage, and other personal data without ever asking permission. On a 215 to 205 vote, the House of Representatives approved a resolution striking down privacy protections for broadband subscribers, following a nearly identical 50 to 48 vote in the Senate the week before. The measure needs only President Trump's signature to become law, and few expect him to withhold it.
The rules being erased were adopted by the Federal Communications Commission in October, under then-chairman Tom Wheeler and a Democratic majority, and were set to take effect in December. They would have required providers like Comcast, AT&T, and Verizon to obtain explicit, opt-in consent before sharing sensitive customer data with advertisers and other third parties. With those protections gone, providers can resume treating browsing activity as a commodity, bundling it into targeted advertising profiles sold to the highest bidder. The practical consequences of this shift have already been documented here by privacy researchers tracking how data brokers monetize connectivity logs once legal barriers disappear. documented here
Why Internet Providers Occupy a Different Position Than Other Platforms
Republican lawmakers defended the rollback by arguing that broadband providers should be regulated by the Federal Trade Commission rather than the FCC, and that the original rules created an unfair imbalance by holding providers to a stricter privacy standard than social networks or other online platforms. That argument glosses over a structural difference: a platform sees only the traffic a user chooses to send it, while an internet provider sees every site visited, every app opened, and every search made, regardless of which service is being used. That vantage point makes provider-level data uniquely comprehensive and uniquely sensitive, covering everything from medical research to financial habits to political reading.
What Happens to Consumer Options Now
Nancy Pelosi, the House Democratic leader, pointed out that private browsing modes built into browsers offer no real protection against this kind of data collection, since they only prevent a local history from being stored on a device. They do nothing to stop the provider itself from logging and monetizing traffic at the network level. That distinction matters because it narrows the realistic options available to someone trying to limit what their provider can see. Tools that encrypt and route traffic through a separate server, commonly known as virtual private networks, are among the few consumer-facing methods that can meaningfully shield browsing activity from an internet provider, since the provider sees only encrypted traffic heading to a single endpoint rather than the sites actually being visited.
A Broader Pattern of Deregulation
The privacy rollback does not stand alone. It arrives alongside a push by FCC chairman Ajit Pai, a former Verizon lawyer, to dismantle net neutrality protections by eliminating the "common carrier" classification that currently governs broadband providers. Representative Michael Capuano of Massachusetts captured the stakes plainly, asking Republicans to explain why a company like Comcast should have any legitimate reason to know about his mother's health conditions. Without a clear answer to that question, and without federal legislation to replace what was just removed, American consumers are left with fewer legal protections and a growing incentive to look for technical ones instead.