"It's this gatekeeper role that gives ISPs access to a vast amount of private data about their customers, and creates a substantial potential for abuse."
In fact it's much worse than just ISP's having access. Many others also have access as well. Google, Facebook, Krogers, Target, and scores of others gather data on us as individuals 24/7. Few are aware that the Google Streetcar that ostensibly drives around photographing for Google Earth, is instead gathering data (pictures, contact lists, passwords, emails, buying habits, etc) from the houses it passes. Google admitted such in court and was fined $28 million. Which is a drop in the bucket when considering that the profits from the sales of our data is worth billions per year to Google. Ever wonder why you don't get a bill from Facebook or Google? It's because we're their product not their customers.
Why is it that any data generated by a corporation is covered under copyright laws but data generated by us as individuals isn't? Maybe it's time to pass legislation that requires corporations to pay us for the data we generate.
It isn't just ISP's that need to be regulated regarding personal data. It's the entire structure of corporate data mining that, as the report points out, is entirely unregulated and in woeful need of improved cyber security. What's going down now is essentially equivalent to the Gold Rush but it's happening under the radar. Yesterday's gold is today's data. Our modern day Rockefellers are the Zuckerbergs and Gates. And we're all vulnerable to the consequences.