<story><title>No privacy rules needed: ISPs say Web browsing isn’t “sensitive” data</title><url>https://arstechnica.com/tech-policy/2017/03/isps-say-your-web-browsing-and-app-usage-history-isnt-sensitive/</url></story><parent_chain></parent_chain><comment><author>shshhdhs</author><text>If I visit a healthcare information website, like webmd.com, and it&amp;#x27;s unencrypted, then my service provider knows my name, address, and health attributes. If they kept logs about my visit to those pages, would this be considered PHI under the context of HIPAA? If so, perhaps a lawsuit could force a judge to claim service provider logs are indeed sensitive.&lt;p&gt;Looking for other&amp;#x27;s thoughts...</text></comment>
<story><title>No privacy rules needed: ISPs say Web browsing isn’t “sensitive” data</title><url>https://arstechnica.com/tech-policy/2017/03/isps-say-your-web-browsing-and-app-usage-history-isnt-sensitive/</url></story><parent_chain></parent_chain><comment><author>jlgaddis</author><text>I work for an ISP and I can&amp;#x27;t imagine looking our customer&amp;#x27;s web browsing and such. The closest I come to that is Netflow data but (in our case) that&amp;#x27;s aggregated and doesn&amp;#x27;t identify specific customers.&lt;p&gt;&amp;gt; &lt;i&gt;&amp;quot;Web browsing and app usage history are not &amp;#x27;sensitive information,&amp;#x27;&amp;quot; CTIA said&lt;/i&gt;&lt;p&gt;I wonder if they might feel differently if someone hacked them or their ISP and posted a month&amp;#x27;s worth of traffic logs, etc., for the public to see.&lt;p&gt;Maybe if the Internet histories of a handful of the top-level folks at these organizations were shared with the world (along with their identities, of course), they would change their mind.</text></comment>