Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
The Courts Privacy The Internet Your Rights Online

ISPs Sue Maine, Claim Web-Privacy Law Violates Their Free-Speech Rights (arstechnica.com) 126

An anonymous reader quotes a report from Ars Technica: The broadband industry is suing Maine to stop a Web-browsing privacy law similar to the one killed by Congress and President Donald Trump in 2017. Industry groups claim the state law violates First Amendment protections on free speech and the Supremacy Clause of the US Constitution. The Maine law was signed by Democratic Gov. Janet Mills in June 2019 and is scheduled to take effect on July 1, 2020. It requires ISPs to get customers' opt-in consent before using or sharing sensitive data. As Mills' announcement in June said, the state law "prohibits a provider of broadband Internet access service from using, disclosing, selling, or permitting access to customer personal information unless the customer expressly consents to that use, disclosure, sale or access. The legislation also prohibits a provider from refusing to serve a customer, charging a customer a penalty or offering a customer a discount if the customer does or does not consent to the use, disclosure, sale or access of their personal information."

Customer data protected by this law includes Web-browsing history, application-usage history, precise geolocation data, the content of customers' communications, IP addresses, device identifiers, financial and health information, and personal details used for billing. Home Internet providers and wireless carriers don't want to seek customer permission before using Web-browsing histories and similar data for advertising or other purposes. On Friday, the four major lobby groups representing the cable, telco, and wireless industries sued the state in US District Court for the District of Maine, seeking an injunction that would prevent enforcement of the law.
In the lawsuit, the groups said the state law "imposes unprecedented and unduly burdensome restrictions on ISPs', and only ISPs', protected speech," while imposing no requirements on other companies that deliver services over the internet. The plaintiffs are America's Communications Association, CTIA, NCTA, and USTelecom.

The law allegedly violates the First Amendment because it "limits ISPs from advertising or marketing non-communications-related services to their customers; and prohibits ISPs from offering price discounts, rewards in loyalty programs, or other cost-saving benefits in exchange for a customer's consent to use their personal information," the lawsuit claims. As for how the Maine law violates the Supremacy Clause, the lawsuit says it's "because it allows consumers to dictate (by opting out or declining to opt in) when ISPs can use or disclose information that they must rely on to comply with federal law, rendering 'compliance with both' state and the foregoing federal laws 'impossible.'"
This discussion has been archived. No new comments can be posted.

ISPs Sue Maine, Claim Web-Privacy Law Violates Their Free-Speech Rights

Comments Filter:
  • by Strill ( 6019874 ) on Tuesday February 18, 2020 @06:08PM (#59740880)

    We need a constitutional amendment to protect personal information.

    • by Penguinisto ( 415985 ) on Tuesday February 18, 2020 @06:23PM (#59740940) Journal

      Maybe stick it somewhere between the 3rd and 5th amendments? Seems like a good place to put it...

    • by Dracos ( 107777 )

      The ISPs are essentially arguing that doxxing is legal.

      • The ISPs are essentially arguing that doxxing is legal.

        Doxxing is the publication of information with the intent to harass and intimidate.

        The publication is not illegal, only the harassment and intimidation.

        ISPs are not doxxers.

        • How do you think I feel about constant unwanted advertising, and its intended goal?

          • How do you think I feel about constant unwanted advertising, and its intended goal?

            It is not about how you feel. It is about the intent of the accused.

            "Communicating a threat" is a mens rea offense. The prosecutor is required to show that the accused intended it to be a threat.

            Mens rea [wikipedia.org]

    • by MightyMartian ( 840721 ) on Tuesday February 18, 2020 @06:32PM (#59740996) Journal

      I don't think any amendment is required at all. Protecting the privacy of consumers is clearly within the powers of Congress and the States, and this legal challenge is obviously absurd. There are similar laws on the books binding insurance companies, banks and numerous other industries that collect personal information, so I hope the state tells the ISPs to find the nearest bridge to jump off.

      • by RazorSharp ( 1418697 ) on Tuesday February 18, 2020 @07:04PM (#59741104)

        As long as judges continue to interpret corporations as entities entitled to the same Constitutional protections as actual humans, we're always in danger of lawsuits like this succeeding. We need to have some amendment that clearly lays out the limitations of corporate freedoms.

        • by Sebby ( 238625 )

          We need to have some amendment that clearly lays out the limitations of corporate freedoms.

          Or, when those corporations break the law, they "go to jail", like real people do. That means:

          • - They don't get to take in any revenue for the length of their sentence
          • - They still need to meet their obligations (contractual duties, keep providing service to customers, keep paying employees and suppliers, pay their taxes, dividends, rents, etc.)
          • - Failing the above, suffer the same repercussions as ordinary people would get (assets seized and sold as necessary, etc).
          • Or, at the very least, the company's Board of Directors stands in for the "company as a person" when it comes to jail time and asset seizure. That would make the leaders of companies wary of breaking the law since their own necks would be on the line.

        • As long as judges continue to interpret corporations as entities entitled to the same Constitutional protections as actual humans, we're always in danger of lawsuits like this succeeding. We need to have some amendment that clearly lays out the limitations of corporate freedoms.

          That not the only obstacle in this case. The court also has to interpret stalking as speech.

        • Which would be a limitation on individual freedoms, because corporations are just groups of individuals working together for a common purpose. This itself is protected by the "free association" clause of the 1st Amendment.
          • Which would be a limitation on individual freedoms, because corporations are just groups of individuals working together for a common purpose. This itself is protected by the "free association" clause of the 1st Amendment.

            No they are not. Corporation are specific inventions that has specific rights independently of the group of individuals. One of those key rights the corporate veil that means investors are not liable for the crimes of their investments, which they would be if they acted as a non incorporated group of people. That whole issue with it being free from criminal repercusions puts corporations in a COMPLETELY different category. And no they are not group of people... not unless you want to go to jail for your pen

            • If that's what you think, just read the damn Wikipedia page. The first line provides a real definition, and it does not resemble yours.
    • This is already illegal. The people enforcing our laws are just stupid.

    • by suutar ( 1860506 )

      Just declare that for ISPs the free speech zone is /dev/null

    • by Sebby ( 238625 )

      Corporate privacy invasion

      I simply call them "Privacy Rapists" - fits much better.

    • So why are ISPs being held to a different standard than Google, or for that matter Home Depot?

  • ... in fighting for us all!
  • I probably read it wrong my first skim through, but the impression I got was the ISP had issue with not being able to use customer data without their permission. But clicking the link and skimming through there, it seems like the issue is that not all businesses are being treated the same. What I took from it was something to the effect of.... Why can companies like Google do this, but not us ISPs?

    I mean couldn't the outcome of this end up being a broader law that would be inclusive of these services, and

    • by jemmyw ( 624065 )
      I guess you could argue that you require an internet connection to access government and private services, whereas you don't need google to access those services, it's just an add-on. Therefore, if all ISPs are abusing personal information you don't have any choice.
    • The difference is that you don't have to use Facebook or Google. They are fundamentally opt-in. If you don't want social media and search companies using your personal information, then you can simply not use them (and in some cases these online companies have at least some limited degree of opt out). With an actual ISP, basically they've got all your data flowing through their networks. Their ability to gather your personal information is right down at the low level network level, and in many cases, you've

      • by Strill ( 6019874 ) on Tuesday February 18, 2020 @06:39PM (#59741032)

        The difference is that you don't have to use Facebook or Google. They are fundamentally opt-in. If you don't want social media and search companies using your personal information, then you can simply not use them

        Google is not opt-in. It's opt-out. The vast majority of websites are tied to Google through Google AdSense, and are tracking you without your knowledge or consent. You have to go out of your way to download software that blocks these trackers.

        • by dryeo ( 100693 )

          But it is possible and there are lots of howtos on how to block Google etc with some browsers doing it automatically. I have one choice for an ISP and having access to the internet is becoming a requirement to function in society.

        • The difference is that you don't have to use Facebook or Google. They are fundamentally opt-in. If you don't want social media and search companies using your personal information, then you can simply not use them

          Google is not opt-in. It's opt-out. The vast majority of websites are tied to Google through Google AdSense, and are tracking you without your knowledge or consent. You have to go out of your way to download software that blocks these trackers.

          Except to EU citizens who are now asked on every other page to opt-in.

          Would be less annoying if they didn't keep asking again every month to confirm the opt-in, and changing your saved preferences so you have to review them again each time.

    • by ahodgson ( 74077 )

      You can choose not to use Google (I mean, not really, but you can at least try).

      You need an ISP.

      • getting google to stop using you is much, much harder.

        • by ahodgson ( 74077 )

          Yeah there's a ton of trackers to block. Plus never use Android or Chrome. good luck w/that.

          • by Cyberax ( 705495 )
            And you need to painstalkingly block them one by one, maintaining black lists yourself. There are no packaged plugins that do this for you. None at all.
        • by dryeo ( 100693 )

          Harder then moving to a different country to find an ISP who doesn't spy on you?

    • by Rhipf ( 525263 )

      I think one of the biggest reasons that this only applies to the ISPs is that it is easier to claim that the ISPs are local and the likes of Google are inter-state transactions. The state can regulate local ISPs but don't have the jurisdiction to regulate inter-state transactions like Google.

      I realize that most of the ISPs would be multi-state corporations but since the actual transaction between the subscriber and the ISP is local it could be considered a local company (for the purposes of this bill). That

    • Better question is.. why is this only in Maine, and only limited to ISPS?

      It should be a nationwide thing, across the board.

      Personal/identifiable information should not be a goddamn commodity.

      • by Anonymous Coward

        Not gonna happen with the current dotard in office.

        Also not gonna happen with the center-right Democrats currently running.

        Vote Bernie. It's our only hope.

        • "Vote Bernie. It's our only hope." Bernie has zero chance of winning the general election. Nominating Bernie is essentially conceding. The way to beat an extremist is not to nominate an extremist of your own, it's to nominate someone who will pull swing votes from the center.
  • by bobstreo ( 1320787 ) on Tuesday February 18, 2020 @06:16PM (#59740910)

    was protected under the First Amendment.

    It shouldn't be opt out. The default should be "DO NOT SHARE MY INFORMATION WITH ANYTHING OR ANYONE!"

    I wonder what this law means for Windows telemetry? It's not an ISP, but...

    • by Falos ( 2905315 )

      They seem to be trying to argue for opt-in, but that's a laugh. I imagine that's what the law was protecting against in the first place, when pointedly locking it out.

      "Give us the waiver or we won't give you the 'discount' everyone gets" my ass. I wouldn't be surprised if economists have a formal term for pretending to have substance in negative space.

    • by bws111 ( 1216812 )

      I doubt that they are claiming spam is protected, more likely they are (correctly) concerned with the 'you may not offer' bits. What other businesses have THAT restriction?

      • by suutar ( 1860506 )

        "You can't bribe folks to get them to do what you want"? Lots of businesses forbid that.

      • by Anonymous Coward

        It is needed because the ISPs are frequently in a local monopoly and will undoubtedly use that to force a waiver. The requirement is a result of continuous avarice and underhanded methods employed by the ISPs, which is what put them in this position in the first. They have no one to blame other than themselves for this.
        Google will hopefully get their slap in the face just as Facebook and any other integrity-slurping entity.

      • Re: (Score:3, Informative)

        by bobstreo ( 1320787 )

        I doubt that they are claiming spam is protected, more likely they are (correctly) concerned with the 'you may not offer' bits. What other businesses have THAT restriction?

        It said in the summary:

        The law allegedly violates the First Amendment because it "limits ISPs from advertising or marketing non-communications-related services to their customers; and prohibits ISPs from offering price discounts, rewards in loyalty programs, or other cost-saving benefits in exchange for a customer's consent to use their personal information," the lawsuit claims.

        • The Web privacy does not limit their ability to deliver spam , advertising and similar unwanted stuff, what it does is limit their ability to gather the information from the person browsing :

          Prohibits a provider of broadband Internet access service from using, disclosing, selling, or permitting access to customer personal information unless the customer expressly consents to such, provides other exceptions under which a provider may use, disclose, sell, or permit access to customer personal information, pro

      • by dryeo ( 100693 )

        Banks, most parts of the medical industry, even the phone company. Imagine your phone rings or you make a call and have to listen to an advert, based on your previous phone calls that the phone company listened into. Same with the mail though I guess that is a public company though how many people would be happy with a private snail mail company opening their mail and adding targeted ads to it.

  • ... restrictions on ISPs', and only ISPs ...

    That's why Americans get SPAM and targeted advertising for their obese bellies, drug addictions and other medical ailments: Wait, they don't.

    It says much about corporate USA that they demand to monetize the existence of customers.

    ... they must rely on, to comply with federal law ...

    Federal law overrides state law as they well know, since it's why they can demand NDAs for their petty crimes.

    • That's why Americans get SPAM and targeted advertising for their obese bellies, drug addictions and other medical ailments: Wait, they don't.

      Wait, they DO!

      Tell you what, open up your browser and google "obese bellies, drug addictions and other medical ailments" And surprise, surprise, your search results for days will include weight loss programs, ads for drugs to address the searched-for ailment, and drug addiction recovery programs.

      • Whatever you do, don't google for shipping containers.

        Oh crap.

      • by Cederic ( 9623 )

        your search results for days will include weight loss programs, ads for drugs to address the searched-for ailment

        My search results won't as I won't be searching for them.

        As for these 'ads' you mention. What are they? Should I do something to enable them?

  • Copyright (Score:5, Interesting)

    by AK Marc ( 707885 ) on Tuesday February 18, 2020 @06:19PM (#59740920)
    Just like GPL was anti-copyright using copyright against copyright, we need a law that doesn't tell the ISPs what to do, but simply recognizes a human person as a copyrighted representation of a legal person, and assigns their name and likeness copyright, and copyrights all actions they do, like a web search or DNS query, and an ISP would be violating copyright to use that without permission.

    Point the megacorps at copyright law. They love it, so they'll respect privacy if the "private" information is "public, but copyrighted".

    It's the only way out of the mess we've gotten ourselves into. Privacy is rabidly opposed, as it's been equated to abortion, so you can't get a recognition of the Right to Privacy, because nearly half of the US will vote it down as sounding like something that could be used to protect against anti-abortion laws.

    You can't have privacy because anti-abortion zealots oppose it. So I see changes to how we copyright people will be the only way to get "privacy" back from our corporate overlords.
    • by deimtee ( 762122 )
      You don't need to do that. Simply legislate that any ISP that intercepts or makes use of any information flowing through their system is no longer a common carrier. Once a few customers start suing them for malware, and executives start going to jail for the CP crossing their networks, they will drop it pretty fast.
    • by mattr ( 78516 )

      This is bizarre and interesting. If you think about it, what would happen if a corporation was treated the same way that individuals are treated on the web? There would be some line past which information collection becomes corporate espionage, restraint of commerce, interference with copyright / licensing / trademark, etc. Lengthy contracts would ensue and it might become more difficult to force a company to sign their rights away in click agreements. Currently I think companies either ignore the issue or

      • by AK Marc ( 707885 )
        File a trademark on your name and birthdate. Copyright your home address and likeness. Then sue every corporation that uses them. I'm a "normal" enough looking guy, so I've seen my "public" face misappropriated, but I don't think anyone would do anything if I complained.
    • I so wish I had points. This needs to be a +5 something.

  • by NicknameUnavailable ( 4134147 ) on Tuesday February 18, 2020 @06:22PM (#59740938)
    Seriously? Corporations aren't people, they aren't even citizens, they're abstractions created by and sanctioned by the government. Their very existence and all of their rights are extensions of the government. The first amendment is to protect us from them, not them from anything. Corporations don't have first amendment rights, people do.
    • by beernutz ( 16190 )
      I am pretty sure corporations are recognized as having the same rights as a person. (not that i think that is a good thing) Also, i thought the first amendment was to protect us from Government. I dont think it says anything about corporations.
      • This is not true. For example, corporations can't vote. So corporations have the rights that a group of people should have.
      • Corporations are literally extensions of government. If corporate personhood were legitimate they'd be bankrupted any time they killed someone or ruined a person's life.
        • Only in the specific cases of corporations created directly by government (the Federal Reserve for example), territories incorporated by government, and territories incorporated as, or for the purpose of forming, governments.
    • They are registered with the government, not created by government. Unless you're talking about municipal corporations, like towns, counties, cities, and so forth. Though in that case, it's really more that a corporation is creating a government. Think of it this way - governments create driver's licenses, not driving, drivers, or cars; any of which could exist without government. Or churches, which are most definitely not created by the US government, but are typically incorporated.

      But here's the im

  • Wait, they want me to feel bad for these ISPs? The plaintiffs can, uhhh, [puts mouth on the microphone] go fuck themselves.
  • You don't 'free speech' it to anyone.

  • advertising or marketing non-communications-related services to their customers; and prohibits ISPs from offering price discounts, rewards in loyalty programs, or other cost-saving benefits in exchange for a customer's consent to use their personal information

    How is any of this speech? If it isn't speech then how does the first amendment apply?

    This is just as stupid as considering election donations free speech.

    • Re: (Score:3, Interesting)

      by Narcocide ( 102829 )

      Well, the sad fact of the matter is that it is completely legal to bring frivolous lawsuits into court if it can't be proven you are actually smart enough to know better.

    • It's just prohibiting them from contracting with customers on certain terms.

      They could still advertise or market it.
      It would be false advertising, and they could be sued for that, but that's their choice.
    • by dwywit ( 1109409 )

      It doesn't stop them "advertising or marketing non-communications-related services to their customers"

      It just means they can't use customer data to fine-tune or target the ads and services.

      It's a pretty stupid approach - if I've just bought a vacuum cleaner, I don't need to see ads for vacuum cleaners.

    • advertising or marketing non-communications-related services to their customers; and prohibits ISPs from offering price discounts, rewards in loyalty programs, or other cost-saving benefits in exchange for a customer's consent to use their personal information

      How is any of this speech? If it isn't speech then how does the first amendment apply?

      This is just as stupid as considering election donations free speech.

      When most donation goes to buy advertising, that's how it is speech. You have the right to mass produce speech, that's the freedom of the press in the first amendment. Kings would indeed control and outlaw printing presses as backdoor censorship.

      "You can say it, but you can't say it to millions", sorry, no.

      And this differs from this situation because what you list are the company trying to buy, from you, the right to sell your info. Why shouldn't the be able to at least make an offer?

  • by kenh ( 9056 )

    Q: When is a summary NOT a summary?

    A: When it's 3 paragraphs long!

  • All the food makers are arguing truth in labeling laws unfairly infringe on their rights to sell food laced with arsenic, lead and other poisons. The customers don't buy our products if we tell them it has arsenic, and the alternatives are so damned expensive it affects our profits. said their spokesman.
  • There is a simple maxim to judge this: Your rights end (Mr ISP) where my rights begin.

    Which is why they always push the envelope of where the individual's rights begin with bogus arguments, such as these, to profit from peoples information.

  • If they can't advertise, how will they ever get people to sign up for the monopolies they have over regional access to the internet? Oh wait, they have monopolies in most markets. Why the fuck are they advertising to their captive audience?
  • Murder is free speech! Corporations should be able to murder anybody! Anything else violates the First Amendment!
  • How the fuck is invading people's privacy so you can try to sell them shit 'freedom of speech'? Rhetorical question because it clearly isn't.

    We don't want to change our business model because it's TOO HARD for us and would make us do actual WORK, so we want everyone to shut the fuck up and let us go through their underwear drawer if we want to, and sell whatever information of yours we want to whoever we want because it make us money, and if you don't we'll hold our breath until we turn blue, then throw ourselves on the ground and have a hissy-fit like a 2 year old because we CAN. Waaah!

    That's what these fuckstains sound like.
    Bitch-slap the ISPs, tell them "FUCK NO", and threaten them with prosecution if they don't fucking cut it out.
    If your 'business model' amounts to 'fuck your customers over as much as you can if it makes you money' then you are a bunch of assholes.

  • "prohibits a provider of broadband Internet access service from using, disclosing, selling, or permitting access to customer personal information unless the customer expressly consents to that use, disclosure, sale or access. The legislation also prohibits a provider from refusing to serve a customer, charging a customer a penalty or offering a customer a discount if the customer does or does not consent to the use, disclosure, sale or access of their personal information." "

    I agree with first part that I
    • what you are missing is that isp's are natural monopolies, or in the best case there are a very limited number to choose from. The lawmakers correctly anticipate the next step for the isp's in rendering "consent" meaningless by making opting out impossible for all but the very rich.
    • by Pikoro ( 844299 )

      The part that you seem to be missing is that they could offer "opt-out" internet plans for $500/mo or opt-in for $50/mo. Hence the limit put into the bill to limit how they market their plans. Unless there were some specified "no more than a 5% price difference between opt-in and opt-out plans", the ISPs would price your privacy out of reach so you would have no choice but to opt-in.

  • We need a constitutional amendment to specify that companies are not people...
    that should solve a lot of issues.

    • No it won't. The Citizens United ruling was very clear -- it is the people in the corporations who retain their First Amendment rights, and not some right of the corporation itself-as-"corp"-oration. Congress may not strip rights as a cost of entry into Congressionally-defined groups -- The People take their rights with them.

Our OS who art in CPU, UNIX be thy name. Thy programs run, thy syscalls done, In kernel as it is in user!

Working...