Isn't that still the case? I thought this bill would only let ISPs sell aggregated anonymized data. Something like: 60% of our customers use Google, 10% visit CNN.com, etc.
The difference is whether they sell those statistics (as market research) or whether they sell the ability to reach those groups (in which case they're hanging on to the de-anonymized data anyway)
