I'm glad that in the EU, GDPR would make it illegal for ISPs to sell this kind of data (and culture would make it costly beyond just the cost of the fine).
Y'all need not just GDPR, but a variant of it that comes with criminal penalties as well. Right now, if illegal behavior increases profit by more than 4% of your company's revenue, just doing it for as long as you can get away with it then paying the fine is unfortunately a no-brainer for companies.
> I'm glad that in the EU, GDPR would make it illegal for ISPs to sell this kind of data
As much as I wish this were true, they carved out exemptions for themselves and their own goals. As such, GDPR doesn't apply to abuses of data for "law enforcement" purposes or other government operations.
Y'all need not just GDPR, but a variant of it that comes with criminal penalties as well. Right now, if illegal behavior increases profit by more than 4% of your company's revenue, just doing it for as long as you can get away with it then paying the fine is unfortunately a no-brainer for companies.