QuoteHere are the basics of the new rules:
ISPs need to get consent, somehow, from subscribers before using or selling their sensitive data — browsing history, app usage, location information, financial data — to third parties, like online advertisers.
ISPs do not need permission from subscribers to share non-sensitive information, which includes IP addresses, email addresses, service tiers or bandwidth usage. But internet providers must create a way for subscribers to opt out of sharing that information if they so chose.
The new rules don't require internet companies to gain consent to advertise other communications services they provide. So if Verizon wanted to market its home broadband service to a current mobile user, that would be fine. If Verizon wanted to share browsing data with other parts of the company that do not provide communications services, like Yahoo, it would have to get consent. And there's no requirement to provide a way to opt out of internal marketing.
http://www.recode.net/2016/10/28/13442880/internet-providers-fcc-permission-share-web-browsing-data-opt-in
Does this include the NSA? It seems to (barring a warrant).