On April 1, the Federal Communications Commission issued a notice of proposed rulemaking (“NPRM”) that would require Internet service providers (“ISPs”) to clearly disclose how customer data is being used, take reasonable steps to protect that information, and notify affected customers within 10 days of discovering a data breach. The NPRM — formally approved by