The FCC released a proposed set of privacy and data security rules for ISPs that go well beyond requirements found in other industries, exposing them to increased regulatory and legal exposure.
Link to site with written statements and video of Senate Commerce Committee hearing: Consumer Data Privacy: Examining Lessons Learned from the European Union's GDPR and CA's CCPA