I agree. I'm also glad they specified "opt-in" consent and not "opt-out." They can't start collecting your data without your prior knowledge and authorization. This is a good thing.
Next step would be to disallow hijacking and data insertion into your stream of data. It would be a step towards cementing ISPs role as a dumb carrier of data.