On a related subject, does the bill specify audit and logging requirements for ISPs? I would at least like to know that the bits of data that are turning people into criminals are treated with the same respect as credit card information. Also, it seems to me that it would make a profitable business to setup an premium ISP advertising that they keep the minimal records required under law.

Could this also apply to someone running a Tor node on their network?