Don't have a moment to read your sources at the moment.

But weren't the protections only put into place last year because they weren't needed until then?

In other words, they were under the jurisdiction of the FTC previously, so this particular legislation a moot point, because the FTC could just say "hey, you can't do that. case closed."

Now because of the "common carrier exemption" I don't think that would hold up.

This was useful in some quick tidbits about FTC + FCC relationship, previous responsibilities, and current. https://www.ftc.gov/system/files/documents/public_statements...

Funny enough, they talk about how the FCC handles data/privacy breaches, and how they came down really hard on a minor breach that affected a few cox subscribers, nothing with payment data or even any actual damages.

This seemingly means that the FTC takes privacy seriously. But congress won't let them.