Is it just me, or does this level of data collection seem pretty concerning for an ISP? I'm aware that there are legal requirements for this type of data collection for law enforcement use, but sharing it with customers seems strange.
Besides that, these groupings seem strange. Why are applications/services, application and encryption protocols mixed here? With that level of granularity, "Pinterest" might easily be misclassified traffic of any other service sharing Pinterest's CDN.