You may have heard that recently, a bill was passed repealing internet privacy rules and allowing companies to sell internet browsing histories of their customers. That can seem pretty scary. Here’s everything you need to know about Internet Service Providers’ ability to sell your browsing data.

In 2016, the Federal Communications Commission proposed rules to protect the privacy of Internet users nationwide. One of the key rules included required consent from customers when their information was sold to third-party entities; you had to opt-in and consciously allow data collection by ISPs. However, on Monday a bill was signed into effect repealing those rules—which means, generally speaking, if big ISP companies wanted to sell your browsing history, they can.

(It’s important to note that websites like Facebook and Google don’t fall under the same rules, and are therefore not required to get consumer permission, and they do track data)

So What's the Reality of the Situation?

Data tracking is a practice done by websites and ISPs that allows your internet activity to be monitored so that ads on your websites can be tailored to you. Third parties can use this data to determine what your interests are, what you spend time looking for and where/when you look for it--this helps them market specifically to you. In 11 countries, 75% of survey respondents, when asked, stated that they were aware this happened; and 68% said they would opt-out if given a clear do-not-track option.

Here’s the deal. The rules laid out in 2016 haven’t gone into effect yet; so technically, nothing has really changed. Many companies, like Comcast and Verizon, stepped out and publicly announced that they had not and don’t plan on selling browsing history of their consumers. Other companies, like AT&T, focused more on the idea that nothing had changed and the bill was nothing to be up in arms about.

Realistically, it’s likely that consumers would still maintain their ability to opt out of data tracking and sharing, but the means of doing so may be costly, complicated, or not well advertised. This bill does raise awareness and concern about internet privacy rights, however.

Is This Really a Problem Then?

While ISPs would have you think otherwise, there are two major downsides to repealing the FCC rules. ISPs have, in the past, practiced some pretty questionable data tracking habits, going so far as to recording your URL visits and intercepting your searches to advertise companies who had paid your ISP more to be more prominent in relevant searches.

It's also a question of personal and cyber security. Adware and tracking software used by companies whose ads show up on your feed can have loopholes that make it easier for hackers to access your information. On top of that, large databases of consumer data can be a huge target for hackers, which leads us to wonder--is our information really safe?