But it's so fecking cheeky. If they're going to do that fine, make it clear to all your customers and if it pisses them off then they can make the decision to find another ISP.
And that's exactly why they didn't mention it.
Not to mention of course the invasion of privacy. If it's for police investigations that's a different matter, though I would probably think they still sell this data.