There’s been a lot of attention and questions about consumer privacy in recent days. At Comcast, we respect and protect our customers’ personal information. Always have, always will. We do not sell our broadband customers’ individual Web browsing history. We did not do it before the FCC’s rules were adopted, and we have no plans to do so.

Comcast has committed to privacy principles that are consistent with the FTC’s privacy regime, which has applied to all entities in the Internet ecosystem for over 20 years and which continues to apply to Internet edge companies like Google, Facebook, and Amazon. We believe this commitment is legally enforceable in multiple ways, including by state attorneys general.

There has been a lot of misleading talk about how the congressional action this week to overturn the regulatory overreach of the prior FCC will now permit us to sell sensitive customer data without customers’ knowledge or consent. This is just not true. In fact, we have committed not to share our customers’ sensitive information (such as banking, children’s and health information), unless we first obtain their affirmative, opt-in consent.

Our privacy commitments to our customers go even beyond this protection of sensitive information that has dominated the dialogue this week. If a customer does not want us to use other, non-sensitive data to send them targeted ads, we offer them the ability to opt out of receiving such targeted ads.

We also continue to comply with various federal laws protecting privacy, such as the Communications Act, the Children’s Online Privacy Protection Act, and the Electronic Communications Privacy Act, as well as dozens of state privacy and data-security laws.

In view of all the misinformation and inaccurate statements that have been made in the last week, we want to make sure that our customers understand how strong our privacy protections really are. So we will revise our privacy policy to make more clear and prominent that, contrary to the many inaccurate statements and reports, we do not sell our customers’ individual Web browsing information to third parties and that we do not share sensitive information unless our customers have affirmatively opted in to allow that to occur.

Gerard Lewis is the senior vice president, deputy general counsel and chief privacy officer for Comcast.

The new Congress is reportedly considering repealing the privacy rules that Tom Wheeler’s Federal Communications Commission put in place right before the presidential election. Proponents of the new rules are engaged in a furious public-relations campaign, claiming that consumers’ privacy will be violated left and right if the new rules are repealed. Frightening if true.

When it comes to using your data from Web browsing and app usage, the Federal Trade Commission has been the regulatory cop on the beat. Determined to be relevant in the digital economy, the FCC created its own, radically different set of privacy regulations targeting just Internet service providers. By requiring an ISP’s customers to give permission for their data to be used, the FCC’s new privacy rules subject ISPs to a different and more restrictive set of regulations than their online advertising rivals.

The difference in the rules — “opt-in” rules for ISPs versus “opt-out” rules for edge providers — has significant competitive implications in the online advertising market, which is dominated by Google and Facebook. The reason is that consumers typically elect the default choice out of laziness and respect for the status quo. By making it relatively easier for edge providers to access consumers’ data, the FCC has perversely impaired the ability of ISPs to compete for online advertisers.

Not what you’d expect from an FCC chairman who liked to chant “competition, competition, competition” as his raison d’etre.

Google and its minions are understandably upset Congress might upend this regulatory arbitrage, and they have come out swinging. A Feb. 20 blog post by the Electronic Frontier Foundation in defense of the FCC’s rules begins with a breathtaking subtitle: “Cable and telephone companies are pushing Congress to make it illegal for the federal government to protect online consumer privacy.”

Please. Even if the FCC’s new privacy rules are repealed, there are myriad layers of federal and state protection for consumers. None are mentioned in EFF’s blog.

Where to begin? At the federal level, the FCC has authority under section 222 of the Communications Act to prevent privacy abuses by telephone providers. Section 222 was originally designed to prevent traditional telephone companies from giving their wireless subsidiaries an unfair advantage over unaffiliated wireless companies by sharing customer information with them.

Not content with section 222? Repeal of the FCC’s new privacy rules will not prevent the FCC from establishing a different privacy regime going forward. For example, in the name of regulatory symmetry, the new FCC could replicate the same opt-out standard used by the Federal Trade Commission.

Perhaps anticipating this rejoinder, EFF claims without citation to any case law or precedent that the mechanism being considered by Congress to repeal the FCC’s privacy rules “could possibly bar the FCC from enacting future consumer privacy rules even if they are more industry friendly.” Adding “possibly” after “could” seems redundant, unless there is simply no basis for making such a claim. (I’m anxious to be corrected.)

Moreover, repeal of the FCC’s privacy rules will not prevent Congress from establishing a different privacy regime going forward. To the extent that Congress repeals both the FCC’s 2015 Open Internet Order and its privacy rules, the FTC would be placed firmly back in control of privacy enforcement for ISPs. Before the FCC’s reclassification of ISPs as common carriers in March 2015 took away the FTC’s authority, the FTC was the primary privacy cop on the beat for ISPs. For example, in 2014, the FTC sanctioned AT&T Mobility for its alleged failure to adequately inform its customers of its data-throttling program.

EFF has argued that a recent 9th U.S. Circuit Court of Appeals decision stripped the FTC of its “authority to penalize cable and telephone companies if they deceive their customers, meaning the FCC is the only broadband consumer protection agency.” But Congress could eliminate the FTC’s common-carrier exception, assuming the GOP majority could convince eight Democratic senators to overcome the filibuster rule. This would also return privacy enforcement to the FTC.

Moving beyond federal protections, several states add yet another layer of protection against potential privacy abuses by ISPs. For example, Nevada and Minnesota require ISPs to keep private certain information concerning their customers, unless the customer gives permission to disclose it. And under California law, non-financial businesses, including ISPs, are required to disclose to customers, in writing or by email, the types of personal information sold to a third party for direct marketing purposes.

If and when the FCC’s new privacy rules are overruled, the statute that empowers the agency to police privacy abuses by ISPs will still apply. And nothing prevents the FCC from designing a different (and more symmetric) regulatory standard.

Repeal of the FCC’s new rules will simply restore the regulatory environment that existed for more than 18 months between its reclassification decision and its privacy rules. Given the myriad layers of protections and regulatory options, the notion that repeal would leave the ISPs without any privacy regulator is patently false.

Hal J. Singer is a principal at Economists Incorporated and a senior fellow at the Progressive Policy Institute, and has served as an adjunct professor at Georgetown’s McDonough School of Business.