It's no surprise that ISPs are aggressively pursuing new revenue streams, but UK ISP BT may have crossed the line. Two years ago it retained search records and information on some 18,000 users, without informing them first.