I wonder if a case could be made for the idea that the actual data belongs, not to the isps, but to the people doing the surfing, ie, you and me. The fact the isps collect the data is neither here nor there; the data is a record of our own activity and surely belongs to us? If I paint a portrait it belongs to me and not to the person who photographs it.