Surveillance law will force companies to retain customers' web surfing history

New law also puts bulk data collection and hacking by law enforcement on clear legal footing - but the stance on encryption remains unclear.