A Home Office report last month suggested , however , that the service was legal , concluding that " targeted online advertising services " that were undertaken " with the highest regard for the privacy of ISPs ' users " were legitimate as long as an ISP first requested the user 's consent .