If I remember correctly, my ISP said they have only automated systems in place for monitoring ddos attacks and some other forms of attacks coming from their customers. But in other cases they are not responsible or even have the right to monitor the security of customer's devices and their traffic.
With (personal) info I meant e.g. personal notes I keep on my desktop which I have not shown to anyone and personal pictures.