WASHINGTON — Federal officials approved broad new privacy rules on Thursday that prevent companies like AT&T and Comcast from collecting and giving out digital information about individuals — such as the websites they visited and the apps they used — in a move that creates landmark protections for internet users.

By a 3-to-2 vote, the Federal Communications Commission clearly took the side of consumers. The new rules require broadband providers to obtain permission from subscribers to gather and give out data on their web browsing, app use, location and financial information. Currently, broadband providers can track users unless those individuals tell them to stop.

It was the first time the F.C.C. has passed such online protections. The agency made privacy rules for phones and cable television in the past, but high-speed internet providers, including AT&T and Verizon Communications, were not held to any privacy restrictions, even though those behemoth companies have arguably one of the most expansive views of the habits of web users.

The passage of the rules deal a blow to telecommunications and cable companies like AT&T and Comcast, which rely on such user data to serve sophisticated targeted advertising. The fallout may affect AT&T’s $85.4 billion bid for Time Warner, which was announced last week, because one of the stated ambitions of the blockbuster deal was to combine resources to move more forcefully into targeted advertising.