4 ms·

I wonder which kind of data it actually applies to though.

• kuschku 9y ago
  All and any. That includes IP addresses (just connecting to a socket without a user explicitly starting that action), names, emails, hashed IPs, it includes usernames, CC data, messages, interactions with webpages. Anything that in any way is connected to a person is covered by this. This directive is also the origin of the cookie disclaimers, which require opt-in before collecting statistics or loading any third party tracking solution.
  • yuhong 9y ago
    Does it only require permission if the IP address is being stored?
    • deleted 9y ago
      [deleted]
    • kuschku 9y ago
      Read this comment, it cites the relevant laws for Germany: https://news.ycombinator.com/item?id=15072474 https://news.ycombinator.com/item?id=15072474 But be aware, in May 2018 it all changes as the new EU GDPR comes into force, and that’s a bit more restrictive (and even applies to anyone processing or storing data of EU citizen, no matter where the processing entity is located)