3 ms·
The GDPR doesn’t say anything about encryption or IP addresses. The ICO has said that if you have a breech that encryption would protect against them that coul
by geocar 9y ago
The GDPR doesn’t say anything about encryption or IP addresses.
The ICO has said that if you have a breech that encryption would protect against them that could be a violation: https://ico.org.uk/for-organisations/guide-to-data-protection/encryption/ https://ico.org.uk/for-organisations/guide-to-data-protectio...
- the_mitsuhiko 9y agoThe gdpr does mention encryption and pseudonymisation. It does not mention ip adresses because the law is very clear about anything being in scope that can be used to identify individuals.
- geocar 9y agoYou’re right. I should have said the GDPR doesn’t require encryption. I blame wee hours commenting. And an IP address cannot always be used to identify individuals.
- the_mitsuhiko 9y agoThat’s why ips are not directly listed in the law.