4 ms·
If you ever log an email address then logs contain PII, and are therefore in scope.
by web007 9y ago
If you ever log an email address then logs contain PII, and are therefore in scope.
- r00fus 9y agoSo why not log just username or transaction id?
- sobani 9y agoBecause usernames are PII under de GDPR too.
- r00fus 9y agoTrue, but hidden IDs like the row GUID of the user are not, are they? They should be considered more like pseudonymous data[1] as they're meaningless outside the dataset. [1] https://www.whitecase.com/publications/article/chapter-5-key-definitions-unlocking-eu-general-data-protection-regulation https://www.whitecase.com/publications/article/chapter-5-key...