> IP addresses aren't PII. I personally think so, but everything I've read about GDPR says they usually now are considered in scope. Deleting comments is non-

> IP addresses aren't PII. I personally think so, but everything I've read about GDPR says they usually now are considered in scope. Deleting comments is non-trivial. How do I verify that the person requesting deletion is the original commenter? How do I then wipe out every mention of their IP address from all my logs? These are easily solvable questions for large companies, but overheard for small startups and personal projects.