5 ms·

This post will be illegal in a month and fault will be with hacker news: 91.253.39.120 Doesn’t seem to make a whole lot of sense.

realusername 9y ago
I don't see the link between your comment and GDPR.
- marksomnian 9y ago
  I think what GP is trying to do is to post their IP address in a comment, which is personal information under GDPR.
  - DanBC 9y ago
    No it isn't. IP addresses are not personal data unless you link it to a natural person.
    - LoSboccacc 9y ago
      And that’s where you’re wrong. Logically? Yes. In GDPR scope? They are personal data. Guys debating with you is a blast but if you keep downvoting all correct information because it doesn’t match your gut feelings you’ll just become even more of a circlejerk of what you already have here.
      - DanBC 9y ago
        > correct information You are being downvoted because you are factually incorrect. IP addresses are only personal data if you can identify a natural person from them. You can't do so unless you've linked them to other information. Thus, by themselves IP addresses are not personal information. Article 4: http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=EN http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX... > 1) ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
        deepbreath 9y ago
        So then all he needed to do is write his name in addition to his IP address in the comment?
        LoSboccacc 9y ago
        > directly or indirectly Keyword indirectly. There’s plenty literature regarding ip and gdpr. “The conclusion is that the GDPR does consider it as such. The logic behind this decision is relatively simple. The internet service provider (ISP) has a record of the temporary dynamic IP address and knows to whom it has been assigned. A website provider has a record of the web pages accessed by a dynamic IP address (but no other data that would lead to the identification of the person). If the two pieces information would be combined, the website provider could find the identity of the person behind a certain dynamic IP address.” https://eugdprcompliant.com/personal-data/ https://eugdprcompliant.com/personal-data/ And many others up and including the gdpr preamble Please stop confusing the readers on the matter. https://www.jdsupra.com/legalnews/ecj-confirms-dynamic-ip-address-may-23456/ https://www.jdsupra.com/legalnews/ecj-confirms-dynamic-ip-ad...
        tedeh 9y ago
        Why would the "website provider" ever be given access to the dynamic IP assignments of an ISP? This information will normally only be given out by court order and/or police request, at least in my native Sweden.
        LoSboccacc 9y ago
        Doesn’t matter. This is what the eu justice court said when it was challenged in court: going from ip to identity is one simple legal request away so it is personal identifyable data. End of the story.
        tjoff 9y ago
        Your second link above ( https://www.jdsupra.com/legalnews/ecj-confirms-dynamic-ip-address-may-23456/ https://www.jdsupra.com/legalnews/ecj-confirms-dynamic-ip-ad... ): In particular, if the website operator cannot legally access third party information that could be used to identify an IP address owner, or if access to such third party information is “practically impossible”, then the IP address is not personal data from that operator’s perspective.
- LoSboccacc 9y ago
  that's personal data for which hacker news doesn't have a consent form. even if I don't ask a deletion, that's a huge liability for the site owner. it's not like down voting these post changes the GDPR wording and definitions guys.
  - tempodox 9y ago
    You volunteered that information (without being asked, to boot), so it was obviously not taken without your consent.
    - woolvalley 9y ago
      How do you know that is his IP address, or someone else's IP address? Under GDPR it doesn't matter who's they are. Here is another piece of GDPR PII: 9-5 Allée des 4 Vents 69160 Tassin-la-Demi-Lune, France Random address I pulled from google maps of someone's house.
    - LoSboccacc 9y ago
      There’s nothing in gdpr about data being given up voluntarily
  - DanBC 9y ago
    It's not personal data until it's linked to a natural person.
    - LoSboccacc 9y ago
      Nope ip are personal data by themselves
      - DanBC 9y ago
        No they aren't. They're only personal data if they can be linked to a natural person. Who is 147.67.135.33? Article 4: http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=EN http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX... > 1) ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

realusername 9y ago

I don't see the link between your comment and GDPR.

marksomnian 9y ago
I think what GP is trying to do is to post their IP address in a comment, which is personal information under GDPR.
- DanBC 9y ago
  No it isn't. IP addresses are not personal data unless you link it to a natural person.
  - LoSboccacc 9y ago
    And that’s where you’re wrong. Logically? Yes. In GDPR scope? They are personal data. Guys debating with you is a blast but if you keep downvoting all correct information because it doesn’t match your gut feelings you’ll just become even more of a circlejerk of what you already have here.
    - DanBC 9y ago
      > correct information You are being downvoted because you are factually incorrect. IP addresses are only personal data if you can identify a natural person from them. You can't do so unless you've linked them to other information. Thus, by themselves IP addresses are not personal information. Article 4: http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=EN http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX... > 1) ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
      - deepbreath 9y ago
        So then all he needed to do is write his name in addition to his IP address in the comment?
      - LoSboccacc 9y ago
        > directly or indirectly Keyword indirectly. There’s plenty literature regarding ip and gdpr. “The conclusion is that the GDPR does consider it as such. The logic behind this decision is relatively simple. The internet service provider (ISP) has a record of the temporary dynamic IP address and knows to whom it has been assigned. A website provider has a record of the web pages accessed by a dynamic IP address (but no other data that would lead to the identification of the person). If the two pieces information would be combined, the website provider could find the identity of the person behind a certain dynamic IP address.” https://eugdprcompliant.com/personal-data/ https://eugdprcompliant.com/personal-data/ And many others up and including the gdpr preamble Please stop confusing the readers on the matter. https://www.jdsupra.com/legalnews/ecj-confirms-dynamic-ip-address-may-23456/ https://www.jdsupra.com/legalnews/ecj-confirms-dynamic-ip-ad...
        tedeh 9y ago
        Why would the "website provider" ever be given access to the dynamic IP assignments of an ISP? This information will normally only be given out by court order and/or police request, at least in my native Sweden.
        LoSboccacc 9y ago
        Doesn’t matter. This is what the eu justice court said when it was challenged in court: going from ip to identity is one simple legal request away so it is personal identifyable data. End of the story.
        tjoff 9y ago
        Your second link above ( https://www.jdsupra.com/legalnews/ecj-confirms-dynamic-ip-address-may-23456/ https://www.jdsupra.com/legalnews/ecj-confirms-dynamic-ip-ad... ): In particular, if the website operator cannot legally access third party information that could be used to identify an IP address owner, or if access to such third party information is “practically impossible”, then the IP address is not personal data from that operator’s perspective.
LoSboccacc 9y ago
that's personal data for which hacker news doesn't have a consent form. even if I don't ask a deletion, that's a huge liability for the site owner. it's not like down voting these post changes the GDPR wording and definitions guys.
- tempodox 9y ago
  You volunteered that information (without being asked, to boot), so it was obviously not taken without your consent.
  - woolvalley 9y ago
    How do you know that is his IP address, or someone else's IP address? Under GDPR it doesn't matter who's they are. Here is another piece of GDPR PII: 9-5 Allée des 4 Vents 69160 Tassin-la-Demi-Lune, France Random address I pulled from google maps of someone's house.
  - LoSboccacc 9y ago
    There’s nothing in gdpr about data being given up voluntarily
- DanBC 9y ago
  It's not personal data until it's linked to a natural person.
  - LoSboccacc 9y ago
    Nope ip are personal data by themselves
    - DanBC 9y ago
      No they aren't. They're only personal data if they can be linked to a natural person. Who is 147.67.135.33? Article 4: http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=EN http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX... > 1) ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;