3 ms·
Do you have a legitimate reason for storing that data? Probably not, so just stop it from being logged.
by bennyp101 8y ago
Do you have a legitimate reason for storing that data?
Probably not, so just stop it from being logged.
- snowwolf 8y agoYes. One of the key parts of GDPR is breach reporting. Assume you discover your company has been breached. How do you investigate the breach? Discover who was impacted, what was done and by whom? Is that significantly harder/impossible if your logs don't contain IP addresses? Edit: Also consider Log retention. Yahoo discovered a data breach 3 years after it happened. What if they'd only kept logs for 1 year.
- dwild 8y agoNever have been in a DDOS attack? Good luck doing anything without getting the IP. It's useful to know where the requests come from too. You get a bunch of request from IP that come from a specific peer and that peer is saturated? How could you verify that without a log? You want to add CDN to the right locations. Where should you? Really, I think it's just make more sense for any small company to block EU and when you have the means to do it correctly (with the help of a competent DPO), then yeah add that EU in your market.