3 ms·

IANAL, but company lookup by IP/DNS shouldn't fall under GDPR [0]: "(14) The protection afforded by this Regulation should apply to natural persons, whatever t

IANAL, but company lookup by IP/DNS shouldn't fall under GDPR [0]: "(14) The protection afforded by this Regulation should apply to natural persons, whatever their nationality or place of residence, in relation to the processing of their personal data. This Regulation does not cover the processing of personal data which concerns legal persons and in particular undertakings established as legal persons, including the name and the form of the legal person and the contact details of the legal person." [0] http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv:OJ.L_.2016.119.01.0001.01.ENG http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv:O...

c2h5oh 9y ago
European Court of Justice ruling confirmed that IP address can be considered personally identifiable information if a party can lawfully obtain information linking it to a natural person
- TomMarius 9y ago
  But that is not the case there. SaaS's typically don't target a natural person, they target businesses (in EU, self employment is considered business as well).
  - bigiain 9y ago
    That might work ok for Clearbit's customers - who can send an IP address and either get back a company name or nothing, but I suspect Clearbit have to have some solid legal advice for answers to questions like "What if a customer sends you a home/residential IP address?" I live alone - my ip address is (and has been for a decade or more) static. It without doubt will qualify as Personally Identifying Information.
    - TomMarius 9y ago
      This is actually very well defined. If the IP address (the contract with ISP to be specific - thus every IP it might provide to the user) is used for business purposes (doesn't matter how much), then it's regarded as business even though it's residential and the businessman lives there.
      - beojan 9y ago
        Based on imhoguy's comment, it looks like only corporations (legal persons) count as businesses.

c2h5oh 9y ago

European Court of Justice ruling confirmed that IP address can be considered personally identifiable information if a party can lawfully obtain information linking it to a natural person

TomMarius 9y ago
But that is not the case there. SaaS's typically don't target a natural person, they target businesses (in EU, self employment is considered business as well).
- bigiain 9y ago
  That might work ok for Clearbit's customers - who can send an IP address and either get back a company name or nothing, but I suspect Clearbit have to have some solid legal advice for answers to questions like "What if a customer sends you a home/residential IP address?" I live alone - my ip address is (and has been for a decade or more) static. It without doubt will qualify as Personally Identifying Information.
  - TomMarius 9y ago
    This is actually very well defined. If the IP address (the contract with ISP to be specific - thus every IP it might provide to the user) is used for business purposes (doesn't matter how much), then it's regarded as business even though it's residential and the businessman lives there.
    - beojan 9y ago
      Based on imhoguy's comment, it looks like only corporations (legal persons) count as businesses.