4 ms·
Identify a unique user does not mean that it's pii if I cannot produce the real world identity of the user from the cookie.
by jimktrains2 8y ago
Identify a unique user does not mean that it's pii if I cannot produce the real world identity of the user from the cookie.
- toomuchtodo 8y agoTrue! But some cookies are usually tied to a user account, with an email address, and/or other PII. How careful are you with tacking cookies to requests? Be mindful, and keep documentation.
- zaarn 8y agoUnder the GDPR that's PII. IP Addresses too. Personal Data is any data relating to a natural person, if you can uniquely identify them that falls under the monitoring/profiling definition of the regulation.