4 ms·
My understanding of GDPR, if the logs remain anonymized... i.e. the IP addresses are not correlated with user records, then the solution is compliant. The IP ad
by matchagaucho 8y ago
My understanding of GDPR, if the logs remain anonymized... i.e. the IP addresses are not correlated with user records, then the solution is compliant. The IP addresses are not considered PII.
- TomasEkeli 8y agoWhen I worked with GDPR compliance we tried and tried but still ended up with the opnion that IP adresses are considered personal information. Article 4 point 1 in the GDPR indicates this (unless you can somehow prove that the IP is not related to the person, which I think we all know it effectively is in most cases)
- kasey_junk 8y agoPII is not a GDPR concept. Most opinions (including the GDPR faq) will tell you IP is personal data.