3 ms·
It says IP address and time are necessary for it to be personal data, but not sufficient. To be personal data you also have to have access to some mapping to ma
by Buge 8y ago
It says IP address and time are necessary for it to be personal data, but not sufficient. To be personal data you also have to have access to some mapping to map those back to actual people. For example if you have an agreement with ISPs that allows you to map IP+time to person, then the IP+time is personal data. In the absence of such agreement, it isn't necessarily personal data.
- c3tru 8y agoYou do not need access to the mapping. It's only important if such a mapping is possible.
- apple4ever 8y agoNo access important. Mapping is possible only with access. So IPs and time stamps are not PII by themselves.
- Buge 8y agoIt says access to the mapping is required. Point 49. >a dynamic IP address registered by an online media services provider [...] constitutes personal data within the meaning of that provision, in relation to that provider, where the latter has the legal means which enable it to identify the data subject with additional data which the internet service provider has about that person.