3 ms·
Been wondering about this for a while now, maybe someone in this thread can shed some light on this? What about processing httpd access logs to count visitors?
by Tharkun 8y ago
Been wondering about this for a while now, maybe someone in this thread can shed some light on this? What about processing httpd access logs to count visitors? Most tools use IP addresses to count unique visitors. Does that mean this now qualifies as "processing personally identifiable data"?
- jacquesm 8y agoThat's just fine. You are collapsing the IP addresses into a count and that count can not be reversed back in to the IP addresses you started out with. And then, after you're done with your log analysis (and any security related work you need to do with them) you can dispose of them. There are some instances where it may make sense to have a very long log history but I'd be careful to properly document the need for that unless that need is an obvious one and easily explained. Anything longer than a year would be outright wrong and anything shorter than 30 days will definitely be ok.