5 ms·
Define retention policies and explain you would keep IP addresses up to xxx months to ensure service operation/troubleshoot/etc. Prune the logs. There you hav
by xxs 8y ago
Define retention policies and explain you would keep IP addresses up to xxx months to ensure service operation/troubleshoot/etc.
Prune the logs.
There you have it.
- thecatspaw 8y ago"IP addresses are logged to ensure we can comply with requests from law officers"
- xxs 8y agoEven then, you have to delete them at some point, b/c the retention policy has to specify duration.
- rebelde 8y agoSounds like a legal headache for anybody who wants to set up a personal blog or blog for their company, with a penalty of up to 20 million euros if you get it wrong.
- Dylan16807 8y ago> with a penalty of up to 20 million euros if you get it wrong Much like if you set up your billing software wrong, you could go to jail for years for fraud. Or you could violate a safety regulation and get shut down for months. Staring at the worst possible punishment is hopelessly hyperbolic.
- FooBarWidget 8y agoWhat? You can setup log rotation in 1 minute. In 3 minutes you can write a small paragraph that explains you only use IP addresses for security reasons and only store them for a few weeks. Also, the claim that you immediately get the maximum fine of 20 million euro for every small detail that you get wrong, is false: https://www.joyfulbikeshedding.com/blog/2018-04-17-should-non-eu-websites-ban-eu-visitors-under-the-gdpr.html https://www.joyfulbikeshedding.com/blog/2018-04-17-should-no... (claim backed up by a book written by an IT lawyer)
- rebelde 8y agoYou overestimate my abilities! You also overestimate the abilities of non-technical people. Judge's discretion on the fine, and he probably won't like me.