3 ms·
Are you disputing that GDPR disallows you from retaining visitor IPs, especially without explicit consent?
by jimmaswell 8y ago
Are you disputing that GDPR disallows you from retaining visitor IPs, especially without explicit consent?
- DanBC 8y agoConsent is one basis for gathering personal information. It's only one, there are five others. Consent isn't always needed. The fine for this would not be €20m either.
- ascorbic 8y agoYes. It's fine to retain IP addresses for a reasonable amount of time if you have a good reason to keep them, such as security. Just rotate them as usual, and don't keep them longer than you need.