> In the EU IP alone could be considered PII that statement is wrong. first of all IP Addresses are only PII if you store them to identify users, means that if

> In the EU IP alone could be considered PII that statement is wrong. first of all IP Addresses are only PII if you store them to identify users, means that if you are user table has an ip_address field, it is, however... if you store all ip's accessing your service in a database to find malicious logins it isn't. so basically the statement is, it depends. the connection of user to ip makes it PII.