4 ms·
> Access logs with no profile data logged would not compromise privacy would it? True, but access logs without profile data would prevent you know _which_ prof
by advisedwang 8y ago
> Access logs with no profile data logged would not compromise privacy would it?
True, but access logs without profile data would prevent you know _which_ profiles were accessed. This matches with the actual claim in the article that they would be "unable to determine which users were affected"
- mashlol 8y agoRight, but the only "profile data" they would need to add to the logs to know, would be a user ID. Not really any private info.
- deleted 8y ago[deleted]
- halflings 8y agoUser IDs are definitely private info, since they'd allow you to follow a user's behaviour etc.
- flukus 8y ago"user 1234567 viewed post 89564385943" I can see how that's private info, but would this be: "client x viewed user 1234567's profile"
- wolco 8y agoNeither are private info. Private in theop law sense.
- saagarjha 8y agoSure, if user 1234567 isn’t particularly popular.
- gdfasfklshg4 8y agoIf the user id can be joined with other data to give a name or similar then it is considered personally identifying in terms of GDPR. I am not a lawyer. You should hire an appropriately qualified lawyer to review your data hygiene practices.