3 ms·
Does having a table called "users" with usernames, emails, password hashes, and last logged in timestamps count as customer data?
by sprayk 7y ago
Does having a table called "users" with usernames, emails, password hashes, and last logged in timestamps count as customer data?
- jib 7y agoYes. Emails are 100% PII. Even user names can be argued to be.
- jdietrich 7y agoThe term "personally identifying information" does not occur anywhere in the text of GDPR; the regulations use the term "personal data", which is defined differently. I raise this issue in almost every thread about GDPR, because although it might seem pedantic, the error strongly implies that people have not read or understood the legislation. The difference between personal data and personal identifiers is integral to GDPR and the legislation cannot be understood without fully understanding that distinction and the implications that follow from it. https://gdpr-info.eu/art-4-gdpr/ https://gdpr-info.eu/art-4-gdpr/
- laurentl 7y agoIt counts as personal data, and as such, under the GDPR you have a duty to handle that data sensibly and responsibly.