GDPR allows you to capture logs as long as there's some reasonable business case explanation. Security is the easiest because you can easy all identity tracking

GDPR allows you to capture logs as long as there's some reasonable business case explanation. Security is the easiest because you can easy all identity tracking is for catching fraud, bots or hackers. The explanation can always be hand-wavy and legislation is not specific on the details.