3 ms·
log files have a different original purpose. But yes, if you repurpose your log files to track individual users granularly, that processing would be illegal wit
by simpss 6y ago
log files have a different original purpose. But yes, if you repurpose your log files to track individual users granularly, that processing would be illegal without gathering informed consent first.
- Dayshine 6y agoThe key caveat here is: Unless it's necessary. The legitimate interests basis of the GDPR allows you to make a balanced decision of your business requirements against user privacy expectations.
- eclat 6y agoThat’s not a justification to process personal data for marketing or analytics purposes. https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/legitimate-interests/what-is-the-legitimate-interests-basis/ https://ico.org.uk/for-organisations/guide-to-data-protectio...
- simpss 6y agoyes, and you have to line out how the processing is necessary for providing the service, there has to be no less-intrusive method of achieving the desired result and be ready to prove it. hint, user-level analytics rarely is. And in this specific example, repurposing logs kept for one purpose(ex, security/auditing) to user analytics is definitely not something you can just do
- GordonS 6y agoAn example that's explicitly called out as allowed is using logs for security purposes.