I'm glad about this decision. Anyway removing all personal data from logging will be a huge project in large organizations. I'm thinking about IP addresses [1]

I'm glad about this decision. Anyway removing all personal data from logging will be a huge project in large organizations. I'm thinking about IP addresses [1] which are often used to aggregate requests, debug, etc. Wireshark could become a hot tool to handle. I didn't spend much time to think about it so I might be totally wrong but anonymizing IP addresses is probably not easy unless we give up aggregation. I think that anything that uniquely maps IP addresses also becomes personal data, e.g. cookies. [1] https://www.whitecase.com/publications/alert/court-confirms-ip-addresses-are-personal-data-some-cases https://www.whitecase.com/publications/alert/court-confirms-...