The GDPR also protects your name that way too, despite the fact that it might actually identify a multitude of different people (like if you're called John Smit

The GDPR also protects your name that way too, despite the fact that it might actually identify a multitude of different people (like if you're called John Smith). It does so on the basis that it may under some circumstances be sufficient to identify you personally; same for IP address. It is very seldom in my experience the case that legislation tells us anything at all about what is true about technology.