3 ms·
If you are logging Personal Data, is that even wise, wrt GDPR? Logs have a funny way of escaping, NEWR notwithstanding. I'm not a Privacy Engineer, but surely e
by jiveturkey 5y ago
If you are logging Personal Data, is that even wise, wrt GDPR? Logs have a funny way of escaping, NEWR notwithstanding. I'm not a Privacy Engineer, but surely everyone understands that you don't log raw passwords. Similarly, if you are bound by GDPR, shouldn't you not log PD?
- mhitza 5y agoFrom my experience most "shops" don't disable IP address logging in their load balancers/web servers, which is personal data under the GDPR and California privacy act.
- jiveturkey 5y agovery good point!
- speedgoose 5y agoYou shouldn’t log personal data but you may do it without planning to do so. For example you may log some error messages that contain personal data.
- autoexec 5y ago> If you are logging Personal Data, is that even wise, wrt GDPR? Has any company ever been driven into bankruptcy because of GDPR violations? Google, Amazon, Vodafone, Yoigo, The Municipality of Bergen, Orange Espagne, Malagatrom, the Bulgarian National Revenue Agency, Enel Energia, Deutsche Wohnen, and Facebook have been fined over and over again, but it hasn't hurt them. If you can make more money abusing people's data than you'd pay in fines, and that's only assuming you're caught, it seems like possible GDPR issues are just another cost of doing business.