> 1. I don't think ip address alone constitutes PII but needs to be combined with other data to be applicable According to courts just the IP is considered eno

> 1. I don't think ip address alone constitutes PII but needs to be combined with other data to be applicable According to courts just the IP is considered enough: The decision says IP addresses represent personal data because it's theoretically possible to identify the person associated with an IP address, and that it's irrelevant whether the website or Google has actually done so.[1] [1]https://www.theregister.com/2022/01/31/website_fine_google_fonts_gdpr/ https://www.theregister.com/2022/01/31/website_fine_google_f... Of course this was a case where sending the IP to Google was not necessary to operate the site, as self hosting the fonts was an option.