> since the EU considers an IP address to be PII How can an IP address _not_ be PII? NIST defines [1] PII as: "Information that can be used to distinguish or

> since the EU considers an IP address to be PII How can an IP address _not_ be PII? NIST defines [1] PII as: "Information that can be used to distinguish or trace an individual’s identity ... either alone or when combined with other personal or identifying information..." So it's not some EU caprice. [1] : https://csrc.nist.gov/glossary/term/personally_identifiable_information https://csrc.nist.gov/glossary/term/personally_identifiable_...