4 ms·
> First, an IP address is considered personal data in the EU. I don’t believe that’s true. To my knowledge, GDPR only treats IP address as personal data if it
by aardvarkr 4y ago
> First, an IP address is considered personal data in the EU.
I don’t believe that’s true. To my knowledge, GDPR only treats IP address as personal data if it is associated with actual identifying information (like name or address). Collecting IP address alone, and not associating it with anything else, is completely fine (otherwise nginx and apache's default configs would violate GDPR), and through them basically every website would violate GDPR.
- fanso99 4y agoCollecting IP addresses and linking them to a user ID is considered PII as far as I know.
- EGreg 4y agoSo the idea is that you can’t legally collect information in private that you can technically collect. As long as a company is able to keep it a secret, they won’t get caught. Witness the hundreds of violations of public trust by Facebook: https://www.independent.co.uk/tech/facebook-app-recording-camera-iphone-ios-news-feed-bug-update-fix-workaround-a9200696.html?amp https://www.independent.co.uk/tech/facebook-app-recording-ca... The only complete solution is technological!
- mytailorisrich 4y agoThat's correct. IP addresses are not personal data in themselves but they may become so if further data are collected or accessible which allow to identify individuals when used together with IP addresses.