3 ms·

Alright, so no more DDoS protection or rate limiting. Do we need consent before a router or switch on the network can process traffic? Isn't the ISP violating t

Alright, so no more DDoS protection or rate limiting. Do we need consent before a router or switch on the network can process traffic? Isn't the ISP violating the GDPR if they hand out information about a customer to third parties without consent? What about servers that have logs turned on (Apache) before GDPR went into effect? I know the opinion of lawyers about IP addresses. But it's so far from reality that it would break the internet if strictly followed.

chrismorgan 3y ago
Consent is only one of the legal bases for personal data processing. An ISP or other network intermediary will use “contractual obligation”.
Janisbtw 3y ago
I'm not a lawyer, so this isn't legal advice. "Handling personal data Personal data may not be processed, including its storage and transmission, without a legal basis (Article 6). These legal bases are not applicable to cookies. Consent: The user has given clear consent for a specific purpose with an affirmative action. Contractual obligation: ‘Contract’ in this case may include terms of service. Legal obligation Vital interests: Saving one’s life. Public task Legitimate interests" This was in the article, having security logs probably counts as a legitimate interest. Also ISPs giving away your information without your consent and reason is violating the GDPR. Reminder: I'm not a lawyer, so this isn't legal advice.
hartator 3y ago
Yes, and it’s why GDPR is a very bad law. If you follow to the letter, Internet is disallowed in the EU.