I'm not a lawyer, so this isn't legal advice. "Handling personal data Personal data may not be processed, including its storage and transmission, without a leg

I'm not a lawyer, so this isn't legal advice. "Handling personal data Personal data may not be processed, including its storage and transmission, without a legal basis (Article 6). These legal bases are not applicable to cookies. Consent: The user has given clear consent for a specific purpose with an affirmative action. Contractual obligation: ‘Contract’ in this case may include terms of service. Legal obligation Vital interests: Saving one’s life. Public task Legitimate interests" This was in the article, having security logs probably counts as a legitimate interest. Also ISPs giving away your information without your consent and reason is violating the GDPR. Reminder: I'm not a lawyer, so this isn't legal advice.