Yes, and companies doing business in the EU may only use GDPR-compliant hosting. All European providers as well as major international provider like AWS [1] ha

Yes, and companies doing business in the EU may only use GDPR-compliant hosting. All European providers as well as major international provider like AWS [1] have compliance statements. The EU companies are more likely to take it seriously, e.g. Hetzner only logs the first three segments of your IP (i.e 24bit IPv4 or 48bit IPv6). Every other EU-based provider I've used at least offers it as an option. If you run your own server, there are nginx and apache modules [2] that anonymize your logs. It's real. We're 100% serious. [1] https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf [2] https://www.supertechcrew.com/anonymizing-logs-nginx-apache/ https://www.supertechcrew.com/anonymizing-logs-nginx-apache/