3 ms·

EU? Basically researchers tries to get PII from people connected to Tor without consent of these people.

• PrimeMcFly 3y ago
  That's an interesting argument. Not sure it would hold up. I don't think an IP alone counts as PII, since the ISP would have to be queried to actually get any contact info.
  • thissitesucks__ 3y ago
    [dead]
  • addandsubtract 3y ago
    IP addresses are PII under GDPR.
    • PrimeMcFly 3y ago
      Not by themselves, surely? Even so, GDPR has research exemptions which would protect the academics doing research in the example being discussed.
    • MacsHeadroom 3y ago
      Only of they are connected to a short list of more sensitive PII, of which "tor user" is not one. IP logs are fully legal in the UE under GDPR and Tor deanonymization is just an IP log of connected users. Also there is already plenty of research of this type out of the EU. It's quite common in infosec.