3 ms·

That's an interesting argument. Not sure it would hold up. I don't think an IP alone counts as PII, since the ISP would have to be queried to actually get any c

That's an interesting argument. Not sure it would hold up. I don't think an IP alone counts as PII, since the ISP would have to be queried to actually get any contact info.

thissitesucks__ 3y ago
[dead]
addandsubtract 3y ago
IP addresses are PII under GDPR.
- PrimeMcFly 3y ago
  Not by themselves, surely? Even so, GDPR has research exemptions which would protect the academics doing research in the example being discussed.
- MacsHeadroom 3y ago
  Only of they are connected to a short list of more sensitive PII, of which "tor user" is not one. IP logs are fully legal in the UE under GDPR and Tor deanonymization is just an IP log of connected users. Also there is already plenty of research of this type out of the EU. It's quite common in infosec.