You need to protect it from yourself. If you know the salt then you can trivially brute-force it yourself and now you are not GDPR-compliant. If you don't kno

You need to protect it from yourself. If you know the salt then you can trivially brute-force it yourself and now you are not GDPR-compliant. If you don't know the salt then you'll have to use a new salt for each IP and then all hashed IPs will be unique and you have no way of correlating them so it is all completely worthless.