2 ms·
They could just not track users? I seem to remember coding a lot of websites that totally failed to track users.
by thechao 2y ago
They could just not track users? I seem to remember coding a lot of websites that totally failed to track users.
- pnw 2y agoYour websites have no logging at all? Remember, even an IP address is PII under GDPR.
- viraptor 2y agoYou don't have to log IPs. And if you need them for rate limits / abuse prevention, that falls under the "necessary / legitimate interest" rule.
- p_l 2y agoSecurity, debugging and audit logs all fall under "legitimate interest". Just keep them out of hands of parties that might want to use them for other reasons.
- rakoo 2y agoYou don't need to ask if the information you collect is necessary for your site to work.
- aleph_minus_one 2y ago> You don't need to ask if the information you collect is necessary for your site to work. Shysters/pettifoggers are very "flexible" (in a negative way) in the interpretation what is "necessary for your site to work". :-(