3 ms·
Incorrect, GDPR requires informed consent to collect personally identifiable information, but you can absolutely run your own analytics that only saves the firs
by input_sh 1y ago
Incorrect, GDPR requires informed consent to collect personally identifiable information, but you can absolutely run your own analytics that only saves the first three octets of an IP address without needing to ask for constent.
Enough to know the general region of the user, not enough to tie any action to an individual within that region. Therefore, not personally identifiable.
Of course, you also cannot have user authentication of any kind without storing PII (like email addresses).
- root_axis 1y agoYou've stretched the definition of tracking for your hypothetical. If you can't identify the user/device then you're not tracking them.
- input_sh 1y agoI literally worked with digital rights lawyers to build a tool to exercise your GDPR rights, but sure, call it a hypothetical.
- root_axis 1y agoIt's literally a hypothetical situation you introduced for the sake of discussion. "Hypothetical" doesn't mean it doesn't happen in real life, the whole purpose of a hypothetical is to model reality for the sake of analysis.