undefined | Better HN

0 pointsclaudiulodro7y ago0 comments

It's my understanding that an IP address is not personal info and that nobody can, say, make a GDPR request for information associated with an IP address. An IP address is not personally identifiable information.

0 comments

dangrossman7y ago

Under GDPR's definition and recitals, IP addresses are most definitely personal data.

Angostura7y ago

Only if linkable to other personal information. If your logs are collecting IP data that cannot be linked by you to a person you're fine.

claudiulodroOP7y ago

It seems that you're correct and it does indeed include IP addresses. Good catch.

jdsnape7y ago

It’s a little more subtle than that AIUI - they’re only personal if you have a way of linking them to a user. E.g. if someone logs in with an email and you record that with the IP, or if you’re an ISP. I don’t think the IP is personal if you are just hosting a static site say.

j / k navigate · click thread line to collapse