Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

>IP addresses still count as Personally Identifiable Information under GDPR

The GDPR does not count anything as "Personally Identifiable Information", which isn't surprising as that's a US legal term.

What you mean is "Personal Data", and yes IP addresses are considered personal data under the GDPR.

>so deriving an identifier from this for a use case such as analytics would likely require consent.

Consent isn't the only legal basis for processing personal data, though, there are 5 others available.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: