Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

In the cases you list, you have other legal basis for processing than consent – i.e. legitimate interest – but that doesn't mean it's not personal data.

Indeed, IP-addresses are considered [0] personal data in some cases – which only really means that you need to follow the GDPR: have a legal basis for processing, do not process the data for reasons other than that for which you have a legal basis, delete it as soon as you no longer need it, implement protective measures, etc.

[0]: https://www.whitecase.com/publications/alert/court-confirms-...



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: