Hacker News new | ask | show | jobs
by oldcynic 2970 days ago
Is it enough to identify a person?

Name alone is probably not as many people share names, unless you have an unusual name. Add address and phone number and it will be. IP address on its own is not.

Is "1.8m tall guy in green T-shirt who is head of team X" enough to identify them? If so it's personal data.

Most of this applied to the Data Protection Act too. GDPR adds some items like biometrics

1 comments

Everything you mentioned is considered PII according to GDPR.
From GDPR itself:

Natural persons may be associated with online identifiers provided by their devices, applications, tools and protocols, such as internet protocol addresses, cookie identifiers or other identifiers such as radio frequency identification tags. This may leave traces which, in particular when combined with unique identifiers and other information received by the servers, may be used to create profiles of the natural persons and identify them.

My emphasis.