Hacker News new | ask | show | jobs
by dangrossman 2967 days ago
Under GDPR's definition and recitals, IP addresses are most definitely personal data.
2 comments

Only if linkable to other personal information. If your logs are collecting IP data that cannot be linked by you to a person you're fine.
It seems that you're correct and it does indeed include IP addresses. Good catch.
It’s a little more subtle than that AIUI - they’re only personal if you have a way of linking them to a user. E.g. if someone logs in with an email and you record that with the IP, or if you’re an ISP. I don’t think the IP is personal if you are just hosting a static site say.