Hacker News new | ask | show | jobs
by pavelludiq 2942 days ago
Still, using ip addresses to try to determine where a request is originating from is not a good idea. I'm also not intending to bypass a block, I just happen to be in a network right now that that doesn't have a public ip in the EU, I'm using the internet as intended, the fact that ips sometimes correspond to geography is mostly accidental.
2 comments
dogma1138 2942 days ago
It doesn’t violate GDPR you do not need conscent for this level of profiling.

And again using or not using the internet as intended isn’t the issue here but rather if they intend to provide services to the EU or not a message saying EU users should leave in the same manner as age conscent is verified is technically sufficient to indicate that you do not provide service to EU residents, geoblocking the IP also sufficient even if it’s not perfect.

link
nmjohn 2942 days ago
> Still, using ip addresses to try to determine where a request is originating from is not a good idea

How else should they do it? I concede it is not foolproof nor ideal - but for websites which you've not provided your location to yourself, how is it possible for them to determine whether or not you are in Europe?

link
dogma1138 2942 days ago
You are allowed to use it and even keep it without consent if anything the GDPR wants to separate consent from data processing. https://eugdprcompliant.com/personal-data/

You can maintain the records of an IP address (as well as other PII) for business needs e.g. security or to enforce other requirements such as geoblocking even without explicit consent of the user it's all about why you and what do you with it which is why legal/lawful grounds exist.

https://ico.org.uk/for-organisations/guide-to-the-general-da...

Also for the most part if you do not have a lawful basis for collecting or processing PII consent is not a sufficient reason to so.

link