Hacker News new | ask | show | jobs
by vonmoltke 2589 days ago
> If you're really careful with how you do things the IP address could be argued to not be personal information

Current guidance (from the legal profession, not the HN peanut gallery) is that IPs are standalone personal data.

2 comments

You got a source on that if you're going to be referring to the rest of us as a peanut gallery?

Everything I know and have found says IPs are classed as personal data only if combined with other data. I've yet to find anything that supports your claim, which is why I changed my mind on this.

> You got a source on that if you're going to be referring to the rest of us as a peanut gallery?

Nothing that isn't privileged information, unfortunately.

> Everything I know and have found says IPs are classed as personal data only if combined with other data. I've yet to find anything that supports your claim, which is why I changed my mind on this.

Recital 30 (https://gdpr-info.eu/recitals/no-30/) says "in particular" when combined with other information, but the addition of that phrase indicates this is not the only case. The accuracy of your statement depends on how you interpret that recital. Based on this case (https://www.alstonprivacy.com/ecj-declares-ip-addresses-pers...) I suspect the broader interpretation is the one that would win over regulators.

Additionally, the information about that case states there is clear agreement that static IPs are personal data, which alone contradicts your belief.

In which jurisdiction? i.e. That's a hell of a generalisation.