[jdnenej]

IP addresses are only PII if attached to other information. I can generate a list of IP addresses and store/sell that data and it's all fine because its meaningless without associated data.

[mirimir]

The other information is "using Atom".

[jdnenej]

It's still impossible to link that to an individual unless they sold it to another company that has more info on the address.

[mirimir]

Or bought the data.

I'm like 99% sure that datasets are available that link IP addresses to all sorts of PII. And then there are third-party cookies and other trackers.

[joepie91_]

Yes, and that possibility is enough to make this fall under the GDPR.