[jdnenej]

It's still impossible to link that to an individual unless they sold it to another company that has more info on the address.

[mirimir]

Or bought the data.

I'm like 99% sure that datasets are available that link IP addresses to all sorts of PII. And then there are third-party cookies and other trackers.

[joepie91_]

Yes, and that possibility is enough to make this fall under the GDPR.