[bsksi]

What's his gdpr policy?

[fulafel]

Trivia: Norway is not in the EU, but they still adopted the GDPR. (A possible practical effect might be implementation differences due to that)

[mmgu]

There are exemptions for academic research and journalism in the GDPR under article 85 [0]. That is why the original news article (that I wrote) clearly mentions right away that the information was collected for a academic project.

[0] https://bookdown.org/fede_caruso/bookdown/the-journalistic-e...

[nextlevelwizard]

Reading GDPR's definition of personal data I think he is safe

[spyder]

GDPR applies to organizations, he is not an organization and not doing it as a business.

[bsksi]

He's storing private data that can geolocate people (mac address + exact geolocation + timestamp)

[nextlevelwizard]

With that you can not identify any individual. You can try to prove that some device was at that location at the time.

[spyder]

Even if he stores private data GDPR would not apply to him as an individual, but other laws may apply depending on the data and the country.