[daveoc64]

The concept of being able to identify individuals by combining data sources is a key part of GDPR.

If you can look up a user account by IP address, then the IP address is personal data.