[kayfox]

But you do need a GDPR specialized attorney to review all of what your doing even if you don't use any cookies.

Why? Even logging an IP address in a request log is creating records controlled by GDPR.

When TV news in the US is broke and only gets along because large companies buy up stations to control the news, its hard to justify spending tens of thousands of dollars on complying with laws from another continent.

[subscribed]

> logging an IP address....

Untrue. IP is an category of PII but its not PII in itself unless you're a law enforcement.

Separately, if you log IP addresses you're doing it to prevent abuse and to provide security to your server, you're already permitted to do so.

More on that: https://missinfogeek.net/gdpr-consent/

[einsteinx2]

That sounds like a great example of why you need a GDPR specialized attorney to review everything you do then…or just return status code 451 and call it a day.

[subscribed]

Fair point, thanks.