[subscribed]

> logging an IP address....

Untrue. IP is an category of PII but its not PII in itself unless you're a law enforcement.

Separately, if you log IP addresses you're doing it to prevent abuse and to provide security to your server, you're already permitted to do so.

More on that: https://missinfogeek.net/gdpr-consent/

[einsteinx2]

That sounds like a great example of why you need a GDPR specialized attorney to review everything you do then…or just return status code 451 and call it a day.

[subscribed]

Fair point, thanks.