How GDPR Will Change The Way You Develop

Re:How GDPR Will Change The Way You Develop by Jakob on Tuesday February 27, 2018 @01:13PM (#16476205)

The legal ramifications of storing IP addresses didn’t change with GDPR. You should already have them anonymized since they count as personal data:

Google Analytics (https://developers.google.com/analytics/devguides/collection...):

  ga('set', 'anonymizeIp', true);

Web server (here nginx, https://stackoverflow.com/a/45405406):

  map $remote_addr $remote_addr_anon {
    ~(?P<ip>\d+\.\d+\.\d+)\.    $ip.0;
    ~(?P<ip>[^:]+:[^:]+):       $ip::;
    default                     0.0.0.0;
  }

Only if you store more data about your customers/users you need to act further.

[ Parent | on HN ]

Re:How GDPR Will Change The Way You Develop by pdkl95 on Tuesday February 27, 2018 @03:59PM (#16477818)

> ga('set', 'anonymizeIp', true);

Note that this doesn't actually provide any useful anonymization. That feature is a placebo designed to give minimal compliance with privacy policies and pre-GDPR data protection requirements.

https://news.ycombinator.com/item?id=13639921

[ Parent | on HN ]

Re:How GDPR Will Change The Way You Develop by SquareWheel on Tuesday February 27, 2018 @04:51PM (#16478319)

Are IP addresses actually considered "personal data"? They are how computers talk to each other. Anonymizing them doesn't make any sense to me.

[ Parent | on HN ]

Re:How GDPR Will Change The Way You Develop by s73v3r_ on Tuesday February 27, 2018 @06:32PM (#16479180)

They're anonymized for things like logs. When the computers aren't talking to each other, the reasons to know the exact IP address are rather minimized. If you feel you have a real need to do so, then you just need to inform your users what you're doing.

[ Parent | on HN ]

Re:How GDPR Will Change The Way You Develop by ahoka on Tuesday February 27, 2018 @01:45PM (#16476526)

You can also irreversibly hash sensitive data it so you can still use it for debugging.

[ Parent | on HN ]

Re:How GDPR Will Change The Way You Develop by emilfihlman on Wednesday February 28, 2018 @07:08AM (#16482414)

IPV4 is only 4 bytes. Hashing through all 4 milliard is trivial.

[ Parent | on HN ]

Re:How GDPR Will Change The Way You Develop by NullPrefix on Wednesday February 28, 2018 @10:49AM (#16483716)

Another reason for IPv6.

[ Parent | on HN ]