Facebook to change user terms, limiting effect of EU privacy law

Re:Facebook to change user terms, limiting effect of EU priv... by pbhjpbhj on Thursday April 19, 2018 @07:33AM (#16874956)

IP addresses aren't PII. If you're capturing IP + real name, or similar (email + real name) then AIUI you'll need to tell people on request who you sell that info to and allow removal.

Assuming it's a personal blog then just don't capture any PII. Don't sell it, be prepared to delete a user's comments on request. Don't capture PII without informed consent.

Easy, no?

[ Parent | on HN ]

Re:Facebook to change user terms, limiting effect of EU priv... by morgante on Thursday April 19, 2018 @10:33AM (#16876192)

> IP addresses aren't PII.

I personally think so, but everything I've read about GDPR says they usually now are considered in scope.

Deleting comments is non-trivial. How do I verify that the person requesting deletion is the original commenter? How do I then wipe out every mention of their IP address from all my logs?

These are easily solvable questions for large companies, but overheard for small startups and personal projects.

[ Parent | on HN ]

Re:Facebook to change user terms, limiting effect of EU priv... by hartator on Thursday April 19, 2018 @08:06AM (#16875131)

> be prepared to delete a user's comments on request.

Or, just block users from EU from commenting. I can see the win for the Internet here.

[ Parent | on HN ]