News for hackers. Stuff that matters.

A comment on GDPR will pop the adtech bubble. Parent comment

Re:GDPR will pop the adtech bubble by toomuchtodo on Sunday May 13, 2018 @04:40PM (#17060934)
> Also, what pii is tracked (by default) by piwiki or ga or access logs? I certainly cannot think of anything.

Cookies and other artifacts in the request headers or query parameters that can identify a unique user.

[ Parent | on HN ]
Re:GDPR will pop the adtech bubble by jimktrains2 on Sunday May 13, 2018 @04:43PM (#17060952)
Identify a unique user does not mean that it's pii if I cannot produce the real world identity of the user from the cookie.
[ Parent | on HN ]
Re:GDPR will pop the adtech bubble by toomuchtodo on Sunday May 13, 2018 @04:47PM (#17060967)
True! But some cookies are usually tied to a user account, with an email address, and/or other PII.

How careful are you with tacking cookies to requests? Be mindful, and keep documentation.

[ Parent | on HN ]
Re:GDPR will pop the adtech bubble by zaarn on Monday May 14, 2018 @03:25AM (#17063504)
Under the GDPR that's PII. IP Addresses too. Personal Data is any data relating to a natural person, if you can uniquely identify them that falls under the monitoring/profiling definition of the regulation.
[ Parent | on HN ]