News for hackers. Stuff that matters.

A comment on Court confirms that IP addresses are personal data only in some cases (2016). Parent comment

Re:Court confirms that IP addresses are personal data only i... by c3tru on Saturday May 19, 2018 @03:43PM (#17109397)
It's important to note that only IP adresses in combination with a timestamp are considered personal data under GDPR.
[ Parent | on HN ]
Re:Court confirms that IP addresses are personal data only i... by Matticus_Rex on Saturday May 19, 2018 @05:15PM (#17109770)
Citation? That wasn't mentioned in the WP29 draft guidance I read.
[ Parent | on HN ]
Re:Court confirms that IP addresses are personal data only i... by c3tru on Saturday May 19, 2018 @06:11PM (#17109997)
http://curia.europa.eu/juris/document/document.jsf?text=&doc...

That's the detailed version of the ruling. The ruling refers to IP adresses with time and date, as explained in point 37.

[ Parent | on HN ]
Re:Court confirms that IP addresses are personal data only i... by Buge on Saturday May 19, 2018 @08:07PM (#17110441)
It says IP address and time are necessary for it to be personal data, but not sufficient. To be personal data you also have to have access to some mapping to map those back to actual people. For example if you have an agreement with ISPs that allows you to map IP+time to person, then the IP+time is personal data. In the absence of such agreement, it isn't necessarily personal data.
[ Parent | on HN ]
Re:Court confirms that IP addresses are personal data only i... by c3tru on Saturday May 19, 2018 @09:00PM (#17110590)
You do not need access to the mapping. It's only important if such a mapping is possible.
[ Parent | on HN ]
Re:Court confirms that IP addresses are personal data only i... by Buge on Sunday May 20, 2018 @02:37AM (#17111537)
It says access to the mapping is required. Point 49.

>a dynamic IP address registered by an online media services provider [...] constitutes personal data within the meaning of that provision, in relation to that provider, where the latter has the legal means which enable it to identify the data subject with additional data which the internet service provider has about that person.

[ Parent | on HN ]
Re:Court confirms that IP addresses are personal data only i... by apple4ever on Saturday May 19, 2018 @11:10PM (#17110966)
No access important. Mapping is possible only with access.

So IPs and time stamps are not PII by themselves.

[ Parent | on HN ]
Re:Court confirms that IP addresses are personal data only i... by Matticus_Rex on Saturday May 19, 2018 @08:26PM (#17110497)
The EU is a civil law system, and that's not what regulators are saying now, so that does nothing for us.
[ Parent | on HN ]
Re:Court confirms that IP addresses are personal data only i... by c3tru on Saturday May 19, 2018 @09:06PM (#17110600)
Can you elaborate this? How has an european judgment to the definition of personal data nothing to do with the GDPR?
[ Parent | on HN ]
Re:Court confirms that IP addresses are personal data only i... by Matticus_Rex on Sunday May 20, 2018 @03:07PM (#17114279)
In the US, we have a common law system, so a court ruling about the meaning of something instructs regulators on the interpretation of what the law means going forward. In a civil law system, judicial interpretation doesn't control how the law is interpreted by regulators.
[ Parent | on HN ]