Court confirms that IP addresses are personal data only in some cases (2016)

Re:Court confirms that IP addresses are personal data only i... by tjoff on Saturday May 19, 2018 @06:06PM (#17109978)

> Do a geolookup, you have my approximate location.

Nowhere near "personally identifiable" nor necessarily correct in any way.

> Do a Google search for my IP address and you'll have my name.

That would be highly unusual.

[ Parent | on HN ]

Re:Court confirms that IP addresses are personal data only i... by jlgaddis on Saturday May 19, 2018 @06:14PM (#17110006)

It's certainly possible. There are plenty of people who have been assigned (usually small) subnets (e.g., a /28 or /29) and have their name, address, phone number, etc., publicly available via WHOIS. (For "residential customers", it was acceptable to not publish their personal details, however.)

I'm not sure about the other RIRs but ARIN, at least, has (had?) a requirement that any assignment of a /29 or larger must be reported (see "SWIP" [0]).

In other cases, a PTR RR for a single IP address could be enough to personally identify an individual.

[0]: https://en.m.wikipedia.org/wiki/Shared_Whois_Project

[ Parent | on HN ]

Re:Court confirms that IP addresses are personal data only i... by tjoff on Sunday May 20, 2018 @04:46AM (#17111866)

I think we have different meaning of plenty.

Commercial entities doesn't really map to one person. I thought WHOIS would have to be amended to be compatible with GDPR anyway.

I mean, you could create a website dedicated to mapping your current IP to yourself if you really wanted to, but that is hardly relevant.

[ Parent | on HN ]