News for hackers. Stuff that matters.

A comment on hCaptcha now runs on fifteen percent of the internet. Parent comment

Re:hCaptcha now runs on fifteen percent of the internet by riversflow on Wednesday November 25, 2020 @10:24PM (#25216549)
>GDPR says that an IP address is PII if it can be associated with an individual, but that. . . doesn’t mean that stored information that is keyed by an IP address is personal data, even if the IP address can be associated back to a particular individual.

Okay, I’m usually pretty good at understanding law, but this doesn’t make sense to me. This seems like a very shallow, arbitrary definition of subject data. So GDPR didn’t grant ownership of one’s PII? What did it grant ownership of? I’m very confused by this.

[ Parent | on HN ]
Re:hCaptcha now runs on fifteen percent of the internet by dodobirdlord on Thursday November 26, 2020 @02:07AM (#25217613)
A subject (a person) can make a request for subject data (data about the person) that a company has stored. The data has to be about the person and associatable with the person to be covered by GDPR. If I keep track of say, average CPU time for handling requests from a particular IP address, the CPU metric doesn’t become the personal data of the individual that is associated with the IP address.
[ Parent | on HN ]