News for hackers. Stuff that matters.

A comment on Data portability, the forgotten right of GDPR. Parent comment

Re:Data portability, the forgotten right of GDPR by Rygian on Tuesday May 25, 2021 @11:27AM (#27278088)
My HN username (Rygian) is PII because it can be used to identify me indirectly (HN has a log of my username connecting from IP x.y.z.w, and my IP address is PII).
[ Parent | on HN ]
Re:Data portability, the forgotten right of GDPR by dahart on Tuesday May 25, 2021 @11:35AM (#27278215)
In the US there is precedent (existing court rulings) against IP address being PII. Obviously, IP address is not very good PII, and never guaranteed to be able to identify someone.

Whether HN has a log of it is an assumption I don’t have a way to verify. Lots of privacy-conscious sites purge connection logs often and/or refuse to keep them for this very reason.

[ Parent | on HN ]
Re:Data portability, the forgotten right of GDPR by zorked on Tuesday May 25, 2021 @12:11PM (#27278672)
IP addresses are PII in Europe.
[ Parent | on HN ]
Re:Data portability, the forgotten right of GDPR by nemoniac on Tuesday May 25, 2021 @04:49PM (#27282454)
This may sound pedantic but PII is not even mentioned in the GDPR. It's a notion from U.S. law.

The GDPR refers to "personal data". Everything you say above about PII is true of personal data under GDPR.

[ Parent | on HN ]