News for hackers. Stuff that matters.
Re:Google Tag Manager, the new anti-adblock weapon (2020) by shadowgovt on Monday February 21, 2022 @06:15AM (#30414439)
> which is worded very clearly

Hard disagree. I've been racking my brain as of late trying to decide if default apache access logs violate the GDPR, and stackexchange searches on the topic seem to confirm the confusion.

If the legality of data collection hinges on what is considered necessary for service maintenance in the eye of a judge, the law is not clear.

Re:Google Tag Manager, the new anti-adblock weapon (2020) by formerly_proven on Monday February 21, 2022 @06:25AM (#30414514)
You can keep such logs under article 6.1.f if the retention period is 30 days or less (causing self-fulfillment of article 17) or indefinitely if you remove/anonymize PII from them. Of course article 17.3 gives you an exemption for various purposes, e.g. if you had a breach you don't need to delete the logs from that period while investigating it.
Re:Google Tag Manager, the new anti-adblock weapon (2020) by shadowgovt on Monday February 21, 2022 @06:49AM (#30414734)
I fail to see how a 30-day or fewer retention policy impinges on article 17 one way or the other, nor do I see how article 6.1 gives any protection on the topic of the default Apache HTTP access logs (which include IP addresses).