News for hackers. Stuff that matters.

A comment on GDPR: Is It Worth It?. Parent comment

Re:GDPR: Is It Worth It? by pnw on Friday May 17, 2024 @06:27PM (#40394729)
Your websites have no logging at all? Remember, even an IP address is PII under GDPR.
[ Parent | on HN ]
Re:GDPR: Is It Worth It? by rakoo on Friday May 17, 2024 @06:35PM (#40394785)
You don't need to ask if the information you collect is necessary for your site to work.
[ Parent | on HN ]
Re:GDPR: Is It Worth It? by aleph_minus_one on Friday May 17, 2024 @06:39PM (#40394813)
> You don't need to ask if the information you collect is necessary for your site to work.

Shysters/pettifoggers are very "flexible" (in a negative way) in the interpretation what is "necessary for your site to work". :-(

[ Parent | on HN ]
Re:GDPR: Is It Worth It? by viraptor on Friday May 17, 2024 @06:34PM (#40394776)
You don't have to log IPs. And if you need them for rate limits / abuse prevention, that falls under the "necessary / legitimate interest" rule.
[ Parent | on HN ]
Re:GDPR: Is It Worth It? by p_l on Friday May 17, 2024 @06:42PM (#40394838)
Security, debugging and audit logs all fall under "legitimate interest".

Just keep them out of hands of parties that might want to use them for other reasons.

[ Parent | on HN ]