News for hackers. Stuff that matters.
Re:Do cookie-free analytics need cookie banners? by iamacyborg on Saturday January 25, 2025 @04:31AM (#42820570)
GDPR is not concerned with whether or not the data is identifiable. If it is linked to an individual, it is personal data.

In the context of an analytics package, a pageview would be considered personal data because it is associated with an individual user.

Article 4 is pretty clear.

> ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

https://gdpr-info.eu/art-4-gdpr/

There are no comments on this comment yet.