Hacker News Reader

Is just checking IP with no other personal information a violation of GDPR? Particularly if that IP is not retained in a database (just temporarily in production logs)? Asking for a friend...

View on HN

If you don't keep it around and only use it to block traffic then I don't see which parts of the GDPR would cause any problem.

IPs may be personal data but if you don't store it there is no problem.

Not really sure as well but from https://www.gdpreu.org/the-regulation/key-concepts/personal-... personal data seems to include "online identifiers", further defines online identifiers as "Natural persons may be associated with online identifiers provided by their devices, applications, tools and protocols, such as internet protocol addresses, cookie identifier"

Reply on news.ycombinator.com