Hacker News Reader

That link says “ Any business in the world that collects personal information from people in the EU (even if it's just an IP address) will be required to comply with the following General Data Protection Regulation (GDPR) Privacy Policy stipulations” but I am not a business. So can I assume it doesn’t apply to me?

View on HN

An IP address is not personal information in itself. It is sensitive information, though, so it should be processed in a secure way as a matter of best practice.

It’s miss leading. Everyone who collects personal data (IP Addresses for example), is required to have a privacy policy and to be complaint with the GDPR.

At least when you have EU visitors.

There are free generators for policy’s. For personal use they are enough.

Reply on news.ycombinator.com