• towerful@programming.dev
    link
    fedilink
    English
    arrow-up
    2
    ·
    9 months ago

    Depends where and how its applied.
    Under GDPR, IP addresses are essential to the opperation of websites and security, so the logging/processing of them can be suitably justified without requiring consent (just disclosure).
    Under CCPA, it seems like it isnt PII if it cant be linked to a person/household.

    However, an ip address isnt needed as a part of AI training data, and alongside comment/post data could potentially identify a person/household. So, seems risky under GDPR and CCPA.

    I think Reddit would be risking huge legal exposure if they included IP addresses in the data set.
    And i dont think google would accept a data set that includes information like that due to the legal exposure.