Top all-time · #6822
privacylawblog.fieldfisher.com
Company blog · privacylawblog.fieldfisher.comsecuritypolitics
privacylawblog.fieldfisher.com is the company blog at privacylawblog.fieldfisher.com, writing about security and politics. Since 2015, 12 different Hacker News readers have linked it 12 times. No feed was found, so read it on the site itself.
Too few sampled comments (10) to say how often HN recommends it.?
Why HN links it
HN readers link this Fieldfisher privacy law blog for GDPR and EU data protection analysis, such as whether IP addresses are personal data, how GDPR interacts with the ePrivacy Directive, and rights to sue.
Summarised by Claude from a sample of 10 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- /2016/can-a-dynamic-ip-address-constitute-personal-data/2 people · 2 mentions · first linked 2017-05-26
- /2016/can-a-dynamic-ip-address-constitute-personal-data2 people · 2 mentions · first linked 2018-04-24
What Hacker News says?
EU style grants much more in terms of data ownership for an individual. So, comprehensive vs. patchwork coverage. From the EU DPD (1 of 2 key documents), "Pursuant to the Directive 1995/46/EC, the data controller should ensure compliance with several principles relating to data quality. These principles include: (1) the collected data should be processed fairly and lawfully; (2) the collected data should be collecte…
Comment linking /2014/how-do-eu-and-us-privacy-regimes-compare
on “Confirmed: CMU Attacked Tor, Was Subpoenaed by Feds”Submitted First complaints under the GDPR lodged within hours as a story · 45 points
HN discussion> Note that you cannot sue anyone over the GDPR, however. That is a fundamental misunderstanding that I keep seeing repeated - the GDPR only gives people the right to report companies to the relevant authority It also gives the right to to sue. See Articles 79, 80, and 82. There's a nice summary here: https://privacylawblog.fieldfisher.com/2016/getting-to-know-...
Comment linking /2016/getting-to-know-the-gdpr-part-10-enforcement-under-the-gdpr-what-happens-if-you-get-it-wrong
on “Tesla won’t give drivers their own crash data without a court order”Submitted Weltimmo – Another Privacy Decision of the European Union's Court of Justice as a story · 1 points
HN discussionThis article makes a compelling argument that it could be: http://privacylawblog.fieldfisher.com/2016/can-a-dynamic-ip-... IANAL, but I'd be wary of saying that you'll be fine storing dynamic IP addresses. You'll probably need to have a rationale as to why you don't consider it.
Comment linking /2016/can-a-dynamic-ip-address-constitute-personal-data/
on “Facebook to change user terms, limiting effect of EU privacy law”There is so much misconception about GDPR. It is cleary directed at large data-tracking corps, not single person IM apps. Even if someone tries to "sue" you (which he can't, only report you to authorities), it first needs to go through many iterations where you can make your case. At the very least read this: https://privacylawblog.fieldfisher.com/2016/what-you-think-y...
Comment linking /2016/what-you-think-you-know-about-the-gdpr-and-why-you-may-be-wrong
on “GDPR: Removing Monal from the EU”https://eugdprcompliant.com/personal-data/ > [...] The conclusion is, all IP addresses should be treated as personal data, in order to be GDPR compliant. https://privacylawblog.fieldfisher.com/2016/can-a-dynamic-ip... > What does the GDPR say? > [...] Recital 30 clarifies that "online identifier" includes IP addresses. http://www.privacy-regulation.eu/en/r30.htm > (30) Natural persons may be associated with online i…
Comment linking /2016/can-a-dynamic-ip-address-constitute-personal-data
on “Google and Facebook accused of breaking GDPR laws”http://www.privacy-regulation.eu/en/recital-32-GDPR.htm https://privacylawblog.fieldfisher.com/2016/the-ambiguity-of...
Comment linking /2016/the-ambiguity-of-unambiguous-consent-under-the-gdpr
on “Google has been letting app developers read users’ Gmail”Up-front data minimization is also important, http://privacylawblog.fieldfisher.com/category/data-minimisa... & http://www.ftc.gov/system/files/documents/plain-language/pdf...
Comment linking /category/data-minimisation
on “Immutability Changes Everything [pdf]”Keyword: indirect https://privacylawblog.fieldfisher.com/2016/can-a-dynamic-ip... https://www.jdsupra.com/legalnews/ecj-confirms-dynamic-ip-ad... Etc. That’s what the european justice court said last time it was called to determine whether ip were personal information or not. What you gonna do now, downvote the proceedings?
Comment linking /2016/can-a-dynamic-ip-address-constitute-personal-data
on “Europe’s New Privacy Rules Favor Google and Facebook”Here is a great article by one of the top EU privacy attorneys out there explaining the interplay of the ePrivacy Directive (which governs use of cookies) and the GDPR, which often get confused. https://privacylawblog.fieldfisher.com/2018/gdpr-plus-e-priv...
Comment linking /2018/gdpr-plus-e-privacy
on “First complaints under the GDPR lodged within hours”IP's are considered personal data according to GDPR, which will go into effect May 2018. http://privacylawblog.fieldfisher.com/2016/can-a-dynamic-ip-... It's been made clear in the General Data Protection Regulation ("GDPR") that IP addresses should be considered as personal data as the text includes "online identifier", in the definition of "personal data". Recital 30 clarifies that "online identifier" includes IP…
Comment linking /2016/can-a-dynamic-ip-address-constitute-personal-data/
on “Ask HN: Do you ask to use cookies or check IP?”