Set by the law · GDPR recital 30

IP address as personal data

In plain English

An IP address can be personal data. Under the GDPR's predecessor, the Court of Justice held that a dynamic IP address is personal data for a website operator legally able to identify the user via the internet provider.

The official text

Natural persons may be associated with online identifiers provided by their devices, applications, tools and protocols, such as internet protocol addresses, cookie identifiers or other identifiers such as radio frequency identification tags.

Regulation (EU) 2016/679 (GDPR), recital 30EUR-LexRead it on Fino →

a dynamic IP address registered by an online media services provider when a person accesses a website that the provider makes accessible to the public constitutes personal data within the meaning of that provision, in relation to that provider, where the latter has the legal means which enable it to identify the data subject with additional data which the internet service provider has about that person

Court of Justice of the EU, judgment of 19 October 2016, Breyer, C-582/14, operative part, point 1EUR-Lex

Related

The official text is quoted word for word from the English version of the source named under it; only the version published in the Official Journal of the EU is legally binding. The plain-English line is Fino’s own summary, not legal advice.