Post #2345159

2026-05-10 13:20 UTC

@fuchsiii@oxytodon.com @malwareminigun@infosec.exchange @nik@toot.teckids.org is an IP address PII if it's NAT'ed? Surely not since numerous individuals could have that IP:port pair over a period of time. Would IPv6 count if not-NAT'ed? While it certainly can be used to get to a specific machine an IP with MAC address embedded (from SLAAC) hardly identifies the person on it's own. IANAL so I'm trying to be sensible, I accept that legal garbage might not be!

Replies (3)

@fuchsiii@oxytodon.com 2026-05-10 13:30

@fionasboots@tech.lgbt IP addresses according to GDPR a definitively PII, static or not. That your ISP can link it to your person is enough. But according to @nik@toot.teckids.org what I quoted only counts for data collection that needs consent, which this use apparently does not. @malwareminigun@infosec.exchange

Open ##2345160
@fuchsiii@oxytodon.com 2026-05-10 13:32

@fionasboots@tech.lgbt lets wait for the answer from openSUSE legal team, I'm getting more confused by the hour about this. I still think they had some good reason to write this ToS, I just don't know anymore what it could be. (And right now I would let them being confused about the legal situation count as an answer) @malwareminigun@infosec.exchange @nik@toot.teckids.org

Open ##2345161
@fuchsiii@oxytodon.com 2026-05-10 13:41

@fionasboots@tech.lgbt I had the question about IP addressees at a mandatory work GDPR training certification test. (very boring) @malwareminigun@infosec.exchange @nik@toot.teckids.org

Open ##2345162