The Court of Justice of the European Union has ruled that dynamic IP addresses are personal data in specific situations, Hogan Lovells reports. The CJEU ruling comes after the the German Federal Court referred the questions surrounding IP addresses, internet service providers and privacy brought by the Pirate Party's Patrick Breyer, Eduardo Ustaran, CIPP/E, and Elizabeth Campion write. ISPs collect the IPs, and  the court felt that "ISPs were the third party to whom the federal government would naturally go to obtain such further information, and German law provided a mechanism through which this could be done legally in the event of a cyberattack, hence creating the likelihood of various bits of information being combined to identify an individual." The CJEU also considered the "compliance of German law with the Data Protection Directive," finding the German law too restrictive, the report adds.
Full Story