main

EU Official: IP Addresses are Personal Information

Slimy   on 21 January 2008 - 22:11 · 23 comments & 17805 views

Advertisement (Why?)
IP addresses, string of numbers that identify computers on the Internet, should generally be regarded as personal information, the head of the European Union's group of data privacy regulators said Monday. Germany's data protection commissioner, Peter Scharr, leads the EU group preparing a report on how well the privacy policies of Internet search engines operated by Google Inc., Yahoo Inc., Microsoft Corp. and others comply with EU privacy law. He told a European Parliament hearing on online data protection that when someone is identified by an IP, or Internet protocol, address "then it has to be regarded as personal data." His view differs from that of Google, which insists an IP address merely identifies the location of a computer, not who the individual user is - something strictly true but which does not recognize that many people regularly use the same computer terminal and IP address.

Scharr acknowledged that IP addresses for a computer may not always be personal or linked to an individual. For example, some computers in Internet cafes or offices are used by several people. But these exceptions have not stopped the emergence of a host of "whois" Internet sites that apply the general rule that typing in an IP address will generate a name for the person or company linked to it. Treating IP addresses as personal information would have implications for how search engines record data. Google led the pack by being the first last year to cut the time it stored search information to 18 months. It also reduced the time limit on the cookies that collect information on how people use the Internet from a default of 30 years to an automatic expiration in two years. But a privacy advocate at the nonprofit Electronic Privacy Information Center, or EPIC, said it was "absurd" for Google to claim that stripping out the last two figures from the stored IP address made the address impossible to identify by making it one of 256 possible configurations.

View: Full Story @ Associated Press

Post a comment · Send to friend Comments · There are 23 additional comments
(6 replies) #1 Ste on 21 Jan 2008 - 22:16
omg that people is why we shouldnt let the EU (the future of britan) to have a say on the internet!

ste

Last edited by Ste on 21 Jan 2008 - 23:22
#1.1 Examinus on 21 Jan 2008 - 23:12
(Ste said @ #1)
omg that people is why we shouldnt let the EU (the future of brittan) to have a say on the internet!

ste


Brittan?
#1.2 Ste on 21 Jan 2008 - 23:23
(Examinus said @ #1.1)
(Ste said @ #1)
omg that people is why we shouldnt let the EU (the future of brittan) to have a say on the internet!

ste


Brittan?


can you say spelling nazi?


ste
#1.3 daPhoenix on 21 Jan 2008 - 23:34
So people who are interested in protecting your rights and your privacy should have no say in the future of Britain?

Here, let me hold the gun while you point it at your feet.
#1.4 beardedwonder on 22 Jan 2008 - 00:34
(Ste said @ #1)
omg that people is why we shouldnt let the EU (the future of britan) to have a say on the internet!

ste

Love comments like this. It's really, really ignorant and usually come from people who no matter what happens will say there's a problem with the EU. They're looking to protect people's personally identifiable information. And as for 'britan' being any better, what about all the recent leaks of personal information here in the UK? Information being found on roundabouts, millions of peoples child benefit information being lost. Yeah, Britain's at the forefront of personal privacy
#1.5 Arch on 22 Jan 2008 - 01:57
(beardedwonder said @ #1.4)
Love comments like this. It's really, really ignorant and usually come from people who no matter what happens will say there's a problem with the EU. They're looking to protect people's personally identifiable information. And as for 'britan' being any better, what about all the recent leaks of personal information here in the UK? Information being found on roundabouts, millions of peoples child benefit information being lost. Yeah, Britain's at the forefront of personal privacy

It's really a double edged sword though. Your computer is transmitting its IP to any site you connect to, currently that means someone on your connection is accessing it, but with this law it means YOU connected to it. If someone hacks your router, if you split your connection and one of the users uploads child pornography, releases his latest movie cam or sends a bomb threat from it you're going to have one hell of a time proving that it wasn't you. It's like if someone that looks similar to you takes your license, hits someone's car and gives them your information from the ID, you're going to need a damn good alibi.

If you want to protect an identity online then you need to obfuscate it behind proxies, shared IPs and encryption, not making it more identifiable.
#1.6 +Lt-DavidW on 22 Jan 2008 - 09:27
britan?

If you don't agree with the EU, then I dare you to post your home address here.
Following Google's logic it is not personal information, only "merely identifies your location, not who the individual user is."
(2 replies) #2 bl4ck5un on 21 Jan 2008 - 22:29
I agree with them.
#2.1 theyarecomingforyou on 22 Jan 2008 - 04:23
Indeed, as do I. It's sad to see so many ignorant posts in this topic, as is usual with anything related to the EU. This is designed to protect the consumer. I'm not going to pretend that the EU is some brilliant organisation with minimal corruption and completely altruistic intentions but I am happy with their general philosophy, which seems to be to protect the consumer (whether through measures like this or restricting anti-competitive behaviour from powerful companies). Even the campaign to remove imperial measures is designed to help the consumer by favouring the system taught exclusively in schools for decades and creating consistency between sellers.

The EU is in need of serious reform but at least it is getting some things right.
#2.2 Jugalator on 23 Jan 2008 - 10:06
I also don't see the problem here.

This will aid against companies wanting to have your IP released for whatever stupid reason. Now, it should usually need to at least be a police matter. That's a good thing.
(1 reply) #3 lylesback2 on 21 Jan 2008 - 22:29
wow... an IP address is someones personal information? I can see how it could be considered that, but it's your link to the internet. without IP traces, we would have a dramatic increase in pedophiles and dos attacks
#3.1 Jugalator on 23 Jan 2008 - 10:08
What?

Paedophilia is a crime as well as DDOS attacking, and the police has the rights to unveil the personal information of criminals. Actually, that's much of their job. This will not apply to criminal activities

Last edited by Jugalator on 23 Jan 2008 - 10:15
(1 reply) #4 z0phi3l on 21 Jan 2008 - 23:09
They'll say anything to try and stick it to an American Corp, wont they?
#4.1 daPhoenix on 21 Jan 2008 - 23:37
Yes yes, EU is evil and their intent is to destroy the American capitalism.

Now, if you actually knew what you were talking about you'd know how much the US gov't has done in the past 20 years to protect your "home market" - preventing foreign businesses from introducing products by delaying them until your local provider has been able to duplicate the technology or product, enforcing taxation or simply barring the product - once again until miracously it gets approved once a US bsaed company releases it.

"Take a look around" - perhaps you'd see how much your own little system has done to "stick it to non-US businesses".
(4 replies) #5 PermaSt0ne on 21 Jan 2008 - 23:13
it's not personal info

most people are designated a random IP address from their provider

it requires the ISP to actually look up who was using it at the time. the logs of IP addresses on ISP servers should be personal info since that's the only thing that actually links the random number to you. but it can't be since it's the ISP's logs and the ISP's servers
#5.1 daPhoenix on 21 Jan 2008 - 23:38
And there are millions of people with fixed IP addresses - such as myself, thus my IP is directly my personal information - hence I would be more than interested to enforce some level of data protection on it.
#5.2 +TCLN Ryster on 22 Jan 2008 - 00:42
(daPhoenix said @ #5.1)
And there are millions of people with fixed IP addresses - such as myself, thus my IP is directly my personal information - hence I would be more than interested to enforce some level of data protection on it.

+1 Agreed
#5.3 Arch on 22 Jan 2008 - 02:04
(TCLN Ryster said @ #5.2)
(daPhoenix said @ #5.1)
And there are millions of people with fixed IP addresses - such as myself, thus my IP is directly my personal information - hence I would be more than interested to enforce some level of data protection on it.

+1 Agreed

But there are methods available to you which allow you to protect your own personal data. What can these organizations do to make you safer when your personal information is available to anyone online? You need to get a rotating IP if you're concerned about your privacy that much.
#5.4 +Lt-DavidW on 22 Jan 2008 - 09:33
(TCLN Ryster said @ #5.2)
(daPhoenix said @ #5.1)
And there are millions of people with fixed IP addresses - such as myself, thus my IP is directly my personal information - hence I would be more than interested to enforce some level of data protection on it.

But there are methods available to you which allow you to protect your own personal data. What can these organizations do to make you safer when your personal information is available to anyone online? You need to get a rotating IP if you're concerned about your privacy that much.

We shouldn't have to work around companies not prepared to protect our personal information. When we provide companies with personal information, it's their responsibility to keep that data protected.
(2 replies) #6 evo_spook on 21 Jan 2008 - 23:15
I agree with them, it should be private, its like your home address
#6.1 vetmarkjensen on 22 Jan 2008 - 02:16
Hmmm... yes. And people with whom you communicate (in this case, by mail), whether friends or companies that you have businesses with (utilities, magazine subscriptions, etc) need to have your address. And, in fact it is public and shared.
#6.2 +Lt-DavidW on 22 Jan 2008 - 09:37
(markjensen said @ #6.1)
Hmmm... yes. And people with whom you communicate (in this case, by mail), whether friends or companies that you have businesses with (utilities, magazine subscriptions, etc) need to have your address. And, in fact it is public and shared.

But your home address is still regarded as personal information, rightly so in my opinion. You wouldn't post your home address on a social networking site because it is not public and shared, it's personal.
#7 icat on 22 Jan 2008 - 23:01
I don't think that an IP should identify a certain person. It's the question of privacy. I don't want anyone else to know what I read in the morning and which news portal I prefer over another, not considering from whom I get mails and so on.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)