IP-based Subject Access Requests Denied

03/01/2021
by   Supriya Adhatarao, et al.
0

Understanding the legal status of IP addresses is complex. In Europe, the General Data Protection Regulation (GDPR) is supposed to have leveraged the legal status of IP addresses as personal data, but recent decisions from the European Court of Justice undermine this view. In the hope to clarify this situation, we have looked on how 109 websites deal with IP addresses. First, we analyzed the privacy policies of these websites to determine how they considered IP addresses. Most of them acknowledge in their privacy policy the fact that IP addresses are personal data. Second, we submitted subject access requests based on the IP addresses used to visit different websites. Our requests were often denied. Websites justify their answers with different explanations suchlike: you need to register, or IP addresses do not allow to identify you, to name a few. This situation is rather frustrating for any user wanting to exercise his/her rights: IP addresses are personal data on (legal) papers, but there are no means to exercise the rights thereto. One maybe tempted to say that IP addresses are not personal data. We make several proposals to improve this situation by modifying how IP addresses are allocated to a user.

READ FULL TEXT
research
09/20/2023

Legitimate Interest is the New Consent – Large-Scale Measurement and Legal Compliance of IAB TCF Paywalls

Cookie paywalls allow visitors of a website to access its content only a...
research
11/06/2019

Polymorphic Encryption and Pseudonymisation of IP Network Flows

We describe a system, PEP3, for storage and retrieval of IP flow informa...
research
11/12/2022

We have to go back: A Historic IP Attribution Service for Network Measurement

Researchers and practitioners often face the issue of having to attribut...
research
02/16/2021

Domain Name Encryption Is Not Enough: Privacy Leakage via IP-based Website Fingerprinting

Domain name encryptions (DoTH and ESNI) have been proposed to improve se...
research
05/24/2023

Machine Unlearning: its nature, scope, and importance for a "delete culture"

The article explores the cultural shift from recording to deleting infor...
research
06/25/2019

Differences in Online Course Usage and IP Geolocation Bias by Local Economic Profile

Although Massive Online Open Courses (MOOCs) have the promise to make ri...
research
06/06/2020

IP Geolocation Underestimates Regressive Economic Patterns in MOOC Usage

Massive open online courses (MOOCs) promise to make rigorous higher educ...

Please sign up or login with your details

Forgot password? Click here to reset