IP-Geo-Block and the European law GDPR or DSGVO
-
Hello,
thank you for this wonderful plugin. First of all I am “no lawyer” and this contribution is “no” legal advice. Unfortunately, users of the plugin from Europe will no longer be allowed to use the plugin. For the EU has created a new legal situation the “gdpr”. Even WordPress requires some adjustments ( https://core.trac.www.ads-software.com/query?keywords=~gdpr )The law regulates the IP’s from 25 May 2018, simply put “worth protecting” are. This means that the previous queries to “external” IP databases for localization are no longer permitted.
This requires a “local” dump from e.g. https://dev.maxmind.com/geoip/geoip2/geolite2/ .
I have found an entry on the subject GDPR or DSGVO during the review so far. Is an extension or change planned here?
-
Hi @tatort,
Thank you for your suggestion. But I’m not sure you’re the actual user of this plugin, because this plugin already provide the following choice to users:
One thing I should consider in Logs is that whether the combination of anonymized IP address and user agent string could be a personal data or not:
Another thing I should consider is “IP address in cache”:
And I think that the most important thing is the purpose of this plugin, e.g. security which can be regarded (or considered) as “legitimate interests“, IMO.
Anyway, I’m also not a lawyer and I’m not providing legal aspects. So I’ll keep to research this subject. And I hope I can provide “GDPR compliant” button in the future because I believe we also have the right to protect out own site against the attackers.
Any ideas from anyone will be appreciated.
Thanks.
- The topic ‘IP-Geo-Block and the European law GDPR or DSGVO’ is closed to new replies.
