Storing of IP addresses

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Guest

    Storing of IP addresses

    Hi,

    The storing of IP addresses is illegal in the European Union, unless they are being logged for protection against cyberattacks - c.f. CJEU Case C‑582/14 Patrick Breyer v Bundesrepublik Deutschland.

    How do we prevent vBulletin from storing IP addresses to comply with these legal requirements
  • Mark.B
    vBulletin Support
    • Feb 2004
    • 24286
    • 6.0.X

    #2
    You've misinterpreted that case. It doesn't state that storing IP addresses is illegal. It merely states that storing of IP addresses is covered by relevant data protection laws.
    http://www.whitecase.com/publication...rotection-laws

    It's worth noting that practically every major web application logs IP addresses in some way. It's how the internet works.

    To answer the question, no there's no way to turn it off in vBulletin.
    MARK.B
    vBulletin Support
    ------------
    My Unofficial vBulletin 6.0.0 Demo: https://www.talknewsuk.com
    My Unofficial vBulletin Cloud Demo: https://www.adminammo.com

    Comment

    • Guest

      #3
      No, I've not misinterpreted it. Article 6(1)(e) of the European Data Protection Directive (96/46/EC) states that personal data (i.e. now an IP address, static or dynamic) may not be stored for longer than is necessary for the purposes for which the data were collected. vBulletin stores them forever, this is considered to be excessive, and thus illegal.

      I'm aware of how the internet works thanks, and as you said every major web application stores IP addresses, but they don't store them forever.

      Comment

      • Mark.B
        vBulletin Support
        • Feb 2004
        • 24286
        • 6.0.X

        #4
        Well forums require IP addresses 'forever' for such matters as spam management, or for tracing users upon request of the authorities. The likes of StopForumSpam have permanent logs of spammer IPs. There are so many instances of it happening it's impossible to quantify. However, if it is of concern you can always periodically empty the relevant database tables, or even create a cron to do it.

        Plenty of web servers keep indefinite logs of IP addresses, I really don't think that's the intention of any such law, however I'm not a lawyer.
        MARK.B
        vBulletin Support
        ------------
        My Unofficial vBulletin 6.0.0 Demo: https://www.talknewsuk.com
        My Unofficial vBulletin Cloud Demo: https://www.adminammo.com

        Comment

        • Paul M
          Former Lead Developer
          vB.Com & vB.Org
          • Sep 2004
          • 9886

          #5
          Originally posted by munkyjim
          The storing of IP addresses is illegal in the European Union
          No it isnt.

          every major web application stores IP addresses, but they don't store them forever.
          vBulletin stores them forever, this is considered to be excessive, and thus illegal.
          Nothing is stored "forever". I dont know a single application that purposely removes them, please name some.

          vBulletin stores them for as long as the forum is active, which is fine, or to quote you - it is "necessary for the purposes for which the data were collected".

          (Not to mention, IP addresses alone are not personal information anyway).
          Baby, I was born this way

          Comment

          • th3gr3aton3
            Senior Member
            • Oct 2009
            • 141

            #6
            The ruling did classify dynamic IP addresses as personal, but it also said websites could store them to prevent "cyber attacks", which is a broad term. Basically there would be no violation in the case of a forum due to the IP addresses being used for cyber security.

            Comment

            widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
            Working...