Hacker News new | comments | show | ask | jobs | submit login
Ask HN: Is an IP address sensitive data?
4 points by skennedy 1722 days ago | hide | past | web | 2 comments | favorite
When data is released it is usually scrubbed of PII. Information like names, birthdays, addresses, etc. I am wrestling with opening data from my startup but cannot make a decision on user IP address data. Are there precedents for or against providing this kind of information in an open dataset?

IP Addresses are PII, you should generally scrub those. If you, for example, wanted to be in NAI, Network Advertising Initiative, you'd be required to delete IP addresses in log files.

Also, addresses can be tied to other actions across the web to build a profile.

One can geolocate well enough with many IP addresses that, with a bit of additional data if not solely using the IP address, the request source is quite identifiable.

Even several years ago (i.e. in "less sophisticated" times), I had a few occasions to do this manually. The experience was eye-opening. (It's one thing to understand the concept. It's another to drill down and target someone in a matter of minutes, if not moments.)

Guidelines | FAQ | Support | API | Security | Lists | Bookmarklet | DMCA | Apply to YC | Contact