Remember the Breyer case, when the CJEU ruled that IP may constitute ‘personal data’ when there are means likely reasonably to be used (with the ISP) to identify the individual – and assumed such means on this case. Well, the Hague district court just assumed differently for the Hague municipality, considering that the efforts required for them to identify all individuals with the ISP to be disproportionate for a subject access request and therefore ruled that in such a case IP is not 'personal data'.
Comments