A user has supplied personal information in an anonymous form. What is this information’s status under GDPR?

I am implementing a user feedback function in an application for my employer. The feedback is anonymous, but users can enter any text in the form.

If a user includes personal information (e.g. their email) in the form, what… Continue reading A user has supplied personal information in an anonymous form. What is this information’s status under GDPR?

Anonymizing IP addresses using (sha) hashes; how to circumvent rainbow table attacks?

Under GDPR, IP addresses are personal data. I have no need to trace back IP to specific users, but I would like to limit downloads to one per IP.* I do not want to store plain IPs.

My first solution would be to hash the IP. … Continue reading Anonymizing IP addresses using (sha) hashes; how to circumvent rainbow table attacks?