Breyer Case of the Court of Justice of the European Union: IP Addresses and the Personal Data Definition (Case Note)

European Data Protection Law Review 2017, Volume 3, Issue 1

17 Pages Posted: 7 Jun 2017

Date Written: June 6, 2017

Abstract

The Breyer case of the Court of Justice of the European Union (CJEU) primarily concerns the question whether a website visitor’s dynamic IP address constitutes personal data for a website publisher, when another party (an internet access provider) can tie a name to that IP address. In essence, the Court finds that an IP address constitutes personal data for the website publisher, if that publisher has the legal means to obtain, from the visitor’s internet access provider, additional information that enables the publisher to identify that visitor. In this case note, I summarise the facts and the judgment, and add a few comments.

Keywords: personal data, privacy, data protection, IP address, identification, anonymisation, General Data Protection Regulation, GDPR, CJEU

JEL Classification: K12, K00, D10, D11, D20, D30, D40, D60, D70, L00, L11, L20, L51

Suggested Citation

Zuiderveen Borgesius, Frederik, Breyer Case of the Court of Justice of the European Union: IP Addresses and the Personal Data Definition (Case Note) (June 6, 2017). European Data Protection Law Review 2017, Volume 3, Issue 1 , Available at SSRN: https://ssrn.com/abstract=2933781

Frederik Zuiderveen Borgesius (Contact Author)

iHub, Radboud University, Nijmegen ( email )

Nijmegen
Netherlands

Do you have a job opening that you would like to promote on SSRN?

Paper statistics

Downloads
593
Abstract Views
2,415
rank
56,372
PlumX Metrics