As already mentioned, GDPR does not require you to collect any data; in contrary - data minimization principle requires one to use as little as possible data. But when you use data you need to have a valid purpose (why you use data? what you want to achieve?) and legal grounds (for example - consent or your legitimate interest in e.g. ensure security of your site).There are though requirements in GDPR like to ensure proof of collecting consent or ensuring security of data processing (all activities related to data on individual). That's where collecting of IP may be needed.From your question, however, it seems that you do not know why you are registering IP addresses and how would you use them. So my suggestion is to stop collecting them until you define the specific need and way you will use them.
↧