I am happy to strip IP address for logged on users for those 3 cases, I don’t see it as adding any extra value anyway cause we have user_id.
If we want a log of all “historic” ip addresses a user had we need a different table for that. Storing IP addresses at random for logged on users is pointless.
Seems like and easy change to me, make ip_address nullable on the table, and then scrub.
I feel this whole line of argument is dangerous and bad.
- Remove IP address logging from X tables because it is pointless and adds no value and random liability.
VS
- Remove IP address logging for table because reasons.
(1) is a much much stronger and valuable argument that applies universally. GDPR is intended to protect privacy, demonstrate how privacy is potentially impacted and then make a case for the change