Fintech & Regulations•September 1, 2026
European Court of Justice Clarifies Dynamic IPv6 Addresses Constitute Protected Personal Data
The CJEU has ruled that web analytics and font CDNs collecting dynamic IPv6 addresses must obtain explicit user consent prior to logging connection handshakes.
Official Press Release
CJEUGDPRIPv6Web PrivacyCompliance
In a landmark judgment (Case C-482/24), the European Court of Justice (CJEU) reaffirmed that dynamic IPv6 addresses constitute protected personal data under GDPR Article 4(1), even when server administrators do not possess secondary identification keys.
The ruling clarifies that third-party content delivery networks and tracking scripts cannot claim 'legitimate interest' to collect user IP addresses without providing clear, granular opt-in mechanisms.
Subscribe for Updates
Get official press announcements and version releases sent directly to your email.