IP addresses can be uniquely identifying. I've had the same IP for years, it's static, and if you did a Google search for it a few years ago, you got straight to my full name and location (because that used to be on whois database for my domain names, which point at my IP; thankfully they no longer include that info in whois).
They don't meet the legal standard for identifying in the US so I think it's suspect to assume they are identifying in other contexts. I know some people will try.
Comments
Why should anyone care what your company thinks?
IP addresses aren't uniquely identifying. I think GDPR only considers them PII with additional information, no?
IP addresses can be uniquely identifying. I've had the same IP for years, it's static, and if you did a Google search for it a few years ago, you got straight to my full name and location (because that used to be on whois database for my domain names, which point at my IP; thankfully they no longer include that info in whois).
They don't meet the legal standard for identifying in the US so I think it's suspect to assume they are identifying in other contexts. I know some people will try.
IPs are personal data.
see https://gdpr.eu/eu-gdpr-personal-data/ section "Identifiable individuals and identifiers"
IPv6 without privacy extensions is pretty close to uniquely identifying.