• towerful@programming.dev
    link
    fedilink
    English
    arrow-up
    0
    ·
    9 months ago

    Depends where and how its applied.
    Under GDPR, IP addresses are essential to the opperation of websites and security, so the logging/processing of them can be suitably justified without requiring consent (just disclosure).
    Under CCPA, it seems like it isnt PII if it cant be linked to a person/household.

    However, an ip address isnt needed as a part of AI training data, and alongside comment/post data could potentially identify a person/household. So, seems risky under GDPR and CCPA.

    I think Reddit would be risking huge legal exposure if they included IP addresses in the data set.
    And i dont think google would accept a data set that includes information like that due to the legal exposure.

    • just_change_it@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      9 months ago

      ML can be applied in a great number of ways. One such way could be content moderation, especially detecting people who use alternate accounts to reply to their own content or manipulate votes etc.

      By including IP addresses with the comments they could correlate who said what where and better learn how to detect similar posting styles despite deliberate attempts to appear to be someone else.

      It’s a legitimate use case. Not sure about the legality… but I doubt google or reddit would ever acknowledge what data is included unless they believed liability was minimal. So far they haven’t acknowledged anything beyond the deal existing afaik.