Skip to main content
Information Security

Return to Question

Copy edited.
Source Link
edit approved Jan 30, 2019 at 23:14
Peter Mortensen
edit approved Jan 30, 2019 at 23:14
Peter Mortensen
  • 897
  • 5
  • 10

Is displaying email addresses in an application log file allowed under GDPR?

I'm working on an application that is completely built upon user interaction. In my application logs, I log each interaction and print the email address to uniquely identify which user did which interaction.

This application log will not be visible to anyone other than:

  • Me
  • The next owner of the application if I would sell the project
  • An administrator I might hire if the workload get'sgets too big

An example of a log record is something like this:

2019-01-24 14:27:20.954 INFO 32256 --- [whatever-info] s.p.s.t.d.m.s.SomeClassThatPrintsTheLog : Registering user with email address [email protected].

Is this allowed under GDPR or should I mask the printed email address in any way? Or use another solution?

Is displaying email addresses in application log file allowed under GDPR

I'm working on an application that is completely built upon user interaction. In my application logs, I log each interaction and print the email address to uniquely identify which user did which interaction.

This application log will not be visible to anyone other than:

  • Me
  • The next owner of the application if I would sell the project
  • An administrator I might hire if the workload get's too big

An example of a log record is something like this:

2019-01-24 14:27:20.954 INFO 32256 --- [whatever-info] s.p.s.t.d.m.s.SomeClassThatPrintsTheLog : Registering user with email address [email protected].

Is this allowed under GDPR or should I mask the printed email address in any way? Or use another solution?

Is displaying email addresses in an application log file allowed under GDPR?

I'm working on an application that is completely built upon user interaction. In my application logs, I log each interaction and print the email address to uniquely identify which user did which interaction.

This application log will not be visible to anyone other than:

  • Me
  • The next owner of the application if I would sell the project
  • An administrator I might hire if the workload gets too big

An example of a log record is something like this:

2019-01-24 14:27:20.954 INFO 32256 --- [whatever-info] s.p.s.t.d.m.s.SomeClassThatPrintsTheLog : Registering user with email address [email protected].

Is this allowed under GDPR or should I mask the printed email address in any way? Or use another solution?

Tweeted twitter.com/StackSecurity/status/1089855794928119808
Source Link
Titulum
Titulum
  • 443
  • 1
  • 4
  • 8

Is displaying email addresses in application log file allowed under GDPR

I'm working on an application that is completely built upon user interaction. In my application logs, I log each interaction and print the email address to uniquely identify which user did which interaction.

This application log will not be visible to anyone other than:

  • Me
  • The next owner of the application if I would sell the project
  • An administrator I might hire if the workload get's too big

An example of a log record is something like this:

2019-01-24 14:27:20.954 INFO 32256 --- [whatever-info] s.p.s.t.d.m.s.SomeClassThatPrintsTheLog : Registering user with email address [email protected].

Is this allowed under GDPR or should I mask the printed email address in any way? Or use another solution?