Without giving too much away, I'm contemplating on designing a service/app for a specific business to monitor certain static IPs such as their service providers and other statically connected devices (cameras, routers, etc.). An internally underlining set of these statically connected devices are through a VPN router which I can obtain access through from the matching VPN client, while the root of the devices would all be available publicly. The need is too simply ping each device and monitor uptime and potentially latency.

What I'm curious about are what are the legal implications of collecting and storing information such as this? Obviously this is something the customer base would be well informed of.

From a few quick google searches, tools with similar functionality seem to have clients install their software on their remote servers so that they can see it from a web based portal or app, which would avoid the storing of such info I'd assume. Since my service needs are relatively simple, I don't think it is necessary (nor possible with this particular company) to provide such software.



P.S. Only US clients for the time being.

closed as off-topic by PwdRsch, Xander, Steffen Ullrich, Robert Mennell, Serge Ballesta Apr 25 '17 at 14:05

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about Information security within the scope defined in the help center." – PwdRsch, Xander, Steffen Ullrich, Robert Mennell, Serge Ballesta
If this question can be reworded to fit the rules in the help center, please edit the question.

  • 1
    I'm not sure that this is the correct forum for a legal question. Much of your answer is going to depend on the legal jurisdiction, both yours, and the legal jurisdiction of the service providers. In addition, the terms and conditions of the services provided may preclude such activities. – user52472 Apr 24 '17 at 15:21
  • Sorry, I saw other such questions posted here. Any suggestions on other forums? – Gerneio Apr 24 '17 at 15:37
  • 1
    You could try law.stackexchange.com with a proper context of what you intend to do, from where, and for whom I guess. – M'vy Apr 24 '17 at 15:52
  • IP addresses are like phone numbers, and they are always logged and retained by http logs. – dandavis Apr 24 '17 at 22:33
  • Maybe you could also have a look to SNMP as your are speaking of devices uptime. – Serge Ballesta Apr 25 '17 at 14:05

Browse other questions tagged or ask your own question.