Logs Privacy Concerns

The cluster centers on debates about server logs containing PII, GDPR/CCPA compliance risks, skepticism toward no-logging claims, and challenges in verifying or trusting log policies.

➡️ Stable 0.6x Security
3,311
Comments
20
Years Active
5
Top Authors
#7042
Topic ID

Activity Over Time

2007
4
2008
9
2009
30
2010
44
2011
88
2012
91
2013
117
2014
121
2015
123
2016
126
2017
143
2018
400
2019
342
2020
276
2021
314
2022
287
2023
258
2024
231
2025
292
2026
15

Keywords

HAVE SERVER HOW THOSE OK CCPA E2E UI THE HN logs logging log pii data sensitive raw audit store access

Sample Comments

Fnoord Jun 28, 2022 View on HN

Do you save logs? If yes, there's your PII.

f1codz Apr 27, 2022 View on HN

What is the concern with these logs? Do they contain end user information? May be IP, anything else?

fabulist Dec 18, 2015 View on HN

Unless someone tampered with the logs, of course.

aiiane Nov 30, 2020 View on HN

+1 this seems like a GDPR/CCPA nightmare when it comes to potentially spewing user data into logs.

jimktrains2 May 13, 2018 View on HN

Are you also against access logs?

jtsiskin May 29, 2021 View on HN

Assuming you trust they aren’t saving any logs..

nudgeOrnurture Aug 7, 2025 View on HN

you could explain that to ChatGPT and it would agree but then again, if you HAVE TO keep the logs ...

SilasX Jun 30, 2013 View on HN

You can't. It's not a technical problem, because you can always log access. The problem is trusting the logger to be configured properly and to correctly report results.I pointed this out on the original HN discussion:https://news.ycombinator.com/item?id=5964763

dylan604 Jun 16, 2025 View on HN

what exactly would this be breaking? it's an analysis of logs, not providing access to services.

swiley Jun 4, 2021 View on HN

SCRAPE THE SERVER LOGS, THEY CAN'T TELL AND YOUR USERS WILL THANK YOU.