EU Court of Justice rules that dynamic IP addresses are personal data in certain circumstances

The Court of Justice of the EU has ruled that the dynamic Internet protocol (IP) address of a website visitor constitute personal data, if the website operator has the legal means  allowing it to identify the visitor with additional information held by the Internet access provider. The Court has also stated in its judgement that the operator of a website may have a legitimate interest in storing certain personal data relating to visitors to that website in order to protect itself against cyberattacks.