PRESS RELEASE No 112/16
Luxembourg, 19 October 2016
Judgment in Case C-582/14
Patrick Breyer v Bundesrepublik Deutschland
The operator of a website may have a legitimate interest in storing certain personal
data relating to visitors to that website in order to protect itself against cyberattacks
The dynamic internet protocol address of a visitor constitutes personal data, with respect to the
operator of the website, if that operator has the legal means allowing it to identify the visitor
concerned with additional information about him which is held by the internet access provider (Link)
