Comment by TheCoelacanth
1 day ago
No, you don't need consent for that. It falls under the legitimate interest exception.
You need to disclose it in your privacy policy, you need to delete it after a reasonable retention period and you can't use those logs for other purposes like ad targeting, but you don't need a consent banner to track things that you are legitimately using for security purposes.
>It falls under the legitimate interest exception.
What makes that a legitimate interest and not advertising?
Because preventing crime is drastically more important to having a functioning society than being able to target advertising slightly more accurately.
> and you can't use those logs for other purposes like ad targeting
This part I guess