Hacker News Reader

Which law requires you to log the IP address used to connect to your service?

In the EU, I'm afraid, the answer would be: plenty. Look at French law for instance.

Can you give more specifics? "French law" is quite broad.

Sure!

https://www.legifrance.gouv.fr/jorf/id/JORFTEXT000023646013

On the books since 2011. Upheld in a recent decision of France's supreme court despite what some thought to be quite clearly contrary EU caselaw (which takes precedence over national law, roughly speaking) https://www.nextinpact.com/article/45613/comment-conseil-det...

Switzerland required ProtonMail to log ip addresses.

https://threatpost.com/protonmail-log-ip-address-french-acti...

From that article: “The internet is generally not anonymous, and if you are breaking Swiss law, a law-abiding company such as ProtonMail can be legally compelled to log your IP address.”

No, why would they be? Just because everyone else logs more info than they should doesn't mean everyone has too.

They have your phone number and (trivially reversible hashes of) your phonebook.

They must keep this data hot because they can send "this specific person in your phonebook just installed signal" messages.