Do I really have to log a user's IP address and a timestamp after they consent to a cookie?

Log example: 20.05.2018 18:56:32 - - Cookie accepted

I don't even need (I'm not using it in any way) personal data like IP address in my website.

  • Why are you asking this here on Law?
    – Greendrake
    Commented May 21, 2018 at 12:32
  • 3
    Where should I ask about GDPR I thought GDPR = law section. I'm not asking how to do it, I'm asking if I have to do it to comply with GDPR.
    – kironet
    Commented May 21, 2018 at 12:33

1 Answer 1



That is spelled out pretty clear in Article 11.

In fact, if you want follow accepted data minimisation principles (and you should), you should not log anything about cookies at your or a third party's website.

  • And how do you want to prove user's consent? Commented Oct 14, 2018 at 11:55
  • 1
    Where (in the GDPR) do you see a legal requirement to prove that the user consented to receive a cookie? Commented Oct 14, 2018 at 15:42
  • 1
    Art. 5 (2) GDPR Commented Oct 14, 2018 at 21:27
  • 2
    "Otherwise the user can simply state that it does not happened and you are in trouble." Thankfully, this is not how the law works. To be in trouble, the user must be able to prove to the regulatory authority (RA) that your website is not cookie compliant. Simply claiming that he/she was not presented with an option to consent to cookies will not do if software to do so is obviously installed on the website and working as it supposed to work. Commented Oct 16, 2018 at 4:25
  • 2
    Even if you would record the IP address, you still cannot prove user's consent, because you cannot prove the IP address belongs to a particular person. In particular when the user uses a mobile phone, he would be typically using a dynamic IP address issued by the mobile network operator, or he would be connected over wifi using an IP address shared by multiple users. In a similar question I suggested to use screenshots showing how your website works as a proof, that would also proof from which date your website is cookie compliant.
    – wimh
    Commented Oct 16, 2018 at 9:30

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .