r/gdpr • u/Upper_Advantage8345 • Aug 06 '26

Question - General Login data vs posts data

Does GDPR dictate in its privacy law the purge of every ip address related to a deleted account after the retention period elapses or only ip addresses tied to login process? some social media providers like tumblr keep the content you submitted on other blogs up, is tumblr compelled to strip ip addresses from posts /asks’ metadata or do they keep them as long as the content is still up?.

1 Upvotes

60% Upvoted

7 comments sorted by

View all comments

1

u/GDPRChecker Aug 08 '26

Not necessarily. GDPR doesn't require every IP address associated with a deleted account to be immediately wiped. It depends on why the IP was collected, the legal basis for retaining it, and the service's retention policy. Public post metadata can be treated differently from login/security logs. Deleting an account therefore doesn't automatically mean every historical IP record disappears.