Anonymous Sessions?

[Peter Schober]

* Andy Bennett <andyjpb at knodium.com> [2014-06-23 15:58]:
> I was under the impression that pseudonymous NameIDs *were*
> unfortunately considered PII in some jurisdictions (politics being what
> is it :-().

That was not the main point I wanted to make, but anyway:
There are contradictory rulings from european courts (not on NameIDs
but on the PII-or-not status of IP adresses, which some consider a
similar test case) and there are differing national implementations of
the EU data protection directive, some with more sensible wording
(e.g. those limiting the PII status to information the SP itself can
legally use to make the link to the subject represented), some less
so.

If anyone is under the impression I was giving legal advice on a
software mailing list s/he is mistaken.
-peter