Device Data

Information about the device used to access services, including device type, operating system, browser, screen resolution, device identifiers, IP address, and technical specifications. Device data is collected by most websites and apps to enable functionality, detect fraud, provide appropriate content formatting, and analyze usage patterns. While device data may seem technical rather than personal, it constitutes personal data when it relates to identifiable individuals—which is often the case when combined with other information like IP addresses, cookies, or account data. Privacy laws require transparency about device data collection, appropriate lawful basis, and security protections. Device fingerprinting (creating unique device signatures from multiple data points) raises particular privacy concerns as it enables tracking without cookies. Organizations should disclose device data collection, limit collection to necessary data, secure device data appropriately, and provide user controls where feasible.