>>> If the geofeed doesn't contain the above mentioned means to directly
>>> or indirectly identify a natural person then GDPR don't apply,
>>> especially if the geofeed refers only to a country or province.
>>
>> note that the geofeed spec, RFC8805, is separate from the rpsl-based
>> means to
As far as I'm aware, since IP addresses _can_ uniquely identify a person
(think of static IPs offered by some ISPs), it is considered personal data
by authorities.
GDPR leaves a huge grey area that is up to interpretation, which in
practice boils down to companies trying to avoid even said grey