The Advocate General of the Court of Justice of the EU has handed down a non-binding opinion in Patrick Breyer v. Federal Republic of Germany, declaring that IP addresses are personal data and as such should be protected by data protection laws. Specifically, he stated this would be the case where internet service providers held additional information that when combined with an IP address could reveal the identity of the user. While this opinion is not binding, it is highly persuasive and the Court is expected to hand down its final decision shortly.

The opinion (in German)