The CJEU ruled that dynamic IP addresses may under certain circumstances constitute "personal data" provided that a third party (in this case an internet service provider) has the additional data necessary to identify the individual. The judgment may have a significant impact on online analytics and targeting.