Both cookies (small pieces of data stored on a web surfer’s computer) and IP addresses (a code used to identify a computer when it is connected to the Internet) would be included – even though neither provides a link to a particular individual. At best, this broad, indiscriminate definition of personal data threatens to create unnecessary obstacles for EU-based digital advertisers.