GDPR

Briefly, the Blocklist Network Service (BNS) doesn’t collect personal data, and bots don’t have rights.

That said, the BNS only collects the minimum data required (time, IP, event), and only for IPs that have behaved maliciously.

Of course, it is possible that some data is generated by people behaving maliciously, but the BNS has no way to differentiate – and nor should it: an attack is an attack.