Yesterday (October 19, 2016) the Court of Justice of the European Union (CJEU) issued its judgment in case Patrick Breyer v. Bundesrepublik Deutschland, in which court recognizes that dynamic IP addresses registered by websites are personal data. CJEU followed the Opinion of the Advocate General delivered earlier this year.
In its decision CJEU concluded that website operators and other online services providers would have the means to identify the website user and that there is reasonable probability that such means be used, e.g. in case of cyber attacks. Therefore dynamic IP addresses shall be considered personal data.
Read press release and full text of judgement.