Good question. A lot of people are under the impression that Whois Lookups such as this will be a defunct thing of the past after the GDPR (General Data Protection Regulation) requirements went into effect. But, in reality, this is not necessarily the case.
See, The GDPR states that you can only collect and keep personal data if you have a legitimate ground to do so, and if you comply with the following prerequisites:
- The person whose data you are storing has given you unambiguous consent to do so;
- You need the data for a contract the person has entered;
-There is a legal obligation to you, for which you need the data;
The data is necessary to protect the individual’s vital interests;
-You need the data to administer justice.
Personal data, in this case, is defined as any information that can lead back to the individual. It includes online identifiers like their IP-address.