Thread:Talk:Requests for comment/Structured logging/IP address and other personal identifying information/reply (7)

EFF best practices may contain some useful tips, I think: https://www.eff.org/wp/osp (for instance around "Other key solutions to wipe PII from logs"). Most of that is probably not relevant or already in progress (e.g. EventLogging/UserAgentSanitization), but dropping the link here can't harm I think. :)