I've been banging the same drum...
...for 20 years at least.
If *any* organisation gives a damn about privacy, the simplest step they can take is to *not store the information in the first place*!
Why would a newspaper log the IP address of everyone who reads a story in the first place?! I mean you can wave arms about cookies and targeted ads and goodness knows what else, but why keep that log file? That's data you simply shouldn't have.