Distributed ledger technology and European Union General Data Protection Regulation compliance in a flexible working context

Abstract

Abstract Compliance of distributed ledger technology (DLT) based solutions with the European Union General Data Protection Regulation (EU GDPR) is currently a hot topic both from a technical point of view, as well as from a legal and normative one. Flexible working is a new working model where employees can perform their work activity without specific time and space constraints. In this context privacy and information trustworthiness are relevant and, therefore, on the one hand it can gain benefit from using DLT based solutions, on the other hand it must comply with the GDPR. This paper describes a solution that combines DLTs and the new Ciphertext‐Policy Attribute Based Encryption cryptographic techniques to support compliance with the EU GDPR in the context of flexible working. The devised solution is being concretely experimented, in the context of the EU H2020 CITADEL project, by the Municipality of Bari (Italy).