When Blockchain Meets the Right to Be Forgotten: Technology versus Law in the Healthcare Industry

Abstract

In this work we propose a new blockchain model that ensure the GDPR compliance by handling references to the sensitive data and using metadata instead of manipulate private data directly within the blockchain. We accomplish this by defining a modular architecture that relies on strong cryptographic assumptions that provide the means to guarantee that the right to be forgotten is being well enforced.