Smart Contract-based Consent Management System for Data Privacy Protection

Abstract

The PDPA laws are the first data privacy laws to protect all Thai citizens since 2018. The consent management system (CMS) is a core module of Thailand’s PDPA laws. It maintains complex and dynamic contents of user consent which are updated and changed all the time. The best network that can store a CMS’s historical data is blockchain while the best tool for maintaining it is a smart contract which works on Ethereum-based blockchain. This paper aims to apply the Smart contract technique to enhance a consent management system to perform a better data privacy service. This research paper proposes a Smart Contract-Based Consent Management System (SCCMS) as an innovative solution to enhance data privacy protection. By leveraging blockchain technology and smart contracts, the SCCMS aims to provide a transparent, secure, and decentralized framework for managing user consent, thereby ensuring greater control and transparency in the handling of personal data. Our experiment result outperforms a regular CMS system