Investigating the Compliance of the GDPR: Processing Personal Data On A Blockchain

Abstract

Blockchain is a relatively new technology which needs to comply with the General Data Protection Regulation (GDPR) when processing personal data. In this study, the researchers focus on the issue of whether or not a blockchain that processes personal data can comply with the GDPR. Subsequently, it is important to discuss the advantages and disadvantages of using a blockchain from a civilian's point of view, since it is their personal data that will be processed. Finally, the results of a literature research and multiple interviews, show that there is no unequivocal answer to the compliancy issue regarding blockchains. This study contributes by extending the ongoing discussion on the topic of GDPR compliance on blockchain by showing that two different tendencies exist: purists and fundamentalists. Purists believe that public blockchains are the only `real' blockchains and because of the characteristics those possess, it can never comply with the GDPR. Furthermore, all technical measures that try to comply with the principles of the GDPR will compromise the very existence of that blockchain. On the other hand, fundamentalists argue that it is possible to take certain technical measures to meet the requirements of the GDPR and these will not jeopardize the blockchain1.