GDPR compliance and Blockchain - How are two of the biggest technology issues of today linked?


There are concerns that the now-active General Data Protection Regulation (GDPR) and distributed ledger technology are incompatible, most likely stemming from the notion that, by virtue of a blockchain’s inherent public and transparent nature, it is far too accessible to be safe for enterprise use. 
This is not actually the case. While transactions can be seen occurring across the network, the data in and of itself is not stored on the blockchain – instead, a cryptographic hash is derived from the data and is then uploaded.
Blockchain-based platforms enable the storage and provenance of data to be conducted in an anonymous fashion – protocols can be built in such a way that allows for the destruction of certain data sets, in compliance with GDPR requirements. Contrary to popular belief, and given that blockchain solutions will use such a mechanism, GDPR will see increased adoption of blockchain tech.
If anything, GDPR has prompted a renewed understanding of the importance of secure data storage. It is doubtful that the legislation will interfere with existing or future blockchain systems (provided, of course, that these are truly distributed), which aim to put information back in the control of its owners.
First passed into law in April of 2016, the EU GDPR regulations came into effect on May 25th, 2018. As the EU’s response to an increasingly theft-prone personal data environment, these regulations aim to protect consumer data integrity and enforce enterprise security measures focused on such.
One of the defining features of the new regulations is that of “privacy by design”. Rather than building a system and “adding” privacy and security as a secondary concern, the EU stipulates, the system must be designed in such a way that minimizes extraneous data collection and guards that which is necessary for operations. 
Luckily, distributed ledger technology is designed to be both intensely private and equally secure.  
Firstly, the public and private key system allows participants to send and receive data with nearly perfect anonymity, depending on the application. The private key allows for access, while the public key is an address for inter-user transaction detached from any personally identifying elements. 
Additionally, by decentralizing transaction processing, distributed ledger systems remove the vulnerabilities commonly exploited in centralized data repositories. Rather than allowing for an identifiable single point of failure, a blockchain ledger makes single-breach failures a near impossibility. 
One of the other critical features of a GDPR-compatible blockchain service is immutability. In order to rely on evidence of GDPR compliance, all parties must be able to trust that it is complete, accurate and unchanged. This can only be achieved by using blockchain to record transactions. 
When digital records, such as data transactions, events, and documents, are delivered to the platform, it creates a unique signature for each. It then stores these signatures in an unchangeable ledger, called a proof chain.  
When new evidence seals are made, the evidence owner receives a receipt with a token to enable proof certificates based on those seals to be obtained whenever they are needed. These proof certificates can verify claims for all parties involved, providing clear evidence of an action or claim.
In the increasingly regulated world of data collection, storage, and security, blockchain provides the most reliable route towards compliance with new and upcoming international regulations. The decentralized and minimally invasive nature of the blockchain platform follows new GDPR principles of privacy by design, and the immutability and availability of a proof chain implementation ensures resistance to malicious (or negligent) data corruption. 
While future political steps may complicate the landscape further, blockchain currently presents the most viable option for companies looking to ensure total GDPR compliance. 
Adrian Clarke is founder of tech start-up Evident Proof and CEO of Berkshire Cloud

Comments

Post a Comment

Popular posts from this blog

Curacao UTS : The following were discussed: 1. Existing (older) telecommunications systems are copper based, but all new development is done with fiber optics. 2. Fiber optics are run to the curb in existing developed areas and run all the way to the home in new developments. 3. Fiber optics are installed underground simultaneously with electric. 4. UTS􀁰 concession mandates that they bring service to the home.

Image
Curacao UTS - Langan International Eric Schwarz: Curacao UTS : The following were discussed:  1. Existing (older) telecommunications systems are copper based, but all new development is done with fiber optics.  2. Fiber optics are run to the curb in existing developed areas and run all the way to the home in new developments.  3. Fiber optics are installed underground simultaneously with electric.  4. UTS􀁰 concession mandates that they bring service to the home. Curacao UTS - Langan International Eric Schwarz: Curacao UTS - Langan International Eric Schwarz: Eastpoint Planning Study 􀁴 United Telecommunications Services (UTS) https://childtraffickingorgans.blogspot.com/2019/01/curacao-uts-langan-international-eric.html
Read more

YES FAKE NEWS SITES EXIST AND THIS IS WHY DISCERNMENT IS KEY | NPR REPORTER TRACKED DOWN A FAKE-NEWS CREATOR; HERE’S WHAT SHE LEARNED

Image
YES FAKE NEWS SITES EXIST AND THIS IS WHY DISCERNMENT IS KEY | NPR REPORTER TRACKED DOWN A FAKE-NEWS CREATOR; HERE’S WHAT SHE LEARNED Posted by Madeline | Nov 29, 2016 | 2016 , Conspiracy, Cabal, and Government , Daily Blog , News, Media | 0 | Stillness in the Storm   (Stillness in the Storm Editor) The following article written by an NPR reporter who tracked down a fake news author is quite revealing. It was shared on Jimmy Church’s Facebook page, and I thought it would be a good example of why discernment is so important during these shifting times. The reporter tracked down the writer of a fake article entitled “FBI Agent Suspected In Hillary Email Leaks Found Dead In Apparent Murder-Suicide.” This post was shared in the SITS Facebook group several times, and it was personally sent to me as well. But after looking through the article and searching for other outlets to confirm data points presented therein, I was not able to find anything to substantiat...
Read more