Can Blockchain Technology Comply with New EU Data Protection Laws?

The General Data Protection Regulation (GDPR) comes into impact within the EU subsequent month. This new legislation is a significant change which revamps private knowledge safety for EU residents and established a brand new set of ‘digital rights’.

However, an article in Diar factors out that the legislation has apparently been written with out taking blockchain expertise under consideration in any respect – and there's a critical query as as to if an immutable blockchain can perform with out violating EU guidelines.

Data safety

GDPR extends knowledge safety for EU residents in a lot of ways in which might be thought-about incompatible with Blockchain expertise:

Firstly, it extends safety of EU residents to overseas corporations that course of their knowledge, and mandates the existence of an information safety officer in any respect companies that deal with related knowledge – which means that non-EU cryptocurrency exchanges will all of a sudden discover that lots of their clients now include a number of too many strings connected.

The new legislation codifies the correct of people to request that their knowledge be deleted – however the entire level of a blockchain is that knowledge can't be deleted.

It orders that residents be saved knowledgeable of how their knowledge is getting used and all selections made on their behalf – however in lots of instances, selections are made mechanically by a wise contract.

Penalties for non-compliance are steep – four % of an organization’s annual income (or as much as 20 million euros) will be levied in case of misconduct.

Some imagine that this new legislation is essentially inconsistent with the cryptocurrency trade. Jerry Brito, Executive Director of Coin Center, a Washington-based non-profit cryptocurrency advocacy analysis centre, mentioned: “The result of the law…may be that Europe is closing itself off from the future of the Internet to its detriment.”

What is private knowledge?

The European Commission defines private knowledge as “any information relating to an individual, whether it relates to his or her private, professional or public life. It can be anything from a name, a home address, a photo, an email address, bank details, posts on social networking websites, medical information, or a computer’s IP address.”

Does a non-public key fall beneath this definition, for instance? Brian Behlendorf, Executive Director of Hyperledger, thinks not; he informed Diar: “The point of a public key is to intentionally share it so other participants can verify the signature. There isn’t something that it reveals about person unlike other Personally Identifiable Information (PII) like IP addresses.”

Others disagree. Tim Swanson, former Director of Market Research at R3, mentioned: “From a theoretical and academic standpoint, it makes sense that public keys could be personal data because they are connected to specific persons. Therefore, they can violate GDPR. However, this has not been tested in court yet so there is no concrete answer.”

Tanya Moeller and Simon Schwerin of the Blockchain Association of Ireland, writers of a report on the topic printed in June 2017, informed Silicon Republic: “As usual, technological innovations challenge the manner in which laws are applied.”

Private keys are solely one of many doable points. The new legislation orders that pseudonymous knowledge be saved individually from actual knowledge. The outlawing of nameless transactions blockchain will not be unique to the EU; comparable legal guidelines have been handed by South Korea and Bangladesh, whereas in Malaysia, Japan and the US, cryptocurrency exchanges are required to confirm customers’ identities – Japan just lately got here down onerous on Binance for not confirming its clients’ identities. Meanwhile, Israel is on the brink of tax cryptocurrency customers on their beneficial properties.

In reality, anonymity (or reasonably, pseudonymity) will not be a central aspect of blockchain expertise. However a big a part of the attraction of cryptocurrency is that it provides folks the choice of bypassing the standard monetary system, and to that finish pseudonymity is significant. This is one cause why cash like Monero are changing into so common.

One firm is engaged on an editable blockchain – Accenture factors out that by doing this will probably be one of many few corporations that may be compliant with GDPR. But this raises an fascinating dialogue as to what a blockchain is, and if a blockchain has any value if it may be altered.

Perhaps Stiglitz was proper when he mentioned that Bitcoin will merely be regulated out of existence ultimately.

Diar factors out that the brand new legal guidelines have been written to guard folks from centralised companies that management their knowledge. But these legal guidelines have been written in 2015 and adopted in April 2016, and throughout the two-year transition interval the cryptocurrency trade has change into extra important than anybody may have guessed again then.

“The GDPR presumes that there will be central intermediaries that can ‘erase’ information, but the world is trending toward ever more decentralized and immutable technologies,” mentioned Brito.