Abstract
This paper gives an overview of current research areas considering GDPR and blockchain. It is shown that GDPR is often seen as a problem, limiting blockchain use cases. However, approaches towards more data protection for the data subjects based on blockchain technology emerge. In this paper, we evaluate a first step towards a GDPR enforcing blockchain by using a combination of smart contracts within Hyperledger Fabric, evaluating if a joint controllership agreement is in place. Such agreement is required for joint controller to process personal data. Based on this rather simple use case evaluation, it is discussed that a combination of the different research areas around GDPR and blockchain should be further evaluated and combined, aiming to GDPR enforcing blockchain systems.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
References
Xu, X., et al.: A taxonomy of blockchain-based systems for architecture design. In: ICSA 2017: 2017 IEEE International Conference on Software Architecture: Proceedings: 3–7 April 2017, Gothenburg, Sweden, Gothenburg, Sweden, pp. 243–252 (2017). Accessed 7 Mar 2019
Hileman, G., Rauchs, M.: Global blockchain benchmarking study. Cambridge Centre for Alternative Finance (2017). https://www.ey.com/Publication/vwLUAssets/ey-global-blockchain-benchmarking-study-2017/$File/ey-global-blockchain-benchmarking-study-2017.pdf. Accessed 22 Aug 2019
Fridgen, G., Guggenmoos, F., Lockl, J., Rieger, A., Schweizer, A., Urbach, N.: Developing an Evaluation Framework for Blockchain in the Public Sector: The Example of the German Asylum Process (2018). Accessed 15 Mar 2019
Benet, J.: IPFS - Content Addressed, Versioned, P2P File System: (DRAFT 3). https://github.com/ipfs/papers/raw/master/ipfs-cap2pfs/ipfs-p2p-file-system.pdf. Accessed 11 Apr 2019sss
Fridgen, G., Guggenberger, N., Hoeren, T., Prinz, W., Urbach, N.: Chancen und Herausforderungen von DLT (Blockchain) in Mobilität und Logistik (2019). https://www.bmvi.de/SharedDocs/DE/Artikel/DG/blockchain-grundgutachten.html. Accessed 18 Nov 2020
Ateniese, G., Magri, B., Venturi, D., Andrade, E.: Redactable blockchain – or – rewriting history in bitcoin and friends. In: 2017 IEEE European Symposium on Security and Privacy (EuroS&P), Paris, April 2017, pp. 111–126 (2017)
Farshid, S., Reitz, A., Roßbach, P.: Design of a forgetting blockchain: a possible way to accomplish GDPR compatibility. In: Proceedings of the 52nd Hawaii International Conference on System Sciences (2019)
Florian, M., Henningsen, S., Beaucamp, S., Scheuermann, B.: Erasing data from blockchain nodes. In: 2019 IEEE European Symposium on Security and Privacy Workshops (EuroS & PW), Stockholm, Sweden, June 2019, pp. 367–376 (2019)
Marsalek, A., Zefferer, T.: A correctable public blockchain. In: 2019 18th IEEE International Conference on Trust, Security and Privacy in Computing and Communications/13th IEEE International Conference on Big Data Science and Engineering (TrustCom/BigDataSE), Rotorua, New Zealand, August 2019, pp. 554–561 (2019)
Precht, H., Marx Gómez, J.: Redactable blockchain – leveraging chameleon hash functions for a GDPR compliant blockchain. In: Konferenzband zum Scientific Track der Blockchain Autumn School 2020, Mittweida, pp. 66–70 (2020)
Truong, N.B., Sun, K., Lee, G.M., Guo, Y.: GDPR-compliant personal data management: a blockchain-based solution. IEEE Trans. Inform. Forensic Secur. 15, 1746–1761 (2020). https://doi.org/10.1109/TIFS.2019.2948287
Vargas, J.C.: Blockchain-based consent manager for GDPR compliance. In: Open Identity Summit 2019, pp. 165–170 (2019)
Janicki, T., Precht, H.: Smart-contract-basierter joint controllership agreements in privaten blockchains. In: Den Wandel begleiten - IT-rechtliche Herausforderungen der Digitalisierung (2020)
Janicki, T., Saive, D.: Privacy by Design in Blockchain-Netzwerken: Verantwortlichkeit und datenschutzkonforme Ausgestaltung von Blockchains, ZD 2022, Zeitschrift für Datenschutz, pp. 251–256 (2019)
Gierschmann, S.: Gemeinsame Verantwortlichkeit in der Praxis – Systematische Vorgehensweise zur Bewertung und Festlegung, ZD 2022 Zeitschrift für Datenschutz, pp. 69–73 (2020)
Wirth, C., Kolain, M.: Privacy by BlockChain Design: A BlockChain-enabled GDPR-Compliant Approach for Handling Personal Data (2018)
Precht, H., Saive, D.: Compliant Programming ‐ Juristen in der agilen Softwareentwicklung. In: Tagungsband Herbstakademie 2019, pp. 581–595 (2019). https://beck-online.beck.de/?vpath=bibdata/zeits/DSRITB/2019/cont/DSRITB.2019.595.1.htm
Szabo, N.: Smart Contracts: Building Blocks for Digital Markets. http://www.fon.hum.uva.nl/rob/Courses/InformationInSpeech/CDROM/Literature/LOTwinterschool2006/szabo.best.vwh.net/smart_contracts_2.html. Accessed 12 May 2020
Mattila, J.: The Blockchain Phenomenon: The Disruptive Potential of Distributed Consensus Architectures. ETLA Working Papers, no. 38 (2016). http://pub.etla.fi/ETLA-Working-Papers-38.pdf
Cervone, L., Palmirani, M., Vitali, F.: The intelligible contract. In: Proceedings of the 53rd Hawaii International Conference on System Sciences (2020)
Hyperledger Fabric: Hyperledger Fabric: Open, Proven, Enterprise-grade DLT (2020). https://www.hyperledger.org/wp-content/uploads/2020/03/hyperledger_fabric_whitepaper.pdf. Accessed 13 May 2020
Hyperledger Fabric, Peers. https://hyperledger-fabric.readthedocs.io/en/release-2.0/peers/peers.html. Accessed 13 May 2020
Hyperledger Fabric, Orderer. https://hyperledger-fabric.readthedocs.io/en/release-2.0/orderer/ordering_service.html. Accessed 13 May 2020
Hyperledger Fabric, Channels. https://hyperledger-fabric.readthedocs.io/en/latest/channels.html. Accessed 13 May 2020
Court of Justice of the European Union, The Court of Justice invalidates Decision 2016/1250 on the adequacy of the protection provided by the EU-US Data Protection Shield. Luxembourg (2020). https://curia.europa.eu/jcms/upload/docs/application/pdf/2020-07/cp200091en.pdf. Accessed 26 Nov 2020
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2021 The Author(s), under exclusive license to Springer Nature Switzerland AG
About this paper
Cite this paper
Precht, H., Gómez, J.M. (2021). Towards GDPR Enforcing Blockchain Systems. In: Ahlemann, F., Schütte, R., Stieglitz, S. (eds) Innovation Through Information Systems. WI 2021. Lecture Notes in Information Systems and Organisation, vol 47. Springer, Cham. https://doi.org/10.1007/978-3-030-86797-3_29
Download citation
DOI: https://doi.org/10.1007/978-3-030-86797-3_29
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-86796-6
Online ISBN: 978-3-030-86797-3
eBook Packages: Computer ScienceComputer Science (R0)