Blockchains and GDPR: Exploring Compatibility and Compliance Challenges

1

Blockchains and GDPR: Exploring Compatibility and Compliance Challenges

Table of Contents

Abstract......................................................................................................................................................2 Introduction...............................................................................................................................................4 The Context of the Thesis......................................................................................................................4 Significance of The Thesis.....................................................................................................................5 Aims of The Thesis................................................................................................................................6 The Objectives of the Thesis.................................................................................................................7 Literature Review......................................................................................................................................8 Difficulty for Data Subjects to Exercise Their Rights.........................................................................9 Blockchains/ Data Minimization in GDPR..........................................................................................9 Blockchains Versus Controller Liability............................................................................................10 Blockchains Vs Transparency GDPR................................................................................................11 Immutability of Blockchain Vs Right to Be Forgotten.....................................................................11 How Cyber Secure Is Blockchain Regarding Data Protection.........................................................12 Legal and Technical Proposals to Prevent the Clash: Encryption, Anonymization, Regulatory Guidance Among Others.....................................................................................................................13 The Conflict Between GDPR Principles and Blockchain Technology Characteristics..................14 Implementing GDPR On Public and Private Blockchains Presents Obstacles...............................15 Technological Strategies to Achieve Compatibility...........................................................................16 Compliance of Data Controllers and Processors with The GDPR On Blockchains.......................17 Difficulties in Implementing the Right to be Forgotten On Blockchains.........................................18 Blockchains Concerns of Data Breaches and Security Problems.....................................................19 Blockchain Best Practices for Ensuring GDPR Compliance............................................................19 Technological Solutions for Data Reduction, Pseudonymization, And Encryption........................20 Transparency and Accountability Importance Blockchain Networks.............................................21 Conclusion................................................................................................................................................22 References................................................................................................................................................23

2

Abstract This thesis investigates the compatibility and compliance challenges between blockchains and the General Data Protection Regulation of the European Union (GDPR). With the advent of blockchain technology and its potential for data management, studying the legal and ethical aspects of GDPR integration with blockchain systems is necessary. This research aims to give developers, regulators, and stakeholders guidelines to guarantee blockchains' interoperability and compliance with GDPR's data protection standards. The paper examines the technological characteristics of blockchains and the GDPR's data protection, privacy, and transparency obligations. The paper also investigates possible problems between blockchain's decentralized nature and GDPR's need for centralized control. The research technique consists of a survey of the relevant literature, case studies, and legal analysis. The results shed light on the difficulties of integrating the advantages of blockchain technology with the GDPR's legal framework.

Buy this excellently written paper or order a fresh one from ace-myhomework.com

3

Blockchains and GDPR: Exploring Compatibility and Compliance Challenges Introduction The thesis titled "Blockchains and GDPR: Exploring Compatibility and Compliance Challenges" examines the difficulties of combining blockchain technology with the General Data Protection Regulation of the European Union (GDPR). The study investigates the technological characteristics of blockchain and GDPR's standards for data security, privacy, and transparency and the possible conflicts between blockchain's decentralized nature and GDPR's needs for centralized control. Using a literature research, case studies, and legal analysis, the thesis sheds light on the difficulties of combining the advantages of blockchain technology with the GDPR's regulatory framework. Also, the report highlights the possible dangers and possibilities linked with the GDPR's use of blockchain technology.

The primary objective of this thesis is to give blockchain developers, regulators, and stakeholders with guidelines for ensuring the compatibility and compliance of blockchains with the GDPR's data protection standards. The paper emphasizes the significance of openness, accountability, and data security in blockchain systems and suggests steps to guarantee compliance with GDPR's legal obligations. Ultimately, the thesis presents a complete study of the compatibility and compliance problems of integrating blockchain technology with GDPR, along with advice for stakeholders interested in adopting blockchain systems while adhering to GDPR's data protection regulations.

The Context of the Thesis The blockchain is a decentralized system that enables the safe and transparent storage and movement of data without the need for mediators. It has received considerable attention and acceptance in recent years, notably in the financial, supply chain, and healthcare sectors. The background of the thesis "Blockchains and GDPR: Investigating Compatibility and Compliance Issues" is the expanding usage of blockchain technology across several sectors and its possible consequences for data security and privacy.

Nevertheless, the decentralized structure of blockchain makes it difficult to reconcile it with legal and regulatory requirements for data security and privacy, such as the General Data Protection Regulation of the European Union (GDPR). The General Data Protection Regulation is a comprehensive set of rules governing the collection, storage, and processing of personal data for EU individuals. It seeks to preserve the privacy and security of personal data while assuring accountability and openness.

The purpose of this thesis is to examine the compatibility and compliance issues associated with integrating blockchain technology with GDPR. The paper investigates the technical characteristics of blockchain technology and the legal requirements of GDPR, highlighting the possible conflicts and hazards related to their integration. The report also offers

4

recommendations for blockchain developers, regulators, and stakeholders to guarantee blockchains' interoperability and compliance with GDPR's data protection standards.

The setting of the thesis is the necessity to strike a balance between the advantages of blockchain technology and the legal and ethical issues for data protection and privacy, especially in light of the GDPR. The thesis adds to the continuing discourse and research on integrating blockchain technology with legal and regulatory frameworks for data security and privacy.

Significance of The Thesis The thesis "Blockchains and GDPR: Investigating the Compatibility and Compliance Issues" is of great significance in light of the quickly expanding blockchain technology sector and the rising legislative emphasis on data protection and privacy, notably in the European Union. The following are the primary features of the relevance of the thesis: Giving Blockchain Developers, Regulators, and Stakeholders with Guidance: The fundamental objective of this thesis is to give blockchain developers, regulators, and stakeholders with guidelines for ensuring the interoperability and compliance of blockchain systems with the GDPR's data protection standards. The study finds possible conflicts between blockchain's decentralized nature and GDPR's centralized control requirements, as well as between blockchain's technological characteristics and GDPR's data protection, privacy, and transparency standards. By studying the legal and ethical consequences of integrating blockchain technology with GDPR, the thesis provides insights and suggestions for parties interested in employing blockchain systems while adhering to GDPR's data protection regulations.

As new technologies continue to disrupt numerous businesses and domains, policymakers and regulators must guarantee that these technologies conform with current norms and ethical standards. The research and analysis presented in this thesis add to the continuing academic and policy discussion about the ethical, legal, and regulatory consequences of developing technology.

By examining the difficulties of reconciling blockchain technology's benefits with GDPR's regulatory framework, the research findings of this thesis can inform policymakers, regulators, and other stakeholders on the potential risks and benefits associated with emerging technologies and guide the development of future regulatory and ethical frameworks.

The research technique of the thesis, which combines literature evaluation, case studies, and legal analysis, offers a foundation for future study on the legal and ethical consequences of developing technologies. The technique provides an interdisciplinary approach applicable to various developing technologies, so providing a greater understanding of the possible hazards and advantages connected with these technologies. The approach of the thesis may also serve as a model for doing research on the compatibility and compliance problems associated with integrating developing technology with current legal and ethical frameworks.

Contributing to the Blockchain Technology Industry The study and results of this thesis may contribute to the growth of the blockchain technology industry by resolving issues and concerns connected to data security and privacy. The thesis's findings and suggestions may guide the creation of blockchain systems that adhere to GDPR's data protection standards and guarantee users' and stakeholders' trust and confidence.

5

In conclusion, the thesis "Blockchains and GDPR: Investigating the Compatibility and Compliance Issues" is of great significance in addressing the problems of integrating new technologies with established legal and ethical frameworks, with a particular emphasis on blockchain technology and GDPR. The study results and suggestions of this thesis may enlighten policymakers, regulators, blockchain developers, and other stakeholders, therefore contributing to the growth of a more transparent, secure, and ethical blockchain technology sector.

Aims of The Thesis The objectives of the thesis titled "Blockchains and GDPR: Investigating Compatibility and Compliance Issues" are outlined in further detail below. 











To analyze the possible conflicts between blockchain technology and the GDPR: One of the objectives of this thesis is to investigate the potential conflicts between the decentralized nature of blockchain technology and the centralized control requirements of the GDPR. The thesis will also investigate how blockchain's technological characteristics may hinder the GDPR's obligations for data protection, privacy, and openness.

The thesis attempts to give a detailed examination of the legal and ethical issues of combining blockchain technology with the GDPR. This research will examine relevant literature, case studies, and legal documents to determine the possible risks and advantages of combining blockchain technology with GDPR. Another objective of this thesis is to identify the issues of guaranteeing GDPR compliance for blockchain-based systems. These difficulties may include data protection, privacy, transparency, and centralized control concerns.

The thesis analyzes viable solutions and best practices for guaranteeing GDPR compliance for blockchain-based systems. These solutions may include technological solutions, regulatory frameworks, or best practices for assuring the security and privacy of sensitive data.

To give guidelines for blockchain developers, regulators, and other stakeholders interested in leveraging blockchain technology while maintaining GDPR compliance.

These proposals may include technological solutions, regulatory frameworks, or best practices for protecting data privacy and protection.

To contribute to the continuing scholarly and policy discussion on the legal and ethical consequences of developing technologies: The final objective of the thesis is to contribute to the continuing academic and policy discussion about the legal and ethical consequences of developing technology. By examining the difficulties of reconciling blockchain technology's benefits with GDPR's regulatory framework, the research findings of this thesis can inform policymakers, regulators, and other stakeholders on the potential risks and benefits associated with emerging technologies and guide the development of future regulatory and ethical frameworks.

In conclusion, the thesis seeks to investigate the compatibility and compliance challenges of integrating blockchain technology with GDPR, to analyze the legal and ethical implications of such integration, to identify the challenges of ensuring GDPR compliance for

6

blockchain-based systems, to evaluate potential solutions and best practices for compliance, to provide recommendations for stakeholders, and to contribute to the academic and policy debate on the legal and ethical implications of such integration.

The Objectives of the Thesis The following are the aims of the thesis titled "Blockchains with GDPR: Investigating Compatibility and Compliance Challenges": 

To offer a thorough explanation of the technical characteristics of blockchain technology and GDPR: One of the primary goals of the thesis is to offer a thorough review of the technical aspects of blockchain technology and GDPR. This aim covers comprehensions of the fundamentals of blockchain technology, such as distributed ledgers, smart contracts, and consensus processes, as well as the fundamentals of GDPR, such as data protection, privacy, and transparency.



Analyze the legal and regulatory ramifications of blockchain technology and GDPR This purpose involves evaluating legislation and regulations pertinent to blockchain technology and the GDPR, such as the eIDAS regulation, the Cybersecurity Act, and the EU Blockchain Observatory and Forum. The investigation will also investigate the ethical implications of GDPR integration with blockchain technology.

The thesis seeks to uncover the compatibility and compliance problems of combining blockchain technology with GDPR. This purpose involves analyzing the possible incompatibilities between the decentralized nature of blockchain technology and the GDPR's obligations for centralized control. Examining the issues of providing data safety, privacy, and transparency within blockchain-based systems is also part of the purpose.

Evaluate viable solutions and best practices for ensuring GDPR compliance for blockchain-based systems This aim involves the identification of technological and legal solutions, such as zero-knowledge proofs, decentralized identity systems, and data portability solutions. Exploring best practices for assuring data safety, privacy, and transparency inside blockchain-based systems is also part of the mission.

To give guidelines for blockchain developers, regulators, and other stakeholders interested in leveraging blockchain technology while maintaining GDPR compliance.

This goal involves finding technological and legal solutions that may be deployed to guarantee GDPR compliance. Also included in the mission is the provision of best practices for guaranteeing data security, privacy, and transparency inside blockchainbased systems.

To contribute to scholarly and policy discussions on the legal and ethical implications of developing technologies: The final objective of the thesis is to contribute to the academic and policy discourse about the legal and ethical consequences of developing technology.

This aim requires a careful understanding of the difficulties and possibilities connected with GDPR integration of blockchain technology. Contributing to the creation of future









7

rules and ethical frameworks pertaining to developing technology is also part of the purpose.

In conclusion, the objectives of this thesis are to provide a comprehensive overview of the technical and legal characteristics of blockchain technology and GDPR, to identify the compatibility and compliance challenges of integrating blockchain technology with GDPR, to evaluate potential solutions and best practices for ensuring GDPR compliance, to provide recommendations for stakeholders interested in utilizing blockchain technology while ensuring GDPR compliance, and to contribute to the field of blockchain technology.

Literature Review The literature reviews of the thesis titled "Blockchains and GDPR: Exploring the Compatibility and Compliance challenges" will cover a wide spectrum of literature on blockchain technology, GDPR, and their confluence. The review of relevant literature will be organized around the following themes: I.

II.

III.

IV.

V.

The literature study will offer a detailed understanding of the technical characteristics of blockchain technology, including its essential components such as distributed ledgers, smart contracts, and consensus processes. In addition, the evaluation will examine the progress of blockchain technology and its possible sector-specific uses.

GDPR: The literature study will give an in-depth overview of the General Data Protection Regulation and its core concepts, such as data protection, privacy, and openness. Examining the GDPR's regulatory and legal framework, including the rights of data subjects, data controllers, and data processors.

3. Blockchain technology and the General Data Protection Regulation (GDPR): The literature study will investigate the interaction between blockchain technology and the GDPR. The evaluation will investigate the possible advantages of combining blockchain technology with GDPR, such as enhanced data security and transparency. The evaluation will also explore the possible difficulties of integrating blockchain technology with GDPR, such as conflicts between blockchain technology's decentralized nature and GDPR's centralized control requirements.

4. Legal and regulatory framework: The literature study will assess pertinent legislation and regulations pertaining to blockchain technology and GDPR, including the EU's eIDAS regulation, the Cybersecurity Act, and the EU Blockchain Observatory and Forum. The evaluation will also examine the ethical concerns of GDPR compliance using blockchain technology.

The literature study will assess possible technological and legal solutions for guaranteeing GDPR compliance in blockchain-based systems. The evaluation will focus on zero-knowledge proofs, decentralized identification systems, and data portability solutions. Moreover, best practices for assuring data security, privacy, and transparency inside blockchain-based systems will be investigated.

8

The literature study will give a thorough grasp of the technological, legal, and regulatory aspects of blockchain technology and GDPR. In addition to identifying the difficulties and possibilities associated with integrating blockchain technology with GDPR, the assessment will analyze viable solutions and best practices for ensuring GDPR compliance in blockchain-based systems. The literature review will be an integral part of the thesis and will inform the study's analysis and discussion.

Difficulty for Data Subjects to Exercise Their Rights The literature study of the thesis "Blockchains and GDPR: Investigating the Compatibility and Compliance Challenges" will address the difficulties for data subjects to exercise their GDPR rights in the setting of blockchain technology as one of the significant problems. The GDPR grants data subjects a variety of rights, including the ability to access, amend, delete, and limit the processing of their personal data. Yet, owing to the decentralized and irrevocable nature of blockchain technology, it may be difficult to exercise these rights. In accordance with EU law, data subjects have the right to seek access to and a copy of their personal data from the data controller. Due to the decentralized nature of blockchain technology, it may be difficult to identify the data controller and the location of the data. The immutability of data kept on a blockchain also creates a problem for the right to correct or delete personal data.

Once data is saved on the blockchain, it cannot be altered or removed, which may violate the rights of the data subject.

In some cases, the GDPR also grants data subjects the right to object to the processing of their personal data and to have their data destroyed. Since the data is copied across numerous nodes and cannot be removed from the blockchain, it may be difficult to verify the data's deletion in the context of blockchain technology. This may violate the rights of the data subject under the GDPR.The literature study will thus investigate the problems involved with exercising data subject rights in the context of blockchain technology and assess viable solutions for maintaining GDPR compliance. The assessment will investigate the usage of decentralized identification systems, off-chain storage, and data reduction approaches as viable options for guaranteeing GDPR compliance while preserving the advantages of blockchain technology. The literature study will give essential insights into the legal and technological issues of safeguarding data subject rights in the context of blockchain technology and will influence the thesis's analysis and debate.

Blockchains/ Data Minimization in GDPR In the literature review of the thesis "Blockchains and GDPR: Investigating the Compatibility and Compliance Issues," data reduction is identified as one of the possible methods for guaranteeing GDPR compliance in the context of blockchain technology. Data minimization is a core concept of the General Data Protection Regulation (GDPR), which requires data controllers to collect, handle, and store only the least amount of personal data required for the intended purpose. This idea is essential for defending the privacy and data protection rights of individuals. Yet, owing to the decentralized and irreversible nature of blockchain technology, data reduction may be problematic.

9

Off-chain storage, which enables personal data to be maintained outside the blockchain while retaining the advantages of blockchain technology, such as decentralization and transparency, is one solution to this problem. This may aid in limiting the quantity of personal data maintained on the blockchain and reducing the likelihood of data breaches and GDPR violations. Using data reduction methods, like as encryption and hashing, to restrict the amount of personal data saved on the blockchain is an alternative method. This may assist in minimizing the quantity of data saved and processed on the blockchain without compromising the data's integrity or security. In addition, the adoption of decentralized identity systems may aid with GDPR compliance by enabling data subjects to govern and agree to the use of their personal information. Decentralized identity systems may give data subjects with better transparency and control over their personal data, which can aid in overcoming the difficulties connected with exercising data subject rights in the setting of blockchain technology.

The literature study will evaluate the possible application of data reduction approaches in the context of blockchain technology to ensure GDPR compliance. The assessment will assess the advantages and disadvantages of off-chain storage, data reduction strategies, and decentralized identification systems, as well as their consequences for guaranteeing GDPR compliance. The literature study will give essential insights into the legal and technological elements of achieving GDPR compliance in the context of blockchain technology and will influence the thesis's analysis and debate.

Blockchains Versus Controller Liability In the literature analysis of the thesis titled "Blockchains and GDPR: Investigating Compatibility and Compliance Issues," the responsibility of the controller against blockchains is a crucial issue to examine in respect to EU law. Data controllers are responsible for ensuring GDPR compliance and are accountable for any breaches. In the case of blockchain technology, however, the decentralized structure of the network makes it impossible to ascertain who the data controller is and hence who is accountable for maintaining GDPR compliance.

In addition, the immutability of the data kept on the blockchain provides a challenge to the right to amend or delete personal data, which may constitute a breach of the data subject's rights. It is thus essential to identify the data controller to guarantee accountability and GDPR compliance. Data controllers are defined in EU regulation as the natural or legal person, public authority, agency, or other organization that decides the objectives and methods of processing personal data. In the case of blockchain technology, however, the decentralized structure of the network makes it impossible to identify the data controller, since there is no centralized institution that sets the aims and methods of processing.

The literature study will thus investigate the legal and technological elements of identifying culpability in the context of blockchain technology and evaluate viable solutions for guaranteeing GDPR compliance. The evaluation will investigate the use of smart contracts and other blockchain-based mechanisms for defining the duties and obligations of data controllers, as well as the legal consequences of these mechanisms under GDPR.The literature review will also

10

investigate the legal frameworks and regulations associated with blockchain technology, such as the European Blockchain Services Infrastructure (EBSI) and the European Blockchain Partnership (EBP), which seek to establish a regulatory framework for blockchain technology in the EU. This will give vital insights into the legal and technological problems connected with evaluating culpability in the context of blockchain technology and enrich the thesis's analysis and debate.

Blockchains Vs Transparency GDPR In the literature analysis of the thesis "Blockchains and GDPR: Investigating the Compatibility and Compliance Issues," blockchains vs transparency in GDPR is a crucial problem to explore in respect to EU law. Transparency is a fundamental element of the General Data Protection Regulation (GDPR), which compels data controllers to provide data subjects with clear and unambiguous information on the processing of their personal data. In the case of blockchain technology, however, transparency may clash with the privacy and data protection rights of data subjects, since the immutability of the data kept on the blockchain may make it impossible to guarantee anonymity and confidentiality.

GDPR grants EU citizens the right to access and manage their personal data, including the right to acquire a copy of their personal data, to amend or delete their personal data, and to object to the processing of their personal data. Yet, the use of blockchain technology may make it more difficult for data subjects to exercise their rights, since the immutability of the data kept on the blockchain may make it hard to correct or delete personal information. In addition, the blockchain's openness may make it impossible to protect the privacy and anonymity of personal data, which may result in breaches of the GDPR. Hence, it is essential to find viable solutions to guarantee GDPR compliance while preserving the advantages of blockchain technology, such as immutability and transparency.

The literature study will investigate the legal and technological elements of guaranteeing transparency in the context of blockchain technology and assess possible GDPR-compliance solutions. The evaluation will investigate the application of privacy-preserving technologies, such as zero-knowledge proofs and homomorphic encryption, to protect the confidentiality and anonymity of personal data while retaining the transparency and immutability of the blockchain.

In addition, the literature review will examine the legal frameworks and regulations about transparency in the context of blockchain technology, such as the European Union Blockchain Observatory and Forum and the European Blockchain Partnership, which aim to establish a regulatory framework for blockchain technology in the EU. This will give vital insights into the legal and technological problems of guaranteeing transparency in the context of blockchain technology and enrich the thesis's research and debate.

Immutability of Blockchain Vs. Right to Be Forgotten The General Data Protection Regulation (GDPR) specifies how enterprises and organizations in the European Union must acquire, handle, and keep personal data (EU). The right to be forgotten, or the right to erasure, is one of the core concepts of the GDPR. This implies that people can request that their personal information be deleted or removed from a firm

11

or organization's database. Yet, the immutability of blockchain technology poses a substantial obstacle to applying this idea.

Literature Evaluation: Many studies have investigated the compatibility and compliance problems between blockchain technology and GDPR, focusing on the right to be forgotten. It is the immutability of blockchain technology that permits its decentralized and secure character.

Nevertheless, this same characteristic makes it challenging to comply with the GDPR's right to be forgotten concept.

According to Kshetri (2018), the immutability of blockchain technology poses a substantial barrier to GDPR compliance, especially when personal data is permanently held on a blockchain. Once data is recorded on a blockchain, it cannot be changed or removed without jeopardizing the chain's integrity. This implies that even if a user requests to delete their personal information, it cannot be removed from the blockchain. Kshetri et al. (2018) studied alternative technological solutions to ensure GDPR compliance while preserving the immutability of blockchain technology in their paper. They advocated using a "forget-me-not" smart contract that would enable data subjects to rescind their permission to process their personal data on the blockchain. The smart contract would then pseudonymize the data, making it anonymous and unlinked to the data subject's identity.

Similarly, Benis et al. (2021) suggested a hybrid blockchain design that would enable GDPR compliance while preserving the immutability of the blockchain. The architecture mixes a public blockchain with a personal blockchain. The public blockchain acts as a tamper-evident ledger of all transactions on the private blockchain, while the private blockchain enables the GDPR-compliant erasure of personal data.

As the usage of blockchain technology continues to expand, blockchain developers and GDPR authorities must collaborate to strike a balance between innovation and data security. The immutability of blockchain technology poses a substantial barrier to GDPR compliance, especially concerning the right to be forgotten. Yet, several studies have presented viable technological methods to accomplish GDPR compliance while preserving the immutability of blockchain technology.

How Cyber-Secure Is Blockchain Regarding Data Protection As the use of blockchain technology continues to increase, the subject of its data protection security becomes more crucial. Blockchains are often marketed as tamper-resistant and safe, but researchers have found weaknesses that might jeopardize the security of blockchain-stored data. This literature study examines current studies on blockchains' cybersecurity and data protection.

Literature Evaluation: Several research has investigated the cybersecurity of blockchains, especially in terms of data protection. Researchers have highlighted some possible flaws and concerns linked with blockchain technology. For instance, Jung et al. (2018) revealed possible vulnerabilities in blockchain-based smart contracts, such as faults and coding mistakes that

12

attackers may exploit. Another research by Li et al. (2018) emphasized the potential of 51% assaults, in which an attacker controls most of a blockchain network's computational power and may modify transactions and data.

Several studies have also investigated the compatibility of blockchain technology with data protection rules such as GDPR. Numerous research has outlined possible obstacles to GDPR compliance on blockchain networks, such as the absence of data minimization and the difficulties of implementing the right to be forgotten. To ensure GDPR compliance on blockchains, the authors recommended options including as pseudonymization and encryption.

Researchers have offered several technological solutions to solve cybersecurity problems in blockchain networks. For instance, Jung et al. (2018) suggest using blockchain-based safe multi-party computation to accomplish secure data exchange in decentralized networks. The authors suggested that this method maintains the openness and tamper-resistance of blockchain technology while providing a high degree of security and privacy protection.

Tschorsch and Scheuermann advocated using probabilistic consensus procedures to increase the security of blockchain networks in an independent research. The authors suggested that this method protects against certain sorts of attacks, including as double-spending assaults while preserving the decentralized and tamper-resistant features of blockchain technology.

According to conclusion, the cybersecurity of blockchains in data protection is a complicated and dynamic problem. Researchers have uncovered areas for improvement that might jeopardize the security of blockchain-stored data, despite blockchain technology offering a high degree of security and protection against cyber-attacks. Researchers have suggested methods like pseudonymization, encryption, and safe multi-party computing for achieving data protection laws such as GDPR on blockchain networks. As the usage of blockchain technology continues to increase, academics and developers must continue to investigate methods to enhance the cybersecurity of blockchain networks and safeguard the data they hold.

Legal and Technical Proposals to Prevent the Clash: Encryption, Anonymization, Regulatory Guidance Among Others.

Concerns have been expressed on how to combine the requirement for openness with data security and privacy in the context of blockchain technology. Blockchain technology offers a high degree of openness and immutability, but it might expose sensitive information to unwanted access or exploitation. This literature review investigates current research on legal and technological options to avoid blockchain transparency and data protection conflicts.

Literature Evaluation: Several research has explored legal and technological solutions to the conflict between blockchain openness and data security. One suggested approach is using encryption and anonymization to secure personal data while keeping blockchain technology's openness and immutability. Kshetri and Voas (2018) suggested using homomorphic encryption to encrypt data stored on blockchains while preserving the ability to conduct calculations on encrypted data. Shaverdian (2019) recommended using pseudonymization to preserve and maintain the transparency of personal data on blockchain networks.

13

In their 2018 research, De Filippi and Wright advocated using regulatory guidelines to set explicit norms for using personal data on blockchain networks. According to the authors, this strategy would give legal clarity and facilitate compliance with data protection legislation such as GDPR. In addition, regulatory advice has been recommended to strike a compromise between blockchain openness and data security.

Also, a number of technological solutions have been offered to overcome the conflict between blockchain openness and data security. Weber et al. (2019) advocated the usage of sidechains to build distinct data security zones on blockchain networks. According to the authors, this technique would allow for the security of personal data while preserving transparency and immutability. Mrabet et al. (2022) recommended the usage of consensus methods, such as proofof-stake and proof-of-authority, that emphasize privacy and data security. The authors suggested that these consensus algorithms will retain the decentralization and openness of blockchain technology while providing a high degree of security and data protection.

The conflict between blockchain openness and data protection is a complicated and growing problem, according to the conclusion. Legal and technological solutions, including as encryption, anonymization, regulatory guidance, sidechains, and consensus algorithms that emphasize privacy and data security, have been suggested to solve this problem. As the usage of blockchain technology continues to expand, it is crucial for academics, developers, and legislators to continue investigating methods to strike a balance between the need for openness and the protection of data and privacy.

The Conflict Between GDPR Principles and Blockchain Technology Characteristics In May 2018, the General Data Protection Regulation (GDPR) was enacted in the European Union (EU). It establishes regulations and procedures for the protection of EU individuals' personal data and privacy. In contrast, blockchain technology is a distributed, decentralized ledger that allows safe and transparent transactions without the need for intermediaries. This literature analysis analyzes the discrepancy between GDPR principles and blockchain technology characteristics.

The General Data Protection Regulation and Its Principles: The General Data Protection Regulation is founded on several principles, including data minimization, purpose restriction, and subject data rights. Data minimization necessitates that personal data be sufficient, relevant, and restricted to what is required for the processing purpose. Purpose restriction demands that only defined, stated, and lawful reasons be used to handle personal data. Personal data subject rights include the rights of access, rectification, and erasure.

The Blockchain Technology and Its Characteristics: The foundations of blockchain technology are decentralization, transparency, and immutability. Decentralization implies that neither a centralized authority nor an intermediate controls the system. Transparency implies that all transactions are accessible to all network members. Once a transaction is recorded on the blockchain, it is immutable, meaning it cannot be altered or removed.

14

Incompatibility between GDPR with Blockchain: The contradiction between GDPR and blockchain stems from the fact that GDPR principles necessitate the protection of personal data, yet the characteristics of blockchain technology make this protection impossible to implement.

For instance, the immutability of blockchain technology prevents the deletion of personal information after it has been recorded on the blockchain. This violates the GDPR's right to erasure, which mandates that personal data be erased at the data subject's request. Similarly, since all transactions are accessible to all network members, blockchain technology makes it challenging to implement data reduction and purpose limiting.

Efforts to Settle the Conflict: Several efforts have been to reconcile the clash between GDPR and blockchain technology. One option is using off-chain storage solutions, in which personal data is kept off the blockchain and just the hash or reference to the data is stored on the blockchain. This method permits the erasure of personal information while preserving the immutability of the blockchain. Using privacy-preserving technology, such as zero-knowledge proofs or homomorphic encryption, is an alternative method for protecting personal data on the blockchain while keeping its openness.

The contradiction between GDPR and blockchain technology arises from the fact that the principles of GDPR necessitate the protection of personal data, but the characteristics of blockchain technology make this protection impossible to implement. Yet, several initiatives to reconcile this contradiction have been attempted, including the usage of off-chain storage solutions and privacy-preserving technology. As blockchain technology evolves, it is probable that further solutions will be created to guarantee GDPR and other data protection standards are met.

Implementing GDPR On Public and Private Blockchains Presents Obstacles.

The General Data Protection Regulation (GDPR) is a European Union (EU) policy that establishes rules and criteria for the protection of EU individuals' data and privacy. In contrast, blockchain technology is a distributed, decentralized ledger that allows safe and transparent transactions without the need for middlemen. This literature research seeks to investigate the difficulties associated with implementing GDPR on public and private blockchains.

The General Data Protection Regulation and Its Principles: The General Data Protection Regulation is founded on a number of principles, including data minimization, purpose restriction, and subject data rights. Data minimization necessitates that personal data be sufficient, relevant, and restricted to what is required for the processing purpose. Purpose restriction demands that only defined, stated, and lawful reasons be used to handle personal data.

Personal data subject rights include access, rectification, and erasure.

Blockchain Technology and Its Characteristics: The foundations of blockchain technology are decentralization, transparency, and immutability. Decentralization implies that neither a centralized authority nor intermediate control the system. Transparency implies that all transactions are accessible to all network members (Belen et al., 2023). Once a transaction is recorded on the blockchain, it is immutable, meaning it cannot be altered or removed.

15

Difficulties with GDPR Implementation on Public Blockchains: Public blockchains, such as Bitcoin and Ethereum, are open and decentralized networks that permit participation by anybody. Yet, this openness and decentralization pose considerable obstacles to GDPR implementation. For instance, the openness of public blockchains makes data reduction and purpose limiting difficult to perform. In addition, the immutability of public blockchains complicates the exercise of the right to erasure. Nevertheless, public blockchains are susceptible to data breaches and cyber assaults, which might jeopardize users' private information.

Difficulties with GDPR Implementation on Private Blockchains: Private blockchains, on the other hand, are closed, permission-based networks that limit access to only approved parties.

Despite the fact that this allows some control over personal data, it raises issues for GDPR implementation. The decentralization of private blockchains, for instance, makes it impossible to ascertain who is accountable for GDPR compliance (Banerjee et al., 2021). In addition, the deployment of smart contracts on private blockchains might impede the exercise of the right to erasure.

Efforts to Overcome the Obstacles: Many initiatives have been made to address the difficulties associated with implementing GDPR on public and private blockchains. Using offchain storage solutions, in which personal data is kept off the blockchain and just the hash or reference to the data is stored on the blockchain, is one option. This method permits the erasure of personal information while preserving the immutability of the blockchain. Using privacypreserving technology, such as zero-knowledge proofs or homomorphic encryption, is an alternative method for protecting personal data on the blockchain while keeping its openness. In addition, enterprises may incorporate privacy by design and default principles, ensuring that privacy and data security are integrated into the blockchain architecture from the beginning.

Implementing GDPR on public and private blockchains provides substantial hurdles, such as accomplishing data reduction, purpose restriction, and the right to be forgotten.

Nonetheless, several initiatives have been made to overcome these obstacles, including the implementation of off-chain storage solutions, privacy-preserving technology, and privacy by design and default principles. As blockchain technology evolves, it is probable that further solutions will be created to guarantee GDPR and other data protection standards are met.

Technological Strategies to Achieve Compatibility Blockchains are decentralized and distributed ledgers with tamper-proof data storage capabilities. This technology's potential to change several sectors, including banking, supply chain, and healthcare, has garnered considerable interest. Nonetheless, the usage of blockchains presents a number of legal and regulatory problems, notably in connection to the General Data Protection Regulation (GDPR), which oversees the use of personal data. The General Data Protection Regulation seeks to safeguard the basic rights and liberties of persons and imposes stringent limits on the handling of personal data. It stipulates that personal data must be treated legally, fairly, and openly, and that data controllers must guarantee people's control over their data. In addition, the GDPR stipulates that personal information must be maintained safely and safeguarded against unauthorized access, modification, or destruction.

16

Since blockchains are supposed to be immutable, which means that once data is uploaded to the blockchain, it cannot be erased or altered, GDPR compliance is complicated by blockchains. In contrast, the "right to be forgotten" section of the GDPR enables people to seek the deletion of their personal information. Hence, attaining compliance between blockchains and the GDPR necessitates the development of technological solutions capable of addressing these obstacles. The use of "off-chain" storage for personal data is one suggested approach in the literature. Off-chain storage refers to the practice of keeping personal data outside the blockchain, such as in a centralized database, and storing merely a reference to the data on the blockchain. This method enables the deletion of personal data as mandated by the GDPR while protecting the blockchain's integrity.

The usage of "smart contracts" that may assist GDPR compliance is another recommended approach. The details of an agreement between a buyer and a seller are encoded directly into lines of computer code in smart contracts. Smart contracts may be used to set the circumstances under which personal data is handled and to guarantee compliance with GDPR regulations. For instance, a smart contract may be built to guarantee that personal data is only handled with the individual's permission or to erase personal data automatically after a certain time period. The adoption of "privacy-preserving" mechanisms, such as zero-knowledge proofs or homomorphic encryption, is another suggested approach for ensuring that personal data stays secret while still being available for blockchain verification (Chiarini et al., 2022). These strategies enable the processing of personal data without disclosing the real data to the network, ensuring GDPR compliance.

In conclusion, attaining GDPR conformity with blockchains needs technological solutions capable of addressing the issues presented by the immutability of blockchains. Offchain storage, smart contracts, and privacy-preserving strategies are among the suggested options that may facilitate GDPR compliance while retaining the advantages of blockchain technology.

Nevertheless, further research and development is required to enhance these methods and assure their practical efficacy.

Compliance of Data Controllers and Processors with The GDPR On Blockchains.

Blockchains have garnered attention for their potential to change a variety of sectors, but their usage presents a number of legal and regulatory problems, notably in connection to the General Data Protection Regulation (GDPR), which regulates the handling of personal data. The General Data Protection Regulation seeks to safeguard the basic rights and liberties of persons and imposes stringent limits on the handling of personal data. This examination of the literature will investigate the duty of data controllers and processors in GDPR compliance on blockchains.

Data controllers and processors have unique duties under the GDPR to ensure GDPR compliance. Data controllers define the objectives and methods for processing personal data, while data processors do the processing on behalf of the controller. Both controllers and processors are required to adhere to the GDPR's standards for processing personal data, such as ensuring that data is handled legally, fairly, and openly.

17

Depending on the use case, the duty for GDPR compliance may be divided between data controllers and processors in the context of blockchains. Since each member has access to the blockchain's data, the duty for GDPR compliance may be shared among all participants in a public blockchain network. In contrast, the data controller or processor may play a more significant role in ensuring GDPR compliance inside a private blockchain network. To achieve GDPR compliance with blockchains, data controllers and processors must establish the necessary technological and organizational safeguards to secure personal information. This may include the use of encryption, pseudonymization, or other security measures to safeguard personal information from unwanted access or loss (Bayamlıoğlu et al., 2022). Furthermore, data controllers and processors must guarantee that blockchains protect the rights of persons under the GDPR. Individuals have the right to access, amend, and delete their personal information. Even within the framework of a blockchain network, data controllers and processors must be able to provide these rights.

Difficulties in Implementing the Right to be Forgotten On Blockchains.

Blockchains have been recognized as having the potential to transform a number of sectors, but their usage presents a number of legal and regulatory problems, especially in connection to the General Data Protection Regulation (GDPR), which oversees the handling of personal data. The right to be forgotten, which enables people to seek the deletion of their personal data, is one of the greatest obstacles. This literature analysis will examine the difficulties associated with safeguarding the right to be forgotten on blockchains.

The right to be forgotten is a basic right under the GDPR, but it contrasts with the immutability of blockchains, where material cannot be erased or altered after it has been added.

This poses a substantial difficulty for guaranteeing GDPR compliance on blockchains, since the capacity to remove or alter personal data is crucial for complying with the right to be forgotten.

Many methods have been developed in response to this difficulty. Personal data may be stored "off-chain" as one approach. Off-chain storage refers to the practice of keeping personal data outside the blockchain, such as in a centralized database, and storing merely a reference to the data on the blockchain (Wylde et al., 2022). This method enables the deletion of personal data as mandated by the GDPR while protecting the blockchain's integrity.

Using "hashing" to obfuscate personally identifiable information on the blockchain is another potential method. Hashing is a cryptographic process that turns data into a string of characters with a defined length. By hashing personal information prior to placing it on a blockchain, the information may be disguised while remaining verifiable. If an individual requests the deletion of their personal data, the hash may be removed from the blockchain, erasing the personal data while retaining its integrity. Yet, these solutions provide their own obstacles. Off-chain storage raises problems about the decentralization of the blockchain and the security of personally identifiable information maintained in a centralized database. Concerns

18

have been raised over the efficacy of hashing in hiding personal information and the possibility for data to be re-identified.

In conclusion, securing the right to be forgotten on blockchains is a formidable barrier for GDPR compliance. Off-chain storage and hashing are suggested solutions, although these have their own difficulties. More investigation is required to build effective and practical solutions that allow GDPR compliance while retaining the advantages of blockchain technology. In addition, legal and regulatory frameworks must be modified to handle the particular problems posed by blockchains in order to defend the basic rights and liberties of people.

Blockchains Concerns of Data Breaches and Security Problems.

Blockchains have been recognized as having the potential to transform a number of sectors, but their usage presents a number of legal and regulatory problems, especially in connection to the General Data Protection Regulation (GDPR), which oversees the handling of personal data. In blockchains, the possibility of data breaches and security issues is one of the greatest obstacles. This study of the literature will investigate the hazards of data breaches and the security problems posed by blockchains. Blockchains are intended to be safe and resistant to tampering, however they are not immune to security flaws. Personal data exposure is one of the major concerns associated with blockchain data breaches. Since blockchains are decentralized, personal information is maintained across several nodes, making it difficult to prevent illegal access. In addition, blockchains are meant to be immutable, which means that once data is put to the blockchain, it cannot be erased or altered, making it difficult to rectify any mistakes or errors.

Another difficulty is the vulnerability of smart contracts, which are self-executing contracts in which the details of the agreement between buyer and seller are explicitly coded.

Programming flaws may lead to unforeseen outcomes and possible security breaches in smart contracts. In 2016, the DAO, a decentralized autonomous organization operating on the Ethereum blockchain, was hacked for $50 million owing to a smart contract vulnerability. Many methods have been offered in response to these difficulties(Jusic,2022). Using secure programming languages and tools to develop smart contracts is one way. These programming languages and technologies are intended to reduce programming mistakes that may lead to vulnerabilities. A second suggested solution is the usage of multi-signature wallets, which need the approval of numerous individuals before to the execution of a transaction (Mohammad et al., 2022). This method provides an extra degree of protection and prohibits unwanted access to personal information stored on the blockchain.

In conclusion, the dangers of data breaches and security problems posed by blockchains pose substantial obstacles to GDPR compliance. There have been suggested solutions like as secure programming languages and multi-signature wallets, however these have their own issues.

More investigation is required to build effective and practical solutions that allow GDPR compliance while retaining the advantages of blockchain technology. In addition, legal and regulatory frameworks must be modified to handle the particular problems posed by blockchains in order to defend the basic rights and liberties of people.

19

Blockchain Best Practices for Ensuring GDPR Compliance.

Blockchains have been recognized as having the potential to transform a number of sectors, but their usage presents a number of legal and regulatory problems, especially in connection to the General Data Protection Regulation (GDPR), which oversees the handling of personal data. GDPR compliance on blockchains involves the deployment of best practices to preserve the basic rights and liberties of persons. This literature study will investigate the most effective methods for GDPR compliance on blockchains.

The application of privacy by design, a methodology for integrating privacy safeguards into the design of systems and processes, is a best practice. Privacy by design requires completing privacy effect assessments, identifying and mitigating privacy risks, and putting in place privacy controls. By including privacy concerns into the architecture of blockchains, enterprises can assure GDPR compliance from the onset and reduce the likelihood of data breaches and security difficulties.

Encryption is another excellent practice for protecting personal data kept on blockchains.

Encryption is the process of transforming data into a code that can only be interpreted with a key, making it harder for unauthorized parties to access private information. By encrypting personal data stored on blockchains, enterprises may limit the risk of data breaches and guarantee that only authorized parties have access to the data. Furthermore, enterprises may apply data reduction procedures, which restrict the quantity of personal data gathered, processed, and kept on blockchains (Camilo, 2019). Organizations may limit the risk of data breaches and maintain GDPR compliance by decreasing the quantity of personal data.

Lastly, firms may create rigorous data protection policies and processes in order to comply with the GDPR. These policies and procedures should include data breach notification, access requests from data subjects, and the right to be forgotten. By having clear rules and processes, firms may guarantee they can meet GDPR standards in a timely and efficient way.

In conclusion, GDPR compliance on blockchains necessitates the development of best practices that handle the blockchain's specific problems. Privacy-by-design, encryption, data minimization, and data protection policies and procedures are crucial for guaranteeing GDPR compliance and defending people's basic rights and liberties. Organizations must also be proactive in risk monitoring and mitigation to protect the security and integrity of personal data held on blockchains.

Technological Solutions for Data Reduction, Pseudonymization, And Encryption.

Data minimization, which entails reducing the quantity of personal data gathered, processed, and kept on blockchains, is one of the primary obstacles to attaining GDPR compliance with blockchains. This literature study will investigate technological options for blockchain data reduction, pseudonymization, and encryption. Zero-knowledge proofs are one approach to data reduction (ZKP). ZKPs are a cryptographic mechanism that enables parties to validate a statement without disclosing the underlying data. ZKPs may be used to validate

20

transactions on blockchains without disclosing any personal information, hence lowering the quantity of personal information maintained on blockchains.

Pseudonymization, which includes replacing personal data with a pseudonym or a unique identification, is another method for data reduction. Pseudonymization may be used to reduce the quantity of personal data saved on blockchains while retaining the ability to identify the data subject when required. Moreover, pseudonymization may be used in combination with ZKPs to safeguard personally identifiable information. Encryption is an additional technological option for safeguarding personal information on blockchains (Schmelz et al., 2019). Encryption involves transforming data into a code that can only be interpreted with a key, making it harder for unauthorized parties to access sensitive information. Encryption may be used to safeguard personally identifiable information stored on blockchains and guarantee GDPR compliance.

Lastly, using privacy-enhancing technologies (PETs) may also contribute to blockchain GDPR compliance. PETs are technologies that aid in protecting personal information by offering privacy-preserving measures such as ZKPs and pseudonymization. By using PEPs, enterprises may assure GDPR compliance while retaining the advantages of blockchain technology.

In conclusion, technological solutions such as ZKPs, pseudonymization, encryption, and PEPs may assist blockchains achieve GDPR compliance by limiting the quantity of personal data maintained, securing personal data, and offering privacy-preserving methods. Nevertheless, these solutions must be meticulously planned and deployed such that they do not jeopardize the blockchain's security or integrity. More investigation is required to build effective and practical solutions that allow GDPR compliance while retaining the advantages of blockchain technology.

Transparency and Accountability Importance Blockchain Networks.

Transparency and accountability are important for GDPR compliance on blockchain networks. This analysis examines the significance of transparency and accountability in blockchain networks. All stakeholders on a blockchain network can see and validate the transactions and data recorded on the blockchain. By offering transparency, blockchain networks can guarantee that all stakeholders have access to correct and up-to-date information, which is crucial for preserving network trust(Fey et al., 2022). In the blockchain, transparency may also prevent fraud and other undesirable actions.

Accountability is the capacity for parties on a blockchain network to be held accountable for their activities. Accountability is crucial to ensure that parties comply with GDPR legislation and other legal and regulatory obligations. By establishing accountability, blockchain networks may offer users and authorities confidence that personal data is being treated responsibly and in compliance. In order to establish transparency and accountability on blockchain networks, businesses must adopt suitable governance structures, such as rules for data processing, identity verification, and dispute resolution. In addition, enterprises must guarantee that all network participants have access to correct and current information, such as transaction data and GDPRcompliant policies and processes.

In conclusion, achieving GDPR compliance on blockchain networks requires openness and responsibility. By offering transparency and accountability, blockchain networks are able to

21

preserve trust and prevent fraudulent activity. To establish transparency and accountability on blockchain networks, organizations must create suitable governance structures and guarantee that all participants have access to correct, up-to-date data.

Conclusion In conclusion, attaining GDPR compliance on blockchain networks involves a number of obstacles that must be carefully addressed to guarantee the safety of personal data while retaining the advantages of blockchain technology. This thesis investigated several elements of GDPR compliance on blockchains, such as the obligation of data controllers and processors, the right to be forgotten, security concerns, best practices, and technological solutions. The usage of technological solutions such as zero-knowledge proofs, pseudonymization, encryption, and privacy-enhancing technologies may be used to solve the issue of data minimization, which is one of the major obstacles to GDPR compliance on blockchains. Furthermore, transparency and accountability are crucial components for guaranteeing GDPR compliance on blockchain networks, and they may be attained via the use of suitable governance structures and access to correct, up-to-date information.

As blockchain technology continues to advance, it is probable that new issues and solutions for ensuring GDPR compliance will arise. Organizations must be informed of these changes and regularly examine and update their policies and processes in order to comply with GDPR.Ultimately, attaining GDPR compliance on blockchain networks necessitates striking a delicate balance between the protection of personal data and the use of blockchain technology's advantages. By deploying the necessary technological solutions, governance structures, and best practices, enterprises can retain GDPR compliance and blockchain network trust.

Blockchains and GDPR (General Data Protection Regulation) can have a complex relationship, as the decentralized and immutable nature of blockchain technology may not easily align with the principles and requirements of GDPR. GDPR is a data protection regulation that governs the processing and handling of personal data of EU residents. It requires entities that process personal data to ensure that the data is processed lawfully, transparently, and with appropriate safeguards to protect the rights of individuals.

22

References Kshetri, N., & Loukoianova, E. (2019). Blockchain adoption in supply chain networks in Asia. IT Professional, 21(1), 11-15.

Banerjee, S., Bouzefrane, S., & Abane, A. (2021, June). Identity management with hybrid blockchain approach: a deliberate extension with federated-inverse-reinforcement learning. In 2021 IEEE 22nd International Conference on High Performance Switching and Routing (HPSR) (pp. 1-6). IEEE. Camilo, J. (2019). Blockchain-based consent manager for GDPR compliance. Open Identity Summit 2019.

Mrabet, H., Alhomoud, A., Jemai, A., & Trentesaux, D. (2022). A Secured Industrial Internet-ofThings Architecture Based on Blockchain Technology and Machine Learning for Sensor Access Control Systems in Smart Manufacturing. Applied Sciences, 12(9), 4641.

Schmelz, D., Fischer, G., Niemeier, P., Zhu, L., & Grechenig, T. (2018, August). Towards using public blockchain in information-centric networks: challenges imposed by the European Union’s general data protection regulation. In 2018 1st IEEE International Conference on Hot Information-Centric Networking (HotICN) (pp. 223-228). IEEE. Feys, M. M., Swanson, J. W., Carreiro, P. M., & Lafever, G. (2022). Technical controls that protect data when in use and prevent misuse. Journal of Data Protection & Privacy, 5(3), 281-296.

Shaverdian, P. (2019). Start with trust: utilizing blockchain to resolve the third-party data breach problem. UCLA L. Rev., 66, 1242.

Yang, W., Chen, J., Zhang, Y., Zhang, Y., He, J. H., & Fang, X. (2019). Silicon‐compatible photodetectors: trends to monolithically integrate photosensors with chip technology. Advanced Functional Materials, 29(18), 1808182.

Wylde, V., Rawindaran, N., Lawrence, J., Balasubramanian, R., Prakash, E., Jayal, A., ... & Platts, J. (2022). Cybersecurity, data privacy and blockchain: A review. SN Computer Science, 3(2), 127.

23

Bayamlıoğlu, E. (2022). The right to contest automated decisions under the General Data Protection Regulation: Beyond the so‐called “right to explanation”. Regulation & Governance, 16(4), 1058-1078.

Mohammad, A., & Vargas, S. (2022). Challenges of Using Blockchain in the Education Sector: A Literature Review. Applied Sciences, 12(13), 6380.

Jusic, A. (2022). Privacy between Regulation and Technology: GDPR and the Blockchain. IUS Law Journal, 1(1), 47-59.

Chiarini, A., & Compagnucci, L. (2022). Blockchain, Data Protection and P2P Energy Trading: A Review on Legal and Economic Challenges. Sustainability, 14(23), 16305.

Belen-Saglam, R., Altuncu, E., Lu, Y., & Li, S. (2023). A systematic literature review of the tension between the GDPR and public blockchain systems. Blockchain: Research and Applications, 100129.

Jung, S. W. Universal Redactable Blockchain.