Towards GDPR Enforcing Blockchain Systems

This paper gives an overview of current research areas considering GDPR and blockchain. It is shown that GDPR is often seen as a problem, limiting blockchain use cases. However, approaches towards more data protection for the data subjects based on blockchain technology emerge. In this paper, we evaluate a first step towards a GDPR enforcing blockchain by using a combination of smart contracts within Hyperledger Fabric, evaluating if a joint controllership agreement is in place. Such agreement is required for joint controller to process personal data. Based on this rather simple use case evaluation, it is discussed that a combination of the different research areas around GDPR and blockchain should be further evaluated and combined, aiming to GDPR enforcing blockchain systems.