Using Blockchain to strengthen the rights granted through the GDPR
Електронний науковий архів Науково-технічної бібліотеки Національного університету "Львівська політехніка"
Переглянути архів ІнформаціяПоле | Співвідношення | |
Title |
Using Blockchain to strengthen the rights granted through the GDPR
|
|
Creator |
F. W. J. van Geelkerken
Konings, K. |
|
Contributor |
Corporate Law and European Law, section Law & IT,Groningen University NORD Legal LLP
|
|
Subject |
Blockchain
transparent Blockchain opaque Blockchain GDPR 2016/079 compliance |
|
Description |
In this article we delineate two ways in which Blockchain technology could be utilised to store personal data in compliance with the requirements of the General Data Protection Regulation 2016/679, and what their up- and downsides are. |
|
Date |
2018-04-12T13:06:07Z
2018-04-12T13:06:07Z 2017-12-23 2017-12-23 |
|
Type |
Conference Abstract
|
|
Identifier |
F. W. J. van Geelkerken Using Blockchain to strengthen the rights granted through the GDPR / F. W. J. van Geelkerken, K. Konings // Litteris et Artibus : proceedings, 23–25 November, 2017. — Lviv : Lviv Polytechnic Publishing House, 2017. — P. 458–461. — (4th International academic conference «law and psychology 2017» (LPS-2017)).
978-966-941-108-2 http://ena.lp.edu.ua:8080/handle/ntb/40463 F. W. J. van Geelkerken Using Blockchain to strengthen the rights granted through the GDPR / F. W. J. van Geelkerken, K. Konings // Litteris et Artibus : proceedings, 23–25 November, 2017. — Lviv : Lviv Polytechnic Publishing House, 2017. — P. 458–461. — (4th International academic conference «law and psychology 2017» (LPS-2017)). |
|
Language |
en
|
|
Relation |
Litteris et Artibus : матеріали, 2017
Litteris et Artibus : proceedings, 2017 https://link.springer.com/content/pdf/10.1007/3-540-38424-3.pdf [1] Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation. [2] For the difference in meaning between data and information see e.g. R.L. Ackoff, ‘From Data to Wisdom’ in Journal of Applies Systems Analysis, Volume 16, 1989 p 3-9. [3] Seeing the use of, and distinction between, the terms data and information in the GDPR is confusing at best, even though there is a significant difference between them, hereafter the terms data and information will be used as they are in the GDPR. [4] In cases where there is a discrepancy between the different ledgers – for instance because 10 changes were made simultaneously – the network resolves this by polling all nodes and the majority rules. [5] If a new block were to be added for each alteration this would create a security-risk of cryptanalysis. See E. Biham & A. Shamir, ‘Differential Crypt analysis of DES-like Cryptosystems’ in, Lecture Notes in Computer Science, Springer-Verlag, Berlin, 1990, p. 2-22. Freely accessible at https://link.springer.com/content/pdf/10.1007/3-540-38424-3.pdf [6] A hash-function is a function in information sciences which converts a very large dataset into (most often) a much smaller dataset. [7] For the reliability of hashing see e.g. C. Malinowsky & R. Noble, ‘Hashing and data integrity: Reliability of hashing and granularity size reduction’ in Digital Investigation, Volume 4 issue 2, 2007, p. 98-104. [8] In this case the term ‘transaction’ means any alteration i.e. addition to the chain and not necessarily any financial transaction. [9] van Heukelom et.al., Whitepaper Juridische aspecten van Blockchain, p. 7-11.Freely accessible at (Dutch only). [10] Instead of the terms transparent- and opaque Blockchain they refer to them as open- and closed Blockchains. [11] Consideration 26 GDPR (only) states that the principles of data protection should not apply to […] personal data rendered anonymous in such a manner that the data subject is not or no longer identifiable, as such the anonymisation would not need to be irreversible. The different (national) supervisory authorities have, however, ruled that a reversible anonymised personal data are also personal data in the sense of Directive 95/46/EC, the predecessor of the GDPR. [12] And conversely it creates an obligation for the processor to alter or erase the stored personal data if requested to do so by the data subject. [1] Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation. [2] For the difference in meaning between data and information see e.g. R.L. Ackoff, ‘From Data to Wisdom’ in Journal of Applies Systems Analysis, Volume 16, 1989 p 3-9. [3] Seeing the use of, and distinction between, the terms data and information in the GDPR is confusing at best, even though there is a significant difference between them, hereafter the terms data and information will be used as they are in the GDPR. [4] In cases where there is a discrepancy between the different ledgers – for instance because 10 changes were made simultaneously – the network resolves this by polling all nodes and the majority rules. [5] If a new block were to be added for each alteration this would create a security-risk of cryptanalysis. See E. Biham & A. Shamir, ‘Differential Crypt analysis of DES-like Cryptosystems’ in, Lecture Notes in Computer Science, Springer-Verlag, Berlin, 1990, p. 2-22. Freely accessible at https://link.springer.com/content/pdf/10.1007/3-540-38424-3.pdf [6] A hash-function is a function in information sciences which converts a very large dataset into (most often) a much smaller dataset. [7] For the reliability of hashing see e.g. C. Malinowsky & R. Noble, ‘Hashing and data integrity: Reliability of hashing and granularity size reduction’ in Digital Investigation, Volume 4 issue 2, 2007, p. 98-104. [8] In this case the term ‘transaction’ means any alteration i.e. addition to the chain and not necessarily any financial transaction. [9] van Heukelom et.al., Whitepaper Juridische aspecten van Blockchain, p. 7-11.Freely accessible at (Dutch only). [10] Instead of the terms transparent- and opaque Blockchain they refer to them as open- and closed Blockchains. [11] Consideration 26 GDPR (only) states that the principles of data protection should not apply to […] personal data rendered anonymous in such a manner that the data subject is not or no longer identifiable, as such the anonymisation would not need to be irreversible. The different (national) supervisory authorities have, however, ruled that a reversible anonymised personal data are also personal data in the sense of Directive 95/46/EC, the predecessor of the GDPR. [12] And conversely it creates an obligation for the processor to alter or erase the stored personal data if requested to do so by the data subject. |
|
Rights |
© Національний університет “Львівська політехніка”, 2017
|
|
Format |
458-461
4 application/pdf image/png |
|
Coverage |
23–25 листопада 2017 року
23–25 November, 2017 Львів Lviv |
|
Publisher |
Видавництво Львівської політехніки
Lviv Polytechnic Publishing House |
|