Close
  • Latest News
  • Artificial Intelligence
  • Video
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Artificial Intelligence
  • Video
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Cybersecurity
    • Cybersecurity

    Unintended Consequences of GDPR Threaten Blockchain, Domain Name IDs

    Written by

    Wayne Rash
    Published May 22, 2018
    Share
    Facebook
    Twitter
    Linkedin

      eWEEK content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More.

      The Parity ICO Passport Service (PICOPS) has announced that it’s last day of business will be May 24, 2018, which is the day before the European Union’s GDPR goes into effect. PICOPS is an authentication service for the Ethereum crypto-currency. It used blockchain technology to store personal information as a way to ensure that traders in Ethereum weren’t located in places where crypto-currencies are prohibited.

      Unfortunately for PICOPS, using blockchain to store personal information breaks some key requirements of the GDPR. For example, Article 5 of the GDPR requires personal information to be processed lawfully, fairly and in a transparent manner, but with blockchain there’s no transparency because everything is encrypted.

      There are other problems. The GDPR requires that anyone can request that their data be deleted in their right to be forgotten. But blockchain data cannot be deleted—ever. It also can’t be changed if the information is wrong, another requirement of the GDPR. But it gets worse.

      The GDPR requires that personal data collected by an organization be the responsibility of the Data Protection Officer. But the distributed ledger in a public blockchain has no such person and no real provision for a DPO. There’s also no one in charge of processing individual data.

      The GDPR also requires that any identification of personal data be deleted as soon as possible and that such personal data not be kept any longer than is required for the purpose for which it was originally collected. Again, the problem with deleting blockchain data is that you can’t delete it.

      So does this spell doom for blockchain? Well, no. It just places limits on how it can be used in regards to personal data. You can, for example, use blockchain to store references to data stored elsewhere. If the time comes where you have to remove someone’s record, to allow them to be forgotten, then all you need to do is remove the referential information, so that all that remains is the index information without the actual data that it points to.

      Looked at this way, some types of crypto-currency are safe. Their blockchain entries are simply the encrypted key to the Bitcoin or other currency and there’s no personal information involved.

      The problem is that blockchain is expanding far beyond the original role as a crypto-currency ledger and has since morphed into an all-purpose ledger to record for any other type of information. The GDPR will probably eliminate that sort of blockchain application, but it would appear that crypto-currency is safe.

      But that’s not the only technology that’s being threatened by the GDPR. There’s also the venerable “WHOIS” (pronounced who is) internet function that allows anyone to type in “WHOIS” and the website address to obtain the name of the owner and the relevant contact information of any internet domain name. ICANN requires that the WHOIS data be made available for every internet address.

      This allows you to see who’s behind any given site on the net. As you might suspect, the WHOIS function is invaluable for fighting fraud and cyber-crime on the internet and law enforcement officials aren’t sure what to do about this. Currently there’s a request for clarification being presented to the European authorities.

      The real problem, of course, isn’t blockchain and it’s not internet registrations. The problem lies in how a person’s information is used, how it’s made available and how GDPR requirements can be met without breaking everything else. To accomplish that, you need to know what the GDPR actually requires, which means spending some studying it or at least hiring a consultant who has. You can also take a look at some of the issues as presented by PwC in a useful guide.

      While you’re pondering that, here are some ideas to keep in mind:

      1. Don’t use blockchain (or any other means that won’t fly with GDPR) to store personally identifiable information. Instead, if you want to use blockchain, then only store references to another place where the PII is kept. That way, if you remove the object of the reference, then it becomes meaningless.
      2. Remember that information in a blockchain cannot be deleted or changed. The fact that it’s encrypted is beside the point, since it appears that the right to be forgotten, means in all forms. Just deleting the encryption key may not be enough.
      3. The GDPR requirement that data be minimized is also a problem with blockchain, since by design data is replicated as part of the distributed ledger.
      4. If a blockchain is involved, you need to find some way to resolve the requirement for a DPO and the related requirements of who the data processors are and who the data controller is. In a corporate environment, this should be fairly straightforward. With a public blockchain it’s probably impossible.

      This does not mean that you can’t use a blockchain and its distributed ledger as way to help secure your data. It does mean that you must be very careful about determining where the blockchain and personal data intersect and eliminate those places. In some case, it may mean being more innovative than you’ve been in the past.

      For example, perhaps you don’t want to put a person’s name into the WHOIS entry in your internet registration, but rather the generic contact information of the IT office. This avoids any conflict with GDPR and it also makes things simpler when personnel changes happen.

      Ultimately, the key is personal information. If you see it anywhere, get rid of it unless you specifically know it meets the requirements. Instead, you can console yourself by limiting your blockchain use to your private stash of Bitcoins.

      Wayne Rash
      Wayne Rash
      https://www.eweek.com/author/wayne-rash/
      Wayne Rash is a content writer and editor with a 35-year history covering technology. He’s a frequent speaker on business, technology issues and enterprise computing. He is the author of five books, including his most recent, "Politics on the Nets." Rash is a former Executive Editor of eWEEK and a former analyst in the eWEEK Test Center. He was also an analyst in the InfoWorld Test Center and editor of InternetWeek. He's a retired naval officer, a former principal at American Management Systems and a long-time columnist for Byte Magazine.

      Get the Free Newsletter!

      Subscribe to Daily Tech Insider for top news, trends & analysis

      Get the Free Newsletter!

      Subscribe to Daily Tech Insider for top news, trends & analysis

      MOST POPULAR ARTICLES

      Artificial Intelligence

      9 Best AI 3D Generators You Need...

      Sam Rinko - June 25, 2024 0
      AI 3D Generators are powerful tools for many different industries. Discover the best AI 3D Generators, and learn which is best for your specific use case.
      Read more
      Cloud

      RingCentral Expands Its Collaboration Platform

      Zeus Kerravala - November 22, 2023 0
      RingCentral adds AI-enabled contact center and hybrid event products to its suite of collaboration services.
      Read more
      Artificial Intelligence

      8 Best AI Data Analytics Software &...

      Aminu Abdullahi - January 18, 2024 0
      Learn the top AI data analytics software to use. Compare AI data analytics solutions & features to make the best choice for your business.
      Read more
      Latest News

      Zeus Kerravala on Networking: Multicloud, 5G, and...

      James Maguire - December 16, 2022 0
      I spoke with Zeus Kerravala, industry analyst at ZK Research, about the rapid changes in enterprise networking, as tech advances and digital transformation prompt...
      Read more
      Video

      Datadog President Amit Agarwal on Trends in...

      James Maguire - November 11, 2022 0
      I spoke with Amit Agarwal, President of Datadog, about infrastructure observability, from current trends to key challenges to the future of this rapidly growing...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2024 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×