Privacy and Blockchain: The legal implications of the GDPR’s right to erasure

Abstract

The recent entry into force of the General Data Protection Regulation (GDPR) imposes new data protection requirements on data controllers and processors with respect to the processing of the personal data of the EU/EEA citizens. A part of these requirements is the erasure of personal data upon the data subject’s request and after meeting certain conditions. Blockchain technology, which records an increase in its usage, exhibits a degree of transparency and immutability that may prove difficult to reconcile with the obligations introduced by the GDPR’s right to erasure. This thesis examines the legal implications of enforcing this right with respect to personal data stored and processed on a blockchain.