Abstract

This thesis aims to explore the compliance of the GDPR and blockchain technology. The GDPR was implemented for EU member states on May 2018 with the purpose of harmonizing data protection regulation. However, the regulation is based on the notion that data is stored and processed in a centralized system. This causes an issue when it comes to distributed networks, and in particular with the distributed ledger technology (DLT), the underlying technology of blockchain.

For this thesis, a literature review has been done to investigate the problems of GDPR compliance for blockchain projects, and what technical solutions exist to make a blockchain solution more GDPR compliant. In addition, interviews have been conducted to investigate the technical and juridical perspectives on the current and future situation.

Problems are mainly concerning the immutability and transparency of a blockchain and examples of technical solutions that handle those problems are presented. However, none of the presented solutions are yet to guarantee full GDPR compliance. Further work on guidelines for the GDPR is necessary for blockchain projects to be successful with complying and a further exchange between legal and technical parties is essential to make that happen.