Without any claim to exhaustiveness, in this section we examine the main points of contrast and friction between blockchain technology and the European Union's General Data Protection Regulation (GDPR), which can make compliance with European privacy legislation particularly demanding. The GDPR came into force in May 2018, and introduces a series of fundamental rights to guarantee the correct processing of personal data relating to European citizens.
To protect these fundamental rights, a series of obligations (and penalties, in the event of non-fulfillment) are provided by the GDPR that fall on the subjects who assume the role of data controllers. Data controllers are all those subjects that can decide the purposes and means of personal data processing. From what we have said so far, some difficulties in the correct application of the...