Regulation and compliance

Regulatory compliance is another dimension of blockchain security. How do we ensure that the blockchain platform is GDPR-compliant? How do we ensure that the blockchain platform is compliant with the enterprise security policy? Such questions fall into the category of regulatory compliance-related security requirements. There are certain requirements around data localization, e.g., customer data may not leave a specific geographic location. In such scenarios, a globally replicated blockchain may not be the best solution. In those cases, restricted private transactions (introduced in Chapter 16, Enterprise Blockchain) could be a useful construct to follow. In other situations, the use of off-chain transaction managers located in specific geographic locations could be helpful. In certain cases, specific cryptographic protocols are mandated by organizations such as NIST. For example, specific curves are mandated in SP 800-186 by NIST for federal agencies, which...