Event Sourcing / Kappa Architecture with GDRP is going to be a fun challenge. How do you delete something from a sequence of events that's intended to be immutable? Simply tombstoning entries apparently isn't enough; the law will actually require wiping data, hah.
-
And I'm curious about the blockchain. GDPR applies to "organizations" only, and blockchains are owned by no one in specific. What about organizations that need to store the blockchain? Are they forbidden to?
Yep, from the articles about GDPR I've read so far you can basically be fined into oblivion for negligance if you store your customer's data in a blockchain. It doesn't mean you can't store _anything_ in a blockchain; but gotta be careful with what you store.
-
-
Heh came here to say the same thing, anything that is blockchain based (in the loose sense, i.e. git) is in trouble. Seriously limits most of fintech blockchain solutions.
-
I wonder if you can store the data encrypted to the chain, and delete the key. The chain is still able to be validated but the PII isn’t able to be decrypted.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.