15 Oct INATBA’s Privacy Working Group publishes a paper on Leveraging Zero-Knowledge Proofs for GDPR Compliance in Blockchain Projects
INATBA’s Privacy Working Group has released a position paper titled “Leveraging Zero-Knowledge Proofs for GDPR Compliance in Blockchain Projects.” This document explores the challenges of aligning blockchain technology with GDPR requirements and how Zero-Knowledge Proofs (ZKPs) offer innovative solutions to protect privacy while maintaining blockchain’s decentralized nature.
GDPR imposes strict requirements, such as the right to be forgotten and data minimization, that are difficult to implement on blockchain due to its immutable structure. Additionally, decentralized systems make it hard to assign accountability, as there are no clear data controllers or processors. These challenges complicate GDPR compliance in a blockchain context.
ZKPs provide a solution by allowing the verification of data without revealing personal details. Sensitive data can remain off-chain, while only cryptographic proofs are stored on-chain. This helps meet GDPR’s data minimization and erasure requirements without compromising security or transparency.
Key points:
- Blockchain’s immutable structure conflicts with GDPR’s requirements, such as data erasure and minimization.
- ZKPs allow data verification without revealing personal information, keeping sensitive data off-chain and stored as cryptographic proofs.
- Personal data can be effectively erased by revoking cryptographic keys, aligning with GDPR’s right to be forgotten.
- Recent advancements in ZKP technology, including ZK Virtual Machines (ZK VMs) and frameworks like snarkJS, make ZKPs easier to implement.
- Applications of ZKPs are emerging in identity verification, privacy-preserving transactions, and secure e-voting systems, offering practical solutions for GDPR compliance.
We would like to thank the authors of the paper: Dave Zein (Block-Staff, Co-Chair of the Privacy Working Group, Czech Republic) and Wiktor Pinkwart (token.com, Co-Chair of the Privacy Working Group, Poland), and the reviewers: Catarina Silva (EUBOF Expert Group, Portugal), Geoffrey Goodell (INATBA Academic Advisory Body Member, UCL, United Kingdom), Harris Niavis (Inlecom, Greece), Jonathan Heiss (INATBA Academic Advisory Body Member, TU Berlin, Germany), Jörn Erbguth (EUBOF Expert Group, Switzerland), Sharmin Chougule (INATBA Academic Advisory Body Member, University of Camerino, UNIDROIT, Italy), Sophoclis Stephanou (Blockchain.com, United Kingdom), Stéphanie Attias (The Sandbox, France).
If you want to learn more about the working group visit: https://inatba.org/working-groups/working-group-privacy/
We invite you to explore the full position paper by downloading it via the form below:
Press Contact
Email: pr@inatba.org
About INATBA
Launched in 2019 by the European Commission, INATBA – International Association for Trusted Blockchain Applications is a highly influential Association in advocating for Blockchain and DLT adoption in Europe and globally. INATBA is mainly known for its credibility with regulatory authorities and policymakers and is appraised for its contributions to Markets in Crypto Asset Regulation (MICA), Transfer of Funds Regulation (TFOR), electronic Identification, Authentication and Trust Services (eIDAS), CHAISE Project, EU Pact for Skills, Academic & Governmental Advisory Bodies, and its passionate diverse global community of CEOs, CTOs, Heads of Policy, Public/Institutional Relations, Legal, Marketing & BizDev, Developers, Policymakers. To learn more, visit www.inatba.org.