Lightweight Blockchain-based Platform for GDPR-Compliant Personal Data Management

Daudén-Esmel, Cristòfol; Castellà‐Roca, Jordi; Viejo, Alexandre; Domingo-Ferrer, Josep

doi:10.1109/csp51677.2021.9357602

Cited by 14 publications

(19 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Governance: About the governance, we listed questions concern the good practices, polices, communication, roles and involvement at a strategic level. This dimension contained eleven questions (7)(8)(9)(10)(11)(12)(13)(14)(15)(16)(17). Dimension 3…”

Section: Methodsmentioning

confidence: 99%

See 1 more Smart Citation

Diagnostic of Data Processing by Brazilian Organizations—A Low Compliance Issue

et al. 2021

View full text Add to dashboard Cite

In order to guarantee the privacy of users’ data, the Brazilian government created the Brazilian General Data Protection Law (LGPD). This article made a diagnostic of Brazilian organizations in relation to their suitability for LGPD, based on the perception of Information Technology (IT) practitioners who work in these organizations. We used a survey with 41 questions to diagnose different Brazilian organizations, both public and private. The diagnostic questionnaire was answered by 105 IT practitioners. The results show that 27% of organizations process personal data of public access based on good faith and LGPD principles. In addition, our findings also revealed that 16.3% of organizations have not established a procedure or methodology to verify that the LGPD principles are being respected during the development of services that will handle personal data from the product or service design phase to its execution and 20% of the organizations did not establish a communication process to the personal data holders, regarding the possible data breaches. The result of the diagnostic allows organizations and data users to have an overview of how the treatment of personal data of their customers is being treated and which points of attention are in relation to the principles of LGPD.

show abstract

Section: Methodsmentioning

confidence: 99%

“…Daudén-Esmel et al [17] proposed a GDPR-compliant personal data management platform using Blockchain concepts. The platform provides public access to immutable evidence that shows the agreements between data subjects and service providers.…”

Section: Related Workmentioning

confidence: 99%

Diagnostic of Data Processing by Brazilian Organizations—A Low Compliance Issue

et al. 2021

View full text Add to dashboard Cite

show abstract

“…Features of BC such as integrity, transparency, reliability, and traceability are effective when they are applied to tasks that require compliance management. To manage personal data or GDPR compliance, many researchers have performed research based on BC [8,[15][16][17][18][19][20][21][22][23][24][25][28][29][30][31][32][33][34][35][36][37][38][39][40][41][42].…”

Section: Related Work Of Blockchain-based Gdprmentioning

confidence: 99%

“…Casaleiro in [41] Protection and control of personal identifiable information R14 Daudén-Esmel et al in [42] BC-based platform for GDPR-compliant personal data management…”

Section: Related Work Of Blockchain-based Gdprmentioning

confidence: 99%

Delegation-Based Personal Data Processing Request Notarization Framework for GDPR Based on Private Blockchain

Jung¹,

Lee

Euom

2021

Applied Sciences

View full text Add to dashboard Cite

With the growing awareness regarding the importance of personal data protection, many countries have established laws and regulations to ensure data privacy and are supervising managements to comply with them. Although various studies have suggested compliance methods of the general data protection regulation (GDPR) for personal data, no method exists that can ensure the reliability and integrity of the personal data processing request records of a data subject to enable its utilization as a GDPR compliance audit proof for an auditor. In this paper, we propose a delegation-based personal data processing request notarization framework for GDPR using a private blockchain. The proposed notarization framework allows the data subject to delegate requests to process of personal data; the framework makes the requests to the data controller, which performs the processing. The generated data processing request and processing result data are stored in the blockchain ledger and notarized via a trusted institution of the blockchain network. The Hypderledger Fabric implementation of the framework demonstrates the fulfillment of system requirements and feasibility of implementing a GDPR compliance audit for the processing of personal data. The analysis results with comparisons among the related works indicate that the proposed framework provides better reliability and feasibility for the GDPR audit of personal data processing request than extant methods.

show abstract

“…Como o armazenamento off-chain não será imutável, alcançar o mesmo nível de descentralização e segurança na parte off-chain é um desafio. [Truong et al 2020] [Daudén-Esmel et al 2021…”

Section: Segurançaunclassified

Segurança e Escalabilidade em Sharding Blockchain

Rocha¹,

Albuquerque²,

Loivos³

et al. 2021

Minicursos Do XXI Simpósio Brasileiro De Segurança Da Informação E De Sistemas Computacionais

View full text Add to dashboard Cite

The circulation of the real money, on paper, is decreasing, migrating to the virtual. As a result, the need for a secure way to carry out transactions without relying on a trusted third-party increase. The cryptocurrencies that emerged in 2009 with the Nakamoto protocol represent an alternative to this demand, however the initial proposal has a scalability problem that makes it impossible to compete with the credit card network. The need to confirm transactions means that a cryptocurrency that uses the traditional blockchain like Ethereum only has 20 to 30 transactions per second, far away from VisaNet which has around 1700 transactions per second. To solve the scalability, the concept of sharding was created. This work proposes to present some sharding models highlighting their particularities and security solutions.

show abstract

Lightweight Blockchain-based Platform for GDPR-Compliant Personal Data Management

Cited by 14 publications

References 9 publications

Diagnostic of Data Processing by Brazilian Organizations—A Low Compliance Issue

Diagnostic of Data Processing by Brazilian Organizations—A Low Compliance Issue

Delegation-Based Personal Data Processing Request Notarization Framework for GDPR Based on Private Blockchain

Segurança e Escalabilidade em Sharding Blockchain

Contact Info

Product

Resources

About