<blockquote>
  <p><strong>How does Bitcoin respond to the introduction of GDPR?</strong></p>
</blockquote>

<ol>
<li><p>Bitcoin is not a person or legal entity that is subject to law. Only people or businesses using bitcoin have to comply with GDPR.</p></li>
<li><p>So far as I know, storage of personal information is not a part of the specifications of the protocols or algorithms that comprise Bitcoin.</p></li>
<li><p>Specific pieces of software might allow you to store personal information. For example, wallet software might enable you to keep a list of people, addresses of their bitcoin wallets and your text notes about them. The users are responsible for complying with GDPR. The software writers are only responsible for enabling this compliance (e.g. providing a delete function or something else GDPR compliance needs). The prime reposbility is with the user, if the software they use cannot be used in a way that complies with GDPR they must find other software.</p></li>
</ol>

CC BY-SA 4.0
2018-06-29T10:17:13.800Z
2018-06-29T10:17:13.800Z
RedGrittyBrick
<p>Very simply, if a person stores the personal data of another (or, of their own, or, any data) then the law is upon the first party to comply with GDPR or any other law applicable. Bitcoin itself being a series of independently operated nodes connecting to and accessing a consensus operated immutable public storage medium.</p>

<p>I argue that your own public key (&amp; signatures and, so on, as is related to Bitcoin, created for the purpose, when necessary, of being stored in the blockchain) cannot possibly be considered personal data in the view of GDPR.</p>

CC BY-SA 4.0
2018-07-30T22:25:33.130Z
2018-07-31T07:15:44.800Z
2018-07-31T07:15:44.800Z
Willtech
<p>The use of Bitcoin is a inherently an <strong>opt-in</strong> privacy model, versus not an <strong>opt-out</strong> privacy model.  Additionally, Bitcoin stealth transactions can be applied twice to effectively provide sender privacy until secp256k1 cryptography is potentially be broken by factoring. Privacy exposure on public blockchains are essentially forever, there is no recourse.</p>

CC BY-SA 4.0
2018-06-27T14:50:36.910Z
This explains further why the question is not easy to solve, but I don't really see an answer on what is/should be done.
Dennis Jaheruddin
CC BY-SA 4.0
2018-06-28T22:27:18.907Z
There is currently no silver bullet solution; hence, everyone is fretting.  Lawyers and consultants also get a nice size window to make tons of money.
skaht
CC BY-SA 4.0
2018-06-23T23:45:58.803Z
2018-06-23T23:45:58.803Z
skaht
<h3>Update: <a href="https://bitcoin.stackexchange.com/questions/71062/blockchain-and-user-rights-to-ask-for-personal-data-removal">This related question</a> focusses on users own data. My question is mostly asked from the perspective where a person may enter someone elses personal data, like someones sexual preference.</h3>
<hr />
<p>In the data world GDPR is currently a very hot topic:</p>
<ul>
<li>personal data must be protected and not retained too long.</li>
</ul>
<p>For normal companies and systems it is already very difficult to meet the letter of the regulation in practice, however I image that for bitcoin it is even challenging on a much deeper level. Two core principles:</p>
<ul>
<li>Data must be visible by all</li>
<li>The full history must be preserved</li>
</ul>
<p>This brings me to a question:</p>
<h2>How does Bitcoin respond to the introduction of GDPR?</h2>
<hr />
<p>And as bonus question:</p>
<h3>What does this mean for other blockchain applications (like corporate concepts, not specifically for currencies)</h3>

CC BY-SA 4.0
2018-06-23T20:41:41.690Z
As an aside, the core functions of the bitcoin **network** are incredibly conservative in regards to adopting changes. So when talking about the GDPR it is important to understand the regulations of one nation (or group of nations) will likely have no affect on the bitcoin network's rules and function. In general, changes to bitcoin are delivered bottom-up, from the users. Whereas regulations are delivered top-down, from the regulators. Bitcoin **users** and **businesses** may be subject to GDPR though, so I suppose it is still a discussion worth having.
chytrik
CC BY-SA 4.0
2018-06-25T00:44:05.560Z
Possible duplicate of [Blockchain and user rights to ask for personal data removal](https://bitcoin.stackexchange.com/questions/71062/blockchain-and-user-rights-to-ask-for-personal-data-removal)
Nate Eldredge
CC BY-SA 4.0
2018-06-27T14:49:17.197Z
@NateEldredge I have added a comment to focus on a part that most interests me, and is not really addressed in the linked question. I think it is no longer a duplicate.
Dennis Jaheruddin
CC BY-SA 4.0
2018-06-27T15:32:45.703Z
If your use of technology X does not comply with an applicable law Y, you either stop using technology X or pay the fines until jailed.
RedGrittyBrick
<regulation>
How does Bitcoin comply to GDPR
Dennis Jaheruddin
# How does Bitcoin comply to GDPR

(Asked by: username_0 on 2018-06-23)

### Update: [This related question](https://bitcoin.stackexchange.com/questions/71062/blockchain-and-user-rights-to-ask-for-personal-data-removal) focusses on users own data. My question is mostly asked from the perspective where a person may enter someone elses personal data, like someones sexual preference.

---

In the data world GDPR is currently a very hot topic:

* personal data must be protected and not retained too long.

For normal companies and systems it is already very difficult to meet the letter of the regulation in practice, however I image that for bitcoin it is even challenging on a much deeper level. Two core principles:

* Data must be visible by all
* The full history must be preserved

This brings me to a question:

## How does Bitcoin respond to the introduction of GDPR?

---

And as bonus question:

### What does this mean for other blockchain applications (like corporate concepts, not specifically for currencies)

**Tags:** regulation

> **Comments:**
> **username_1**: As an aside, the core functions of the bitcoin **network** are incredibly conservative in regards to adopting changes. So when talking about the GDPR it is important to understand the regulations of one nation (or group of nations) will likely have no affect on the bitcoin network's rules and function. In general, changes to bitcoin are delivered bottom-up, from the users. Whereas regulations are delivered top-down, from the regulators. Bitcoin **users** and **businesses** may be subject to GDPR though, so I suppose it is still a discussion worth having.  
> **username_2**: Possible duplicate of [Blockchain and user rights to ask for personal data removal](https://bitcoin.stackexchange.com/questions/71062/blockchain-and-user-rights-to-ask-for-personal-data-removal)  
> **username_0**: @username_2 I have added a comment to focus on a part that most interests me, and is not really addressed in the linked question. I think it is no longer a duplicate.  
> **username_3**: If your use of technology X does not comply with an applicable law Y, you either stop using technology X or pay the fines until jailed.  

---

## 3 answers

### Answer by username_3 on 2018-06-29. Score: 1

> **How does Bitcoin respond to the introduction of GDPR?**

1. Bitcoin is not a person or legal entity that is subject to law. Only people or businesses using bitcoin have to comply with GDPR.
2. So far as I know, storage of personal information is not a part of the specifications of the protocols or algorithms that comprise Bitcoin.
3. Specific pieces of software might allow you to store personal information. For example, wallet software might enable you to keep a list of people, addresses of their bitcoin wallets and your text notes about them. The users are responsible for complying with GDPR. The software writers are only responsible for enabling this compliance (e.g. providing a delete function or something else GDPR compliance needs). The prime reposbility is with the user, if the software they use cannot be used in a way that complies with GDPR they must find other software.


---

### Answer by username_4 on 2018-07-30. Score: 1

Very simply, if a person stores the personal data of another (or, of their own, or, any data) then the law is upon the first party to comply with GDPR or any other law applicable. Bitcoin itself being a series of independently operated nodes connecting to and accessing a consensus operated immutable public storage medium.

I argue that your own public key (& signatures and, so on, as is related to Bitcoin, created for the purpose, when necessary, of being stored in the blockchain) cannot possibly be considered personal data in the view of GDPR.


---

### Answer by username_5 on 2018-06-23. Score: -1

The use of Bitcoin is a inherently an **opt-in** privacy model, versus not an **opt-out** privacy model. Additionally, Bitcoin stealth transactions can be applied twice to effectively provide sender privacy until secp256k1 cryptography is potentially be broken by factoring. Privacy exposure on public blockchains are essentially forever, there is no recourse.

> **Comments:**
> **username_0**: This explains further why the question is not easy to solve, but I don't really see an answer on what is/should be done.  
> **username_5**: There is currently no silver bullet solution; hence, everyone is fretting.  Lawyers and consultants also get a nice size window to make tons of money.  

---

