Blockchain and Data Protection

Jörn Erbguth, University of Geneva

Session 155

13:15–14:00, Monday, 8 April 2019 Room C2, ITU Tower Thematic Workshop

Can blockchain serve privacy? Can blockchain be compliant with GDPR? What are standards organizations doing?

Data protection laws try to protect privacy by regulating those who are in control of our personal data. However, this regulation often does not sufficiently protect our privacy. Global companies abuse our data, governments spy on us and hackers steal hundreds of millions of personal data sets. It seems that especially huge central data collections are very vulnerable to abuse. What can we do to get rid of huge centrally controlled data collections? Blockchain-based privacy projects take a different approach: instead of regulating the controller of the data collections, data is stored decentrally. It is protected by cryptography and no central actor has complete control. Can we achieve better privacy protection this way? Examples like self-sovereign-identities or anonymous payments suggest that this might be possible.

Data protection laws try to protect privacy by regulating those who are in control of our personal data. However, this regulation often does not sufficiently protect our privacy. Global companies abuse our data, governments spy on us and hackers steal hundreds of millions of personal data sets. It seems that especially huge central data collections are very vulnerable to abuse. What can we do to get rid of huge centrally controlled data collections? Blockchain-based privacy projects take a different approach: instead of regulating the controller of the data collections, data is stored decentrally. It is protected by cryptography and no central actor has complete control. Can we achieve better privacy protection this way? Examples like self-sovereign-identities or anonymous payments suggest that this might be possible.

Preceding the workshop at the WSIS-conference, there will be a seminar at the University of Geneva where experts in blockchain and data protection will discuss ways to use blockchain in a GDPR compliant way. The results of this intensive seminar will be presented and discussed by a panel at the workshop.

Legal uncertainty and missing standards as well as lacking best practices are a major problem for GDPR compliance of blockchain-based projects. Several standard bodies are currently tackling blockchain privacy: at the workshop we will hear about current projects from organizations like ITU, ISO and DIN.

Moderator

Mr Jörn Erbguth, consultant on Blockchain & GDPR, Lecturer at the University of Geneva and Geneva School of Diplomacy


Speakers/Panellists

Mr Jörn Erbguth, consultant on Blockchain & GDPR, Lecturer at the University of Geneva and Geneva School of Diplomacy

Ms Katrin Kirchert, LL.M., Lawyer for Privacy Law, Data Protection and Labour Law

Mr Martin Adolph, Study Group Advisor at the Internation Telecommunication Union (ITU)

Ms Anja Grafenauer, Co-Founder at privacyblockchainbydesign.com

Session's link to WSIS Action Lines

  • C1. The role of public governance authorities and all stakeholders in the promotion of ICTs for development logo C1. The role of public governance authorities and all stakeholders in the promotion of ICTs for development
  • C2. Information and communication infrastructure logo C2. Information and communication infrastructure
  • C5. Building confidence and security in the use of ICTs logo C5. Building confidence and security in the use of ICTs
  • C7. ICT Applications: E-government logo C7. ICT Applications: E-government
  • C7. ICT Applications: E-business logo C7. ICT Applications: E-business
  • C7. ICT Applications: E-health logo C7. ICT Applications: E-health
  • C10. Ethical dimensions of the Information Society logo C10. Ethical dimensions of the Information Society
  • C11. International and regional cooperation logo C11. International and regional cooperation

Privacy is one of the most important ethical dimensions of the Information Society.

Blockchains are international and require international cooperation.

Blockchain applications are used for E-health, E-business, E-government. In these fields, privacy protection is very important and an indispensible basis for trust in the application of ICTs.

Blockchains are often seen as one of the most important infrastructures for future information and communication.

Governments and regulators play an important role in setting the rules and achieving better privacy than we have today.


Session's link to Sustainable Development Process

  • Goal 8: Promote inclusive and sustainable economic growth, employment and decent work for all logo Goal 8: Promote inclusive and sustainable economic growth, employment and decent work for all
  • Goal 9: Build resilient infrastructure, promote sustainable industrialization and foster innovation logo Goal 9: Build resilient infrastructure, promote sustainable industrialization and foster innovation
  • Goal 11: Make cities inclusive, safe, resilient and sustainable logo Goal 11: Make cities inclusive, safe, resilient and sustainable
  • Goal 12: Ensure sustainable consumption and production patterns logo Goal 12: Ensure sustainable consumption and production patterns

Blockchain can be a way to better manage resources, achieve better transparency, better privacy, better resilience and ensure compliance. However, blockchain does not automatically achieve this and still has its own challenges like energy consumption or missing scalability. Third generation blockchains are tackling these issues.

Links

Link to this session