Law versus technology: Blockchain, GDPR, and tough tradeoffs
Law versus technology: Blockchain, GDPR, and tough tradeoffs
复制标题
DOI：
10.1016/j.clsr.2020.105454
复制
发表时间：
2020-09-01
影响因子：
2.9
通讯作者：
Nussbaum, Brian
中科院分区：
文献类型：
--
作者：
Tatar, Unal;Gokce, Yasir;Nussbaum, Brian
法律的构建方式与技术的实际运作方式之间的不一致始终是一个值得探索的有趣而有用的话题。当法律与商业模式发生冲突时，解决方案通常是改变商业模式。然而，当法律与硬件和软件的架构发生冲突时，如何处理这个问题就不那么清楚了。本文分析了区块链技术与GDPR要求之间的矛盾。我们研究的三个矛盾是：(i)被遗忘权与记录的不可逆性/不变性，（ii）设计数据保护与区块链的防篡改和透明度，以及（iii）数据控制器与分散节点。我们强调，可以通过关注GDPR和区块链的共性，开发新的方法和解释，以及根据数据保护法的需要定制区块链技术来处理冲突。(C) 2020 Unal taratar, Yasir Gokce, Brian Nussbaum。Elsevier Ltd.出版。版权所有。
Inconsistency between the way in which the law is structured, and the way in which technologies actually operate is always an interesting and useful topic to explore. When a law conflicts with a business model, the solution will often be changing the business model. However, when the law comes into conflict with the architecture of hardware and software, it is less clear how the problem will be managed.In this paper, we analyze the contradiction of blockchain technology and the requirements of GDPR. The three contradictions we examine are (i) right to be forgotten versus irreversibility/immutability of records, (ii) data protection by design versus tamper-proofness and transparency of blockchain, and (iii) data controller versus decentralized nodes. We highlight that the conflicts can be handled through focusing on commonalities of GDPR and the blockchain, developing new approaches and interpretations, and tailoring the blockchain technology according to the needs of data protection law. (C) 2020 Unal Tatar, Yasir Gokce, Brian Nussbaum. Published by Elsevier Ltd. All rights reserved.