Ethereum Proposal Outlines GDPR Compliance Path via Modular Design


Because the broader Ethereum ecosystem and its core rules evolve to handle information privateness issues, a brand new proposal recommends a modular compliance technique as a path to reconcile public blockchains with the European Union’s Common Knowledge Safety Regulation (GDPR).

On June 9, a proposal drafted by Ethereum neighborhood member Eugenio Reggianini urged using modular structure for efficient information administration and privateness.

“By pushing private information to the perimeters (wallets and DApps), utilizing offchain storage with metadata-erasure, and splitting roles cryptographically, we will focus GDPR controller duties on a small set of entities, whereas the broader community turns into mere processors or falls out of scope,” Reggianini mentioned.

Ethereum’s transition to a modular structure might allow the mixing of assorted privacy-enhancing applied sciences (PETs), which, in accordance with Reggianini, can obtain GDPR compliance in permissionless blockchain environments.

0197548f a302 7e8d 8748 1586d63a6211
Supply: ethresearchbot

Associated: Vitalik wants to make Ethereum ‘as simple as Bitcoin’ in 5 years

Technical roadmap: PETs to the rescue

The proposal outlines a number of applied sciences already being built-in or proposed for Ethereum that assist scale back private information publicity, together with proto-danksharding (EIP-4844), which limits transaction blob lifespans to round 18 days, imposing storage minimization.

Zero-Information Succinct Non-Interactive Argument of Information (zk-SNARKs) also can assist enhance privateness as they contain validators confirming succinct cryptographic proofs slightly than viewing transaction payloads, dramatically decreasing onchain information visibility. 

Different PET integrations that might assist with GDPR compliance embody Totally Homomorphic Encryption and Trusted Execution Environments (TEEs), multiparty computation (MPC), Proposer-Builder Separation (PBS) and Peer Knowledge Availability Sampling (PeerDAS).

0197548f a85f 7edd 8c65 e7888ce44e96
Proposed GDPR compliance framework. Supply: ethresear.ch

Ethereum’s modular compliance technique

The proposal breaks down GDPR implications throughout the Ethereum community’s three layers: the execution layer, consensus layer and information availability layer. 

The execution layer would function as processors relaying solely encrypted or blinded information, whereas the consensus layer would solely validate commitments and zero-knowledge proofs. Lastly, the info availability layer, underneath PeerDAS, would retailer solely nameless shards for restricted timeframes, bringing them consistent with GDPR’s information minimization precept.

By focusing information controllership on the applying layer and leveraging PETs, Ethereum can shield person privateness with out sacrificing its core rules, Reggianini claimed. 

Nevertheless, the framework’s success will depend upon broad neighborhood adoption, developer buy-in, and potential alignment with EU regulators.

Journal: Baby boomers worth $79T are finally getting on board with Bitcoin