How Is 'Data Immutability' Reconciled with the 'Right to Be Forgotten' under GDPR? ▴ Learn

How Is ‘Data Immutability’ Reconciled with the ‘Right to Be Forgotten’ under GDPR?

Data immutability (data cannot be deleted) conflicts with GDPR's 'right to be forgotten' (data must be erasable). Reconciliation often involves storing personally identifiable information (PII) off-chain in a traditional, mutable database, while only storing a non-reversible cryptographic hash of the data on-chain.

If a deletion request is made, the PII is deleted from the off-chain database, making the on-chain hash meaningless without the original data.

What Is the Challenge of Storing Illegal Content on an Immutable Ledger?

How Does a Hash Function Differ from an Encryption Algorithm?

What Is a “Zero-Cost” Collar and How Is It Achieved?

What Is the Difference between a Hash Function and an Encryption Algorithm?