Innovations and Contradictions in Applying Blockchain Technology in Records Management under General Data Protection Regulation

Purpose – This review aims to highlight the innovations and contradictions of Blockchain Technology applications in Records regarding the General Data Protection Regulation (GDPR) of the European Union (EU). Design/methodology/approach – An extensive literature review was conducted, which revealed of many articles based on research into blockchain, most written from a legal perspective. This report focuses on the extent of analysis of the contradiction that exists between Blockchain information storage and international personal data protection legal requirements, with an emphasis on EU. The variety of proposed solutions to overcome this issue are discussed. Findings – The incompatibility between blockchain technology and data privacy is because of three fundamental inconsistencies: (a) Data cannot be modified once inserted into a block, which conflicts with the right to delete and correct them; (b) Data is publicly available in each participant of the blockchain, a function that conflicts with the principles of confidentiality, accountability, and the designation of a central data processor; and (c) The data is stored indefinitely, in conflict with the GDPR principles related to the purpose, necessity and minimizing of information. Originality/value - This paper contributes an original analysis of the implications of the adoption of Blockchain in Records Management and the implications that exist with GDPR.