Ensuring Personal Data Security Using Blockchain Technology: Issues and Perspectives for Legislative Improvement

At the present time, various industrial sectors worldwide, including construction, face multiply emerging challenges in the processing of personal data. Different kinds of summons in this sphere are also manifesting themselves in Kazakhstan. In these conditions, there appear more prerequisites indicating that contemporary technologies can prove themselves to be useful in countering these challenges. At the same time, there are increasingly more arguments in favor of the fact that blockchain technology toolkits can increase the level of data protection and reduce corruption risks. Implementation of the preceding is accompanied by the need for legislation adaptation to innovative technological capabilities. The objectives imply the achievement of a complex aim: using the example of the Republic of Kazakhstan to identify a number of typical problems in the field of adaptation of legislative regulation concerning the implementation of blockchain technology with consideration of the prospects for their solution. The area of legislative regulation covered is the sphere of personal data protection. The methodological basis of the study is presented by the method of system analysis and the comparative legal method. The results of the study indicate that, at present, a number of the most pressing issues concern the definition of the status of subjects of legal relations in the field of personal data protection, the definition of blockchain as a new regulatory unit within the framework of the previously mentioned legal relations. This is accompanied by the emergence of specific legal categories within the framework of contractual relations. In particular, the issue of the legal status of the data controller (manager) remains unresolved. The work provides a number of arguments in favor of the adoption of the National Regulations for the Protection of Personal Data, which assumes the use of blockchain technologies for all tasks in the field of handling personal data.