Minimize personal data before choosing the ledger
By the end, explain the diagram in your own words, solve the case and justify the correction.
Prerequisites : Hashes, keys and signatures · Tokenization and real-world asset rights
Level 3 · Advanced →Reading path · 10 / 17 · Advanced
A public address can be personal data when it relates to an identifiable individual.
The essentials
A public address can be personal data when it relates to an identifiable individual. Pseudonymity is not the same as anonymisation. Hashing personal information does not automatically remove it from data-protection scope, especially when it can be linked back or tested against likely inputs.
How it works
Public replication and durable records can complicate correction, erasure, retention and accountability. Decide whether personal data needs to be on-chain at all. Off-chain storage with carefully designed references may reduce exposure, but the reference itself still needs analysis. Identify roles and lawful processing grounds before implementation.
What to watch
For example, publishing a customer’s identity documents on-chain would expose them far beyond ordinary verification needs. A design review should examine purpose limitation, access, retention, data-subject rights and cross-border implications. Technical immutability should not be assumed to override legal requirements or make every blockchain use impermissible.
Understand the details
A public address or hash can still relate to an identifiable person depending on context and available information. Pseudonymization is not automatically anonymization. Start by asking which data is necessary, who determines its use, who receives it and how long it must remain available. Technical permanence does not remove data-protection responsibilities.
Boundaries and common mistakes
Keeping sensitive records off-chain can reduce exposure, but an on-chain pointer or commitment still needs assessment. Encryption and key deletion do not automatically settle every legal question about erasure. Roles, lawful basis, rights handling and any required impact assessment must be considered for the actual design.
The mechanism at a glance
- Purpose and minimum data
- Off-chain access controls
- Assess public commitment
- Rights and retention process
Apply the lesson to a case
A diploma service proposes publishing names and grades on a public chain. Redesign the information flow with the minimum necessary proof and controlled off-chain records. Identify what a public observer could still link or infer.
Someone can hash likely names or combine other information to test a match. Assess identifiability and linkage in context rather than assuming the hash is anonymous. Document the data flow and remaining risks before selecting a permanent public record.
Terms in this lesson
- Hash
- A fixed-length fingerprint computed from data by a hash function. It checks consistency, not truth.
Prepare a correction note
Describe the passage and the proposed correction. This creates a local note for you to share; it sends nothing. Do not include personal or confidential information.