GDPR compliance supervision method and system based on alliance chain

Abstract

The invention provides a GDPR compliance supervision method and system based on an alliance chain, and the method comprises the steps: enabling a service provider and a supervision mechanism to carryout the real-name registration in the alliance chain, enabling the service provider to be registered as a service node, and carrying out the accounting node election and block generation according tothe credibility of the service node; the permission record of the data subject is encrypted and stored in the alliance block chain through the smart contract; the data subject is granted permission toaccess the alliance block chain, and when the data controller transmits personal information to the data processor, the agreement of the related data subject is needed, and the transaction also stores a data flow record through the smart contract; and during compliance investigation, submitting a traceability request to the alliance block chain by the supervision institution, and tracing to obtain a record by the alliance block chain service network according to the request. According to the method, the expansibility and the tamper resistance of the block chain are utilized so that the privacy right endowed by the user to drive the GDPR and the efficiency of a service provider to abide by the GDPR compliance can be effectively improved from the aspect of technical support, and the compliance and supervision cost is reduced.

Description

technical field [0001] The invention belongs to the technical field of block chains, and in particular relates to a GDPR compliance supervision method and system based on alliance chains. Background technique [0002] The General Data Protection Regulation GDPR sets out a series of binding data protection principles, rights and legal obligations to ensure the protection of users' personal data. But there are the following problems to be solved urgently: [0003] 1) The differences in the implementation of the GDPR regulations by all parties make it difficult for regulators and users to judge whether they are truly and effectively implementing the GDPR regulations. [0004] 2) The lack of manpower and budget has weakened the protection of residents' rights and interests by data protection agencies. Regulatory agencies need to act as the lead agency in many important cross-border cases, resulting in greater demand for employees. Although the regulators of the EU member state...

AI Technical Summary

Problems solved by technology

[0003] 1) The differences in the implementation of the GDPR regulations by all parties make it difficult for regulators and users to judge whether they are truly and effectively implementing the GDPR regulations

[0004] 2) The lack of manpower and budget weakens the protection of residents' rights and interests by data protection agencies, and regulators need to act as the lead agency in many important cross-border cases, resulting in greater demand for employees

Although the regulators of the EU member states monitor the data market and can impose sanctions on violations, they are subject to the same restrictions as users, that is, they can only be processed when illegal behaviors without consent are found, so technical solutions are urgently needed Manpower and Material Restraints

[0005] 3) The cost of compliance for service providers is high, with some companies spending more than $1 million

However, due to the security properties of the hash function, this change is difficult to achieve

Images