Skip to main content

Data Protection Compliance Challenges for Self-sovereign Identity

  • Conference paper
  • First Online:
Blockchain and Applications (BLOCKCHAIN 2020)

Part of the book series: Advances in Intelligent Systems and Computing ((AISC,volume 1238))

Included in the following conference series:

Abstract

Various identity management solutions are emerging in different jurisdictions, with the goal of creating a unified and privacy-preserving identity management system bridging the offline with the online. Within this trend, the concept of self-sovereign identity has re-emerged. It is a concept attached to expressions of both individual autonomy and individual control (sovereignty)—an aspiration in direct relation to what blockchain is promised to bring in contemporary discourse. The paper will provide an overview of the current self-sovereign identity paradigm solutions within the technological environment that involves decentralized networks and it will trace some of the challenges it faces within the European Union especially with regards to the General Data Protection Regulation (EU) 2016/679 (GDPR).

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Subscribe and save

Springer+ Basic
$34.99 /Month
  • Get 10 units per month
  • Download Article/Chapter or eBook
  • 1 Unit = 1 Article or 1 Chapter
  • Cancel anytime
Subscribe now

Buy Now

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 129.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 169.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Similar content being viewed by others

Notes

  1. 1.

    Allen, C. (2016), The Path to Self-Sovereign Identity, 25 April 2016, Life With Alacrity blog, http://www.lifewithalacrity.com/2016/04/the-path-to-self-soverereign-identity.html.

  2. 2.

    Hereinafter GDPR.

  3. 3.

    Which should not be confused with the legal concept of the data controller. It will mostly refer to the data subject, or the owner of the identity. However, in some cases, it can be a third party acting on behalf of the data subject.

  4. 4.

    Article 29 Data Protection Working Party, ‘Opinion 1/2010 on the Concepts of “Controller” and “Processor”’ (2010), 4.

    Currently, the responsible body is the European Data Protection Supervisor - EDPS.

  5. 5.

    This Directive was replaced by the GDPR on 25 May 2018.

References

  1. Finck, M.: Blockchain Regulation and Governance in Europe. Cambridge University Press, Cambridge (2020)

    Google Scholar 

  2. Halpin, H.: Decentralizing the social web. Can blockchains solve ten years of standardization failure of the social web? In: Bodrunova, S.S., et al. (eds.) INSCI 2018 Workshops. LNCS, vol. 11551. Springer, Cham (2019)

    Google Scholar 

  3. Sullivan, C., Burger, E.: E-residency and blockchain. Comput. Law Secur. Rev. 33(4), 460–475 (2017)

    Article  Google Scholar 

  4. Wang, F., De Filippi, P.: Self-sovereign identity in a globalized world: credentials-based identity systems as a driver for economic inclusion. Front. Blockchain 2, 28 (2020). https://doi.org/10.3389/fbloc.2019.00028

    Article  Google Scholar 

  5. Giannopoulou, A.: Algorithmic systems: the consent is in the details? Internet Policy Rev. 9(1) (2020)

    Google Scholar 

  6. Bodo, B., Giannopoulou, A.: The logics of technology decentralization: the case of distributed ledger technologies. In: Ragnedda, M., Destefanis, G. (eds.) Blockchain and Web Social, Economic, and Web 3.0: Technological Challenges. Routledge, New York (2020)

    Google Scholar 

  7. Gooddell, G., Tomaso, A.: A decentralized digital identity architecture. Front. Blockchain 10 (2020). https://doi.org/10.3389/fbloc.2019.00017

  8. Finck, M., Pallas, F.: They who must not be identified - distinguishing personal from non-personal data under the GDPR. International Data Privacy Law, 2020; Max Planck Institute for Innovation & Competition Research Paper No. 19-14 (2020)

    Google Scholar 

  9. Edwards, L., Finck, M., Veale, M., Zingales, N.: Data subjects as data controllers: a fashion(able) concept? Internet Policy Rev. (2019)

    Google Scholar 

Download references

Acknowledgments

The Lab has received funding from the European Research Council (ERC) under the European Union’s Horizon 2020 research and innovation programme under grant agreement No 759681.

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Alexandra Giannopoulou .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2020 The Editor(s) (if applicable) and The Author(s), under exclusive license to Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Giannopoulou, A. (2020). Data Protection Compliance Challenges for Self-sovereign Identity. In: Prieto, J., Pinto, A., Das, A., Ferretti, S. (eds) Blockchain and Applications. BLOCKCHAIN 2020. Advances in Intelligent Systems and Computing, vol 1238. Springer, Cham. https://doi.org/10.1007/978-3-030-52535-4_10

Download citation

Publish with us

Policies and ethics