Code & Chain · Signal Desk

EU GDPR final guidance: on-chain encrypted and hashed data still personal data

Original sourceTech Times

Summary

The European Data Protection Board (EDPB) finalized guidance on July 8, requiring anonymization to pass a triple test: no isolation, no linkage, and no inference. Encrypted or hashed on-chain data remains subject to GDPR if it can be linked to an identifiable individual. Best practice is to keep pe…

Key points

  • Provides compliance guidance for projects storing or processing user data on public chains, helping avoid violations of EU data protection law.
  • Makes clear there is no safe harbor for on-chain encryption, forcing blockchain applications to reassess data storage architectures.
  • NFT, DeFi, and other projects with EU users will need to restructure to move personal data off-chain to meet erasure rights and compliance.

Editorial note

This page is Code & Chain's editorial summary of public sources. It may be prepared with AI assistance and published through an automated workflow. Refer to the original sources; this content is not investment, legal, or tax advice.