General Data Protection Regulation (Regulation EU 2016/679)
All termsThe European Union's statutory framework protecting personal privacy, data sovereignty, and individual information rights.
The General Data Protection Regulation (GDPR) is a comprehensive EU regulation governing the collection, storage, processing, and transfer of personal data. It enshrines principles of data minimization, purpose limitation, privacy by design, and the right to erasure.
Strictly governs the handling of driver names, phone numbers, truck telemetry, and location feeds. Personal data is never committed to immutable blockchain storage in plaintext; only salted, one-way cryptographic hashes are anchored on-chain.
Personal Identifiable Information (PII) stored in off-chain encrypted PostgreSQL databases with automated data retention policies, satisfying Article 17 (Right to Erasure).
Immutability of blockchain ledgers does not grant an exemption from GDPR compliance; architectural separation of off-chain PII from on-chain hashes is mandatory.