{"id":58269,"date":"2018-10-25T15:00:04","date_gmt":"2018-10-25T14:00:04","guid":{"rendered":"https:\/\/blogs.dlapiper.com\/iptitaly\/?p=58269"},"modified":"2019-06-24T15:00:20","modified_gmt":"2019-06-24T13:00:20","slug":"cnil-privacy-guidance-on-blockchain-and-eu-fake-news-code-of-practice","status":"publish","type":"post","link":"https:\/\/blogs.dlapiper.com\/iptitaly\/2018\/10\/cnil-privacy-guidance-on-blockchain-and-eu-fake-news-code-of-practice\/","title":{"rendered":"CNIL Privacy guidance on blockchain and EU fake news Code of practice"},"content":{"rendered":"

The French data protection authority (CNIL) has published a report on blockchain compliance with the GDPR and EU is tackling fake news with a new Code of Practice on disinformation.<\/p>\n

French data protection authority assesses how to make blockchain GDPR compliant<\/strong><\/h2>\n

Lately the\u00a0debate on blockchain<\/a>\u00a0technology has started to focus on its compatibility with the GDPR, or as some prefer, on GDPR compatibility with blockchain.<\/p>\n

Since\u00a0blockchain<\/a>\u00a0relies on a distributed ledger system that is decentralized and immutable, it\u2019s intended to be a permanent, tamper-proof record outside the control of any governing authority. That\u2019s the main reason it is such an attractive and useful technology and also the main reason it may not be compatible with the GDPR, considering that personal data stored on the blockchain can\u2019t be deleted.<\/p>\n

While the\u00a0blockchain regulation rush goes on<\/a>\u00a0across the world<\/a>, the French Data Protection Authority (CNIL) produced a report analyzing the privacy compliance of such technology and devising technical solutions that make it possible to get closer to the conformity requirements of the GDPR, such as permitting the much debated right of erasure.<\/p>\n

Since this technology will\u00a0unleash its full disruptive potential<\/a>\u00a0in the next years, according to the CNIL, it is particularly important to adopt a\u00a0privacy-by-design approach<\/a>\u00a0in order to ensure the full compliance with the applicable and the upcoming data protection laws.<\/p>\n

My view is that blockchain is a risk for privacy compliance since all the recorded information is meant to remain forever on the ledger, but at the same time \u2013 if adequate safeguards are adopted \u2013 it might be a valid support to privacy compliance since it is fully transparent as to the modalities of processing of recorded personal data.<\/p>\n

\u00a0<\/span>EU adopts Code of Practice to fight against fake news<\/strong><\/h2>\n

The exposure of citizens to large scale disinformation, including misleading or outright false information, is a major challenge for Europe. In the last years, the phenomenon is having a bigger impact than ever as social media and online platforms speed up the spread of such news and enable a global reach without much effort from the author.<\/p>\n

In order to address the spread of online disinformation and fake news the EU institutions have been working together with representatives of online platforms, leading social networks and advertising industry which eventually found an agreement on a self-regulatory\u00a0Code of Practice<\/a>.<\/p>\n

The Code and\u00a0other initiatives<\/a>\u00a0set forth by the European Commission are essential steps in ensuring transparent, fair and trustworthy online campaign ahead of the EU elections in spring 2019.<\/p>\n

Signatories of this Code have committed to take action in 5 areas:<\/p>\n