THE CONCEPT OF APPLYING BLOCKCHAIN TECHNOLOGIES TO INCREASE THE SECURITY OF PERSONAL DATA OF THE “DIYA” PLATFORM: COMPLIANCE WITH THE REQUIREMENTS OF THE GDPR AND UKRAINIAN LEGISLATION
Valeriia Balatska, Vasyl Poberezhnyk · Cybersecurity Education Science Technique · 2024
With the development of digital government services and the “Diya” project in Ukraine, the issue of personal data protection is becoming one of the most important challenges, especially in the context of compliance with the requirements of the General Data Protection Regulation (GDPR) and national legislation. Modern digital solutions must ensure transparency, security and compliance with legal norms regarding the processing and storage of citizens’ personal information. This study proposes the integration of blockchain technologies into the “Diya” project as an effective means of increasing the confidentiality and security of personal data. The use of blockchain ensures the immutability and transparency of data in state registers, allowing to track all operations with information and record each request for access. This is especially important for compliance with the principles of the GDPR, such as transparency of data processing, the right to information and the right to be forgotten. The proposed system includes key technological components, such as smart contracts to automate the management of consent to data processing and the delimitation of access to them. Smart contracts allow for automatic and secure execution of agreements between the user and the system, significantly reducing the risks of human error or abuse. In addition, the use of the decentralized IPFS file system guarantees reliable file storage, which eliminates the possibility of centralized attacks or information loss. Data protection methods such as masking, pseudo-anonymization and perturbation help reduce the risk of unauthorized disclosure of information even in the event of a data leak. This is especially relevant for state registers containing sensitive information about citizens, and provides a high level of protection in accordance with GDPR standards. The implementation of this concept within the framework of the “Diya” project will not only increase citizens’ trust in state digital services, but also create conditions for Ukraine’s integration into the European legal space in terms of personal data protection. The proposed solution can become the foundation for the further development of state registers and other digital services focused on data protection within the framework of the latest technologies. The purpose of the research is to analyze and develop an innovative system for protecting personal data in state registers of Ukraine based on blockchain technologies, which meets the requirements of GDPR and national legislation. This approach will ensure reliability, security and transparency of data processing, which will contribute to the digital transformation of public administration.