White PaperInclusive Deployment of Blockchain for Supply Chains:Part 4 – Protecting Your DataSeptember 2019World Economic Forum91-93 route de la CapiteCH-1223 Cologny/GenevaSwitzerlandTel.: +41 (0)22 869 1212Fax: +41 (0)22 786 2744Email: contact@weforum.orgwww.weforum.org© 2019 World Economic Forum. All rights reserved. No part of this publication may be reproduced or transmitted in any form or by any means, including photocopying and recording, or by any information storage and retrieval system.This white paper has been published by the World Economic Forum as a contribution to a project, insight area or interaction. The findings, interpretations and conclusions expressed herein are a re-sult of a collaborative process facilitated and endorsed by the World Economic Forum, but whose results do not necessarily represent the views of the World Economic Forum, nor the entirety of its Members, Partners or other stakeholders.3Inclusive Deployment of Blockchain for Supply Chains: Part 4 – Protecting Your DataPreface1. Deploying blockchain technology: the need for data protection and practical efficiencies2. Reality check: obligations in relation to data3. Protecting commercially sensitive data 4. Data protection compliance: GDPR as a lens 5. Blockchain solutions for commercially sensitive data and data protection compliance6. Reconciling blockchain and data confidentialityConclusionAppendix 1GlossaryContributorsEndnotes56771015212223242527Contents4Inclusive Deployment of Blockchain for Supply Chains: Part 4 – Protecting Your Data5Inclusive Deployment of Blockchain for Supply Chains: Part 4 – Protecting Your DataPrefaceThe deployment of blockchain and other distributed ledger technologies in supply chains offers considerable advantages. Nevertheless, their deployment and implementation can raise concerns about how best to both meet data protection laws and protect commercially sensitive data.1 Supply chain actors may be unwilling to take on what they perceive as additional legal risk, especially if data protection obligations become, or are seen to become, unduly burdensome. The European Union’s General Data Protection Regulation, for example, is at the forefront of a new wave of data protection legislation globally, and brings with it important practical and regulatory obligations, with the potential for significant fines in cases of non-compliance. With respect to safeguarding commercially sensitive data in supply chain transactions, the deployment of blockchain may lead to a perceived loss of control, raising questions about security, access rights and how to structure blockchain solutions: e.g. whether only some subsets of data should be shared on the blockchain and/or whether data sharing should be limited to only those parties involved in the transaction. Within this context, this paper provides practical introductory guidance to supply chain actors who seek greater confid...
