The inability to delete account data is a violation of the GDPR: https://gdpr-info.eu/art-17-gdpr/
Whatever the technical reason (immutability of the blockchain) is totally irrelevant. It's not legal in the EU.
The inability to delete account data is a violation of the GDPR: https://gdpr-info.eu/art-17-gdpr/
Whatever the technical reason (immutability of the blockchain) is totally irrelevant. It's not legal in the EU.
This is due to poor design and could have been avoided. While the "blockchain" does indeed mean that the data is immutable, the actual data you embed within it (and how you choose to do so) is a design decision. Apparently, someone considered it "wise" to embed PII directly into this record when they could have simply embedded IDs and/or encoded/relational data. Very suspect, dubious, and disappointing design.