Requirements Category
Privacy protection of sensitive data

Storing biometric data directly on a blockchain ledger involves embedding unique biological characteristics—such as fingerprints or iris scans—into the blockchain’s immutable records. While this method ensures data integrity and transparency, it raises significant privacy and security concerns. The immutable nature of blockchain means that once data is recorded, it cannot be altered or deleted, potentially conflicting with privacy regulations that grant individuals the right to have their personal data erased. Moreover, if the blockchain is public, sensitive biometric information could be exposed to unauthorized parties, increasing the risk of identity theft and fraud. To mitigate these risks, it is advisable to store only hashed representations of biometric data on-chain, ensuring that the original data remains confidential and is not directly accessible from the blockchain. This approach maintains the benefits of blockchain’s security features while upholding privacy standards and reducing potential vulnerabilities associated with storing sensitive information on an immutable ledger.

https://arxiv.org/pdf/2302.10883

https://arxiv.org/pdf/2302.10883