Page 0042

6.3

Outline of MTI's solution

The crux of MTI's solution is MTI's adapter, a middleware

application for interfacing with certain blockchain

networks. MTI's adapter is suited for use in a wide

variety of supply chains, including in international

freight and shipping. It enables systems currently in

use in the shipping industry to interface with one or

more blockchain networks. Each network can be run by

different industry players and can use different underlying

blockchain technologies (such as IBM's Hyperledger

Fabric, Activeledger, Corda, Quorum etc.). There is thus no

need for every player in the industry to use one particular

network, as multiple networks can operate in parallel.

Each shipping industry player can aggregate their multiple

networks and existing shipping industry systems in a

single place using MTI's adapter.

To drive commercial adoption of its adapter, MTI plans to

establish, together with a consortium of industry players,

one such blockchain network for use in international

shipping. This network will likely be built on Hyperledger

Fabric and will be a private, permissioned network.

In line with the GDPR principle of data minimisation,

the network will store on the blockchain (on-chain) only

information that everyone on the network has the right

to view. Where a transaction involves information that

only some participants have a right to see, that private

information will be hashed and the hash will be added

to the blockchain. The underlying private information

will then be sent, via a side channel peer-to-peer

network, to those participants with a right to see the

information. This focus on privacy by design means

that information that should not be visible to everyone

is kept off the blockchain (off-chain) and is only stored

locally by those participants with a right to access the

information. Any person who has a copy of the off-chain

private information can run the hashing algorithm over

it and compare the result to the hash stored on-chain to

verify that it has a true copy of the private information

associated with the transaction recorded on the ledger.

This also ensures all information associated with

transactions on the network are fully auditable.

6.4

What personal data may

be processed?

The personal data likely to be involved in MTI's solution

are not likely to be particularly sensitive. They would likely

be limited to:

• names of people signing certain shipping documents;

• business contact details of certain people involved in

the shipping process, such as phone numbers or email

addresses; and

• photos of shipping cargo that may incidentally include

recognisable individuals or other personal data.

MTI's solution intends to use the side-channel model

described above for all information that should not be

freely visible to every participant on the network, which

will include all personal data. This includes using the

side-channel model to restrict the visibility of free form

comments. There will, of course, always be the risk that

some personal data is not properly confined to the side

channels and finds its way on to the network, and we

therefore consider how MTI may ensure GDPR compliance

given this possibility.

40 I GDPR and the Blockchain

Index

  1. Page 0001
  2. Page 0002
  3. Page 0003
  4. Page 0004
  5. Page 0005
  6. Page 0006
  7. Page 0007
  8. Page 0008
  9. Page 0009
  10. Page 0010
  11. Page 0011
  12. Page 0012
  13. Page 0013
  14. Page 0014
  15. Page 0015
  16. Page 0016
  17. Page 0017
  18. Page 0018
  19. Page 0019
  20. Page 0020
  21. Page 0021
  22. Page 0022
  23. Page 0023
  24. Page 0024
  25. Page 0025
  26. Page 0026
  27. Page 0027
  28. Page 0028
  29. Page 0029
  30. Page 0030
  31. Page 0031
  32. Page 0032
  33. Page 0033
  34. Page 0034
  35. Page 0035
  36. Page 0036
  37. Page 0037
  38. Page 0038
  39. Page 0039
  40. Page 0040
  41. Page 0041
  42. Page 0042
  43. Page 0043
  44. Page 0044
  45. Page 0045
  46. Page 0046
  47. Page 0047
  48. Page 0048
  49. Page 0049
  50. Page 0050
  51. Page 0051
  52. Page 0052