Design Principle

DP2 - Use a highly secure off-chain mapping architecture for attribution

If a use case requires that data on the blockchain be attributable to a natural person, employ pseudonymization:

Design PrincipleOpen source resource ↗

Overview

Producer metadata and the represented concept document.

Concept identity

design-knowledge/gdpr-workflow-asylum-dp2

Open concept record

Producer label: DP2
Source paper: How to Develop a GDPR-Compliant Blockchain Solution for Cross-Organizational Workflow Management: Evidence from the German Asylum Procedure
Timestamp: 2026-07-16T00:00:00+00:00
Bundle path: design-knowledge/gdpr-workflow-asylum-dp2.md

cross-organizationaldesign-principlegdpr-privacygdpr-workflow-asylumpublic-sectorworkflow-management

Design principle DP2: Use a highly secure off-chain mapping architecture for attribution

If a use case requires that data on the blockchain be attributable to a natural person, employ pseudonymization: keep the attribution mapping off-chain and propagate it over secure channels, so controllers can rectify (via rectification transactions) and erase (by deleting the mapping information).

Source paper

This design principle is proposed by How to Develop a GDPR-Compliant Blockchain Solution for Cross-Organizational Workflow Management: Evidence from the German Asylum Procedure (Florian Guggenmos, Annette Wenninger, Alexander Rieger, Gilbert Fridgen, Jannik Lockl, 2020).

Addresses

Design principle DP1: Do not store personal data on a blockchain

Citations

[1] Florian Guggenmos, Annette Wenninger, Alexander Rieger, Gilbert Fridgen, Jannik Lockl. How to Develop a GDPR-Compliant Blockchain Solution for Cross-Organizational Workflow Management: Evidence from the German Asylum Procedure. HICSS 53 (2020). https://hdl.handle.net/10125/64253 (opens in a new tab) [2] Source document: How to Develop a GDPR-Compliant Blockchain Solution for cross-organizational workflow management.pdf

Linked concepts

Concepts connected by incoming or outgoing native Markdown links.

Design Principle

Design Principle1

Design Principle

design-knowledge/gdpr-workflow-asylum-dp1

DP1 - Do not store personal data on a blockchain

Keep personal data off-chain, since blockchain's tamper-resistant storage conflicts with the rights to rectification and erasure;

cross-organizationaldesign-principlegdpr-privacygdpr-workflow-asylum+2

Paper

Paper1

Paper

papers/gdpr-workflow-asylum

How to Develop a GDPR-Compliant Blockchain Solution for Cross-Organizational Workflow Management: Evidence from the German Asylum Procedure

Drawing on the German Federal Office for Migration and Refugees (BAMF) case, the paper presents two actionable design principles for GDPR-compliant blockchain solutions in cross-organizational workflow management: do not store personal data on a blockchain, and, where attribution is required, use a highly secure off-chain mapping architecture.

blockchaincross-organizationaldesign-science-researchgdpr-privacy+3

Relationships

Directed links from Markdown. Heading context is displayed as derived metadata, not as a formal OKF predicate.

Outgoing links

Incoming backlinks

How to Develop a GDPR-Compliant Blockchain Solution for Cross-Organizational Workflow Management: Evidence from the German Asylum Procedure
Paper
Source
How to Develop a GDPR-Compliant Blockchain Solution for Cross-Organizational Workflow Management: Evidence from the German Asylum Procedure
Target
DP2 - Use a highly secure off-chain mapping architecture for attribution
Link label
Design principle DP2: Use a highly secure off-chain mapping architecture for attribution
Status
Resolved
Derived heading context: Design knowledge

Local graph

One-hop by default, with an optional bounded two-hop view. Nodes are concept files and arrows are Markdown links.

Knowledge graph

3 of 3 concepts · 5 directed relationships

Concept types

Design PrincipleSeed

DP2 - Use a highly secure off-chain mapping architecture for attribution

Bundle identity

Concept ID: design-knowledge/gdpr-workflow-asylum-dp2
Markdown path: design-knowledge/gdpr-workflow-asylum-dp2.md
Producer label: DP2
Native type: design-principle

Markdown summary

Design principle DP2: Use a highly secure off-chain mapping architecture for attribution If a use case requires that data on the blockchain be attributable to a natural person, employ pseudonymization: keep the attribution mapping off-chain and propagate it over secure channels, so controllers can rectify (via rectification transactions) and erase (by deleting the mapping information). Source paper This design principle is proposed by How to Develop a GDPR-Compliant Blockchain Solution for Cross-Organizational Workflow Management: Evidence from the German Asylum Procedure (Florian Guggenmos, Annette Wenninger, Alexander Rieger, Gilbert Fridgen, Jannik Lockl, 2020). Addresses Design…

Raw metadata

The complete producer frontmatter, serialized without server paths or runtime data.

Show producer frontmatter

{
  "type": "design-principle",
  "title": "DP2 - Use a highly secure off-chain mapping architecture for attribution",
  "description": "If a use case requires that data on the blockchain be attributable to a natural person, employ pseudonymization:",
  "resource": "https://hdl.handle.net/10125/64253",
  "source_paper": "How to Develop a GDPR-Compliant Blockchain Solution for Cross-Organizational Workflow Management: Evidence from the German Asylum Procedure",
  "label": "DP2",
  "tags": [
    "gdpr-workflow-asylum",
    "design-principle",
    "gdpr-privacy",
    "cross-organizational",
    "public-sector",
    "workflow-management"
  ],
  "timestamp": "2026-07-16T00:00:00+00:00"
}

Design Principle

DP2 - Use a highly secure off-chain mapping architecture for attribution

If a use case requires that data on the blockchain be attributable to a natural person, employ pseudonymization:

Design PrincipleOpen source resource ↗

Overview

Producer metadata and the represented concept document.

Concept identity

design-knowledge/gdpr-workflow-asylum-dp2

Open concept record

Producer label: DP2
Source paper: How to Develop a GDPR-Compliant Blockchain Solution for Cross-Organizational Workflow Management: Evidence from the German Asylum Procedure
Timestamp: 2026-07-16T00:00:00+00:00
Bundle path: design-knowledge/gdpr-workflow-asylum-dp2.md

cross-organizationaldesign-principlegdpr-privacygdpr-workflow-asylumpublic-sectorworkflow-management

Design principle DP2: Use a highly secure off-chain mapping architecture for attribution

Source paper

Addresses

Design principle DP1: Do not store personal data on a blockchain

Citations

Linked concepts

Concepts connected by incoming or outgoing native Markdown links.

Design Principle

Design Principle1

Design Principle

design-knowledge/gdpr-workflow-asylum-dp1

DP1 - Do not store personal data on a blockchain

Keep personal data off-chain, since blockchain's tamper-resistant storage conflicts with the rights to rectification and erasure;

cross-organizationaldesign-principlegdpr-privacygdpr-workflow-asylum+2

Paper

Paper1

Paper

papers/gdpr-workflow-asylum

How to Develop a GDPR-Compliant Blockchain Solution for Cross-Organizational Workflow Management: Evidence from the German Asylum Procedure

blockchaincross-organizationaldesign-science-researchgdpr-privacy+3

Relationships

Directed links from Markdown. Heading context is displayed as derived metadata, not as a formal OKF predicate.

Outgoing links

Incoming backlinks

How to Develop a GDPR-Compliant Blockchain Solution for Cross-Organizational Workflow Management: Evidence from the German Asylum Procedure
Paper
Source
How to Develop a GDPR-Compliant Blockchain Solution for Cross-Organizational Workflow Management: Evidence from the German Asylum Procedure
Target
DP2 - Use a highly secure off-chain mapping architecture for attribution
Link label
Design principle DP2: Use a highly secure off-chain mapping architecture for attribution
Status
Resolved
Derived heading context: Design knowledge

Local graph

One-hop by default, with an optional bounded two-hop view. Nodes are concept files and arrows are Markdown links.

Knowledge graph

3 of 3 concepts · 5 directed relationships

Concept types

Design PrincipleSeed

DP2 - Use a highly secure off-chain mapping architecture for attribution

Bundle identity

Concept ID: design-knowledge/gdpr-workflow-asylum-dp2
Markdown path: design-knowledge/gdpr-workflow-asylum-dp2.md
Producer label: DP2
Native type: design-principle

Markdown summary

Raw metadata

The complete producer frontmatter, serialized without server paths or runtime data.

Show producer frontmatter

{
  "type": "design-principle",
  "title": "DP2 - Use a highly secure off-chain mapping architecture for attribution",
  "description": "If a use case requires that data on the blockchain be attributable to a natural person, employ pseudonymization:",
  "resource": "https://hdl.handle.net/10125/64253",
  "source_paper": "How to Develop a GDPR-Compliant Blockchain Solution for Cross-Organizational Workflow Management: Evidence from the German Asylum Procedure",
  "label": "DP2",
  "tags": [
    "gdpr-workflow-asylum",
    "design-principle",
    "gdpr-privacy",
    "cross-organizational",
    "public-sector",
    "workflow-management"
  ],
  "timestamp": "2026-07-16T00:00:00+00:00"
}