Design requirement R2.2: GDPR
The GDPR applies to the processing of any data regarding natural persons, but not to legal entities, and poses requirements such as privacy by design, portability, the right to erasure, transparency, purpose limitation, data minimization, accuracy, storage limitation, information integrity, and confidentiality.
Source paper
This design requirement is proposed by Designing a Framework for Digital KYC Processes Built on Blockchain-Based Self-Sovereign Identity (Vincent Schlatt, Johannes Sedlmeir, Simon Feulner, Nils Urbach, 2022).