In the digital age, the act of accepting cookies on websites has become routine for internet users. However, this seemingly innocuous action poses security risks, as users often relinquish control over their sensitive data without fully understanding the implications. To address this concern, a team of researchers from Universitat Rovira i Virgili (URV) has devised a pioneering solution leveraging blockchain technology to empower users in managing their personal data securely.
Published in the journal Computer Communications, the research focuses on providing users with greater control over the usage of their personal data, thus mitigating privacy risks associated with cookie consent. With the implementation of the General Data Protection Regulation (GDPR) by the European Union, explicit consent from users has become paramount for service providers to collect and process personal data.
In response to GDPR requirements, many web providers present users with cookie acceptance forms upon accessing their services. However, there exists ambiguity regarding how these providers transparently demonstrate user consent, leaving individuals unaware of their data rights and lacking effective mechanisms to monitor third-party data usage.
The URV-led study introduces a novel personal data management platform built on blockchain technology. By generating immutable smart contracts stored on the blockchain, the platform ensures that user consent terms remain unalterable, providing a transparent and binding agreement.
To utilize this platform, users install a browser extension that intercepts consent requests and responds based on their preferences, thereby enhancing browsing security and efficiency while aligning with European data protection laws. Jordi Castellà, a researcher involved in the project, emphasizes the platform’s role in streamlining browsing processes and adhering to legal requirements.
Moreover, users gain comprehensive control over their consent records through a dedicated mobile application, allowing them to monitor consent history, usage purposes, and modify details as needed. For web service providers, the platform facilitates compliance auditing by demonstrating user consent acquisition through secure access controls.
Overall, this research underscores the importance of enhancing personal data management to bolster user privacy and transparency in data handling, thereby fostering a safer and more empowering digital environment.
