A smart contract‐based dynamic consent management system for personal data usage under GDPR

Mpyana Mwamba Merlec, Youn Kyu Lee, Seng Phil Hong, Hoh Peter In

Research output: Contribution to journalArticlepeer-review

22 Citations (Scopus)


A massive amount of sensitive personal data is being collected and used by scientists, businesses, and governments. This has led to unprecedented threats to privacy rights and the security of personal data. There are few solutions that empower individuals to provide systematic consent agreements on distinct personal information and control who can collect, access, and use their data for specific purposes and periods. Individuals should be able to delegate consent rights, access consent‐related information, and withdraw their given consent at any time. We propose a smart-contract‐based dynamic consent management system, backed by blockchain technology, targeting personal data usage under the general data protection regulation. Our user‐centric dynamic consent management system allows users to control their personal data collection and consent to its usage throughout the data lifecycle. Transaction history and logs are recorded in a blockchain that pro-vides trusted tamper‐proof data provenance, accountability, and traceability. A prototype of our system was designed and implemented to demonstrate its feasibility. The acceptability and reliability of the system were assessed by experimental testing and validation processes. We also analyzed the security and privacy of the system and evaluated its performance.

Original languageEnglish
Article number7994
Issue number23
Publication statusPublished - 2021 Dec 1

Bibliographical note

Publisher Copyright:
© 2021 by the authors. Licensee MDPI, Basel, Switzerland.


  • Blockchain
  • Data privacy and security
  • Dynamic consent management
  • General data protection regulation (GDPR)
  • Smart contract

ASJC Scopus subject areas

  • Analytical Chemistry
  • Information Systems
  • Biochemistry
  • Atomic and Molecular Physics, and Optics
  • Instrumentation
  • Electrical and Electronic Engineering


Dive into the research topics of 'A smart contract‐based dynamic consent management system for personal data usage under GDPR'. Together they form a unique fingerprint.

Cite this