Blockchain Regulation Matrix
The Blockchain Regulation Matrix (BRM) establishes a framework outlining the concerns of regulating the blockchain from both the government and the consumer perspective, and in doing so, provides a pragmatic and clear approach to Web3 regulation. The BRM outlines regulation aspects of the blockchain by viewing it as a blockchain stack in many layers starting with the electricity physically supporting the blockchain at the base layer, all the way to the process of offloading crypto to fiat currency. With centralization and decentralization on either side of the matrix, the primary objective of the BRM is to understand where and how regulation of the blockchain should be developed specific to each layer.
Beginning with the electricty supporting the blockchain, as you hover over the images of each row, you'll see the specifics for that topic within that layer. The left side refers to projects that are centralized, while the right side refers to projects that are decentralized. For example, if there was an organization or business that wanted to provide electricity to miners in their area, that would be a centralized project. However, if there was a solar farm operating as a DAO that wanted to provide electricity to miners, that could be a decentralized project.
There are two illustrations of the Blockchain Regulation Matrix below, a short-form immediately below and a long-form afterwards.
Hover over the icons to preview each topic, and click any icon to pin its details — the address bar then links straight to that cell, ready to share.
On-chain Data Storagecentralized
This row applies only to permanently storing data on the blockchain.
Partially addressedGDPR applies but its erasure right cannot be executed on-chain; supervisory guidance is only now emerging.
Government Concerns
- Storage space mapping
- Data sovereignty and jurisdictional challenges in a decentralized environment
- Ensuring compliance with data protection and privacy regulations
- Addressing the potential use of blockchain for illegal or illicit data storage
Consumer Risks
- Exposure of sensitive or personal data to public scrutiny
- Risk of data loss or corruption due to the immutability of blockchain
- Challenges in managing data access and permissions in a decentralized system
Cons to over-regulation
- Impeding the adoption of blockchain for legitimate and innovative data storage use cases
- Limiting the potential of decentralized applications (dApps) requiring data storage
- Inhibiting data interoperability and portability across different blockchain networks
Cons to lack of regulation
- Lack of standardized data storage practices leading to security vulnerabilities
- Difficulty in addressing disputes related to ownership and control of stored data
- Potential misuse of blockchain for storing illegal or harmful content
Does blockchain technology currently exist to fulfill these obligations, and if so, what is it?
- Store hashes on-chain and data off-chain (IPFS with managed pinning) so content stays deletable
- Crypto-shredding: encrypt on-chain payloads and destroy the keys as a practical right-to-erasure
- Zero-knowledge commitments proving facts about data without publishing the data itself
Current regulatory landscape
- enactedGDPR — EU, 2016. The right to erasure collides head-on with immutability — the defining legal tension of this layer.
- guidanceEDPB draft guidelines on blockchain processing — EU, 2025. First supervisory guidance on reconciling GDPR with public ledgers: avoid on-chain personal data, prefer hashes and off-chain storage.
- enactedEU Data Act (Art. 30 smart contracts) — EU, 2024. Termination/interruption requirements for smart contracts in data-sharing — applying from Sept 2025, contested for permissionless systems.
Notable incidents
- Illicit content embedded in Bitcoin's chain (2019) — Researchers documented links to illegal material written into the ledger — every node replicates it, and no one can delete it.
- Ordinals inscription wave (2023) — Arbitrary images and files inscribed on Bitcoin strained nodes and reopened the debate over what a ledger should permanently store.
