Blockchain Regulation Matrix

The Blockchain Regulation Matrix (BRM) establishes a framework outlining the concerns of regulating the blockchain from both the government and the consumer perspective, and in doing so, provides a pragmatic and clear approach to Web3 regulation. The BRM outlines regulation aspects of the blockchain by viewing it as a blockchain stack in many layers starting with the electricity physically supporting the blockchain at the base layer, all the way to the process of offloading crypto to fiat currency. With centralization and decentralization on either side of the matrix, the primary objective of the BRM is to understand where and how regulation of the blockchain should be developed specific to each layer.

Beginning with the electricty supporting the blockchain, as you hover over the images of each row, you'll see the specifics for that topic within that layer. The left side refers to projects that are centralized, while the right side refers to projects that are decentralized. For example, if there was an organization or business that wanted to provide electricity to miners in their area, that would be a centralized project. However, if there was a solar farm operating as a DAO that wanted to provide electricity to miners, that could be a decentralized project.

Regulatory heat map

All jurisdictionsUnited StatesEuropean UnionGlobal & other

CentralizedBlockchain LayerDecentralized

ElectricitySettlement LayerNode / Validator LayerComputation-intensive Consensus MechanismsCapabilities-based Consensus MechanismsVoting-based Consensus MechanismsTransaction LayerOn-chain Data StorageAsset Layer - StablecoinsAsset Layer - Fungible TokensAsset Layer - Non-Fungible Tokens (NFTs)Exchange LayerProtocol LayerApplication LayerPermanent Storage LayerInternet BrowserThe DeveloperProgramming Language AuditorDeFi Architecture and SecurityDeFi Architecture Standards / AuditorFiat Onboarding / Offboarding Access

On-chain Data Storagedecentralized

✕

This row applies only to permanently storing data on the blockchain.

UnaddressedOperatorless replication of illegal or personal data has no workable regime anywhere.

Government Concerns

• That misinformation cannot be censored
• Illicit profits from non-original work
• Every node in every jurisdiction replicates whatever anyone writes, including illegal content

Consumer Risks

• Original artists not being able to censor copycats.
• Doxxed personal data can never be removed once written

Cons to over-regulation

• Erasure obligations on node operators would make running public infrastructure legally impossible

Cons to lack of regulation

• No flagging or remedy process exists for illegal or abusive payloads

Does blockchain technology currently exist to fulfill these obligations, and if so, what is it?

• Crypto-shredding and off-chain storage patterns keep personal data off the permanent ledger
• Content filtering at the gateway and indexer level, rather than the protocol level
• Commitment schemes storing proofs of data instead of the data itself

Current regulatory landscape

• guidanceEDPB draft guidelines on blockchain processing — EU, 2025. Notes that nodes without control may not be 'controllers' — the liability question for public networks remains open.

Notable incidents

• Illicit content embedded in Bitcoin's chain (2019) — Researchers documented links to illegal material written into the ledger — every node replicates it, and no one can delete it.
• Ordinals inscription wave (2023) — Arbitrary images and files inscribed on Bitcoin strained nodes and reopened the debate over what a ledger should permanently store.

Suggest an addition (GitHub)About contributing