This paper will explain, GDPR compliance is not about the technology, it is about how the technology is used. Just like there is no Gdpr-compliant Internet, or GDPR-compliant artificial intelligence algorithm, there is no such thing as a GDPR-compliant blockchain technology. There are only GDPR-compliant use cases and applications. Among other things, in this report we observe that many of the Gdpr’s requirements are easier and simpler to interpret and implement in private, permissioned blockchain networks than in public, permissionless networks. yet public networks are here to stay, and represent a vital space of innovation that has the potential to create jobs and thriving companies in the same way that the world wide web did over the last twenty years.