Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Other (Initial Public Draft)

A Data Structure for Integrity Protection with Erasure Capability

Date Published: May 2018
Comments Due: August 3, 2018 (public comment period is CLOSED)
Email Questions to:


Richard Kuhn (NIST)


The European General Data Protection Regulation (GDPR) requires that organizations make it possible to delete all information related to a particular individual, at that person's request. This requirement may be incompatible with current blockchain data structures, including private (permissioned) blockchains, because blockchains are designed to ensure that block contents are immutable. Any change in a block will invalidate subsequent hashes in following blocks, losing integrity protection. This note describes a data structure that provides the capability of deleting specified blocks while retaining hash-based assurance that other blocks are unchanged. It is primarily designed to be implemented in a permissioned infrastructure, providing certain features of existing permissioned blockchains. 



cryptographic hash; data structure; distributed ledger; integrity protection
Control Families

None selected


Block Matrix Draft (pdf)

Supplemental Material:
None available

Document History:
05/31/18: Other (Draft)
05/20/22: CSWP 25 (Final)