Which of the following data privacy concerns can be attributed specifically to blockchain technologies?

A core feature of blockchain technology is immutability—once data is recorded, it cannot be altered

or deleted. While this supports integrity and transparency, it also creates a conflict with data privacy

regulations such as the General Data Protection Regulation (GDPR), which grants individuals the

“right to be forgotten.” The inability to erase personal data stored on blockchain creates a

compliance challenge.

Options A and B are incorrect: phishing is not inherent to blockchain, and transactions are not easily

tampered with (immutability actually prevents that). Option C is misleading because regulations

address data use but do not “overregulate” blockchain specifically.

Reference:

IIA Global Technology Audit Guide (GTAG): Understanding Blockchain and Related Risks.