While the European Data Protection Board Guidelines
(EDPB), published in April 2025, are confirmed in their final version, there will no longer be any use of Bitcoin that is 100% compliant with European law.
โก๏ธ A de facto ban, without ban, by regulatory collision.
How is that possible?
1๏ธโฃ According to the EDPB, "A public key is personal data if it can identify, even indirectly, a natural person."
โ EDPB 02/2025, ยง3.2
However, the Bitcoin blockchain is immutable. The information on it cannot be deleted.
But the EDPB is categorical: "Technical impossibility cannot be invoked to justify non-compliance with the GDPR."
โ EDPB 02/2025, ยง4.2
In other words, it is up to reality to adapt, not to the norm. An EU classic.
And if one cannot delete the data, then... "This may require the removal of the entire blockchain."
โ EDPB 02/2025, 4.3
โ The right to erasure becomes unenforceable. So: automatic violation of the GDPR.
2๏ธโฃ The EDPB proposes a "solution": anonymization.
Anonymize data before on-chain registration (via mixers, hashing, zero-knowledge, etc.).
We are back on our feet: by resorting to confidentiality, the use of Bitcoin is possible. Miracle!
Error: this solution is prohibited by anti-money laundering rules.
3๏ธโฃ For financial regulation, on which Bitcoin depends, anonymity = crime
๐ TFR (2023/1113)
โข Mixers, tumblers, wallets "privacy" = high risk
โข Identity required before transfer, even to a personal wallet
โข KYC from โฌ1,000
๐ AMLR (2024/1624)
โข Formal prohibition of tools or accounts that facilitate anonymity
โข DASPs are not allowed to offer or host them
๐ French Anti-Drug Trafficking Act โ 2025
โข Any anonymous transaction = automatic presumption of money laundering
โข 5 years in prison + โฌ375,000 if the origin of the funds is not proven
โ๏ธ Tornado Cash case (NL, May 2024)
The tool allowing anonymity, it "cannot therefore be characterized as a legitimate tool, (...) it is specifically intended for criminals."
๐ Consequence:
โ You anonymize โก๏ธ AML infringement (TFR/AMLR)
โ You don't โก๏ธ GDPR violation (can't be deleted)
๐ฅ No legal way out. โ Bitcoin becomes de facto illegal in Europe.
โณ What to do?
๐๏ธ The EDPB's public consultation is open until 30 June 2025.
๐ฏ There is still time to act:
โ Share this post
โ Submit a formal comment to the EDPB
โ Contact your MEPs: ask for GDPR/AML consistency, and an end to the presumption of "anonymity = crime".โ
Alexandre Stachtchenko via linkedin
#bitcoin
