SciTransfer
DECODE · Project

Give Citizens Control Over Their Data With Blockchain-Based Privacy Tools

digitalPilotedTRL 6
decodeproject.eu

Right now, a handful of big tech companies hold most of our personal data, and we have almost no say in how it's used. DECODE built a kind of digital lockbox system — powered by blockchain — that lets people decide exactly who gets to see their information and under what conditions. Think of it like Creative Commons licenses, but for your personal data instead of photos. They tested it with real citizens in Barcelona and Amsterdam, covering everything from neighborhood democracy apps to shared sensor data from IoT devices.

By the numbers
16
consortium partners
6
countries involved (ES, FR, IT, NL, SE, UK)
4
real-world pilots in Barcelona and Amsterdam
58
total project deliverables
8
demonstrated technology deliverables
4
SMEs in the consortium
The business problem

What needed solving

Companies and cities running digital platforms face a growing tension: they need citizen and user data to deliver services, but GDPR enforcement is tightening and public trust in data handling is eroding. Building privacy-compliant data governance from scratch is expensive, legally complex, and technically demanding — especially when multiple parties need to share data selectively. Most off-the-shelf solutions still concentrate data in one place, which is exactly the model regulators and citizens are pushing back against.

The solution

What was built

DECODE built a complete decentralized data governance stack: a stable open-source operating system (DECODE OS), blockchain-backed smart contracts with GDPR-compliant legal rules, a privacy-enhancing IoT data sharing layer with advanced encryption, and automated deployment tools. All components were integrated and tested across 4 pilots in Barcelona and Amsterdam, producing 58 deliverables including manuals and a sustainability roadmap.

Audience

Who needs this

City governments and municipal IT departments running citizen-facing digital servicesIoT platform companies that need privacy-preserving multi-party data sharingCivic tech startups building digital democracy or community engagement toolsData cooperatives and platform cooperatives looking for decentralized governance infrastructureGDPR compliance consultancies advising organizations on privacy-by-design architectures
Business applications

Who can put this to work

Smart City & Municipal Government
enterprise
Target: City digital services departments and e-government platform providers

If you are a city government or civic tech company struggling to run digital democracy and citizen engagement platforms while meeting GDPR requirements — this project developed smart contracts integrated with GDPR-compliant legal rules and tested them in 4 pilots across Barcelona and Amsterdam. The tools let citizens share data on their own terms, which builds trust and boosts participation in city services.

IoT & Connected Devices
mid-size
Target: IoT platform providers and smart building companies

If you are an IoT company dealing with the challenge of sharing sensor data between multiple parties without exposing private information — DECODE built a privacy-enhancing IoT data sharing system using advanced encryption that lets participants selectively share data streams at different levels of aggregation. It was integrated and tested with real pilot infrastructure in 2 European cities.

Platform & Sharing Economy
any
Target: Online marketplace operators and data cooperative platforms

If you are a platform operator facing growing pressure from GDPR enforcement and users demanding more control over their data — DECODE created an open-source decentralized architecture with smart rules that govern data access through flexible entitlements, similar to Creative Commons licenses. The 16-partner consortium across 6 countries validated this approach with real communities and social entrepreneurs.

Frequently asked

Quick answers

What would it cost to implement DECODE technology?

DECODE released its components as free and open source software, including a stable operating system (DECODE OS). Implementation costs would be integration and deployment effort rather than licensing fees. The project produced 58 deliverables including deployment tools and development manuals.

Can this scale beyond pilot-city deployments?

The architecture was designed to be modular and scalable, tested across 4 pilots in 2 major European cities (Barcelona and Amsterdam). The project also delivered automated tools for deployment of configured hardware and software into production environments, which supports scaling. However, a production-readiness analysis was part of the final sustainability roadmap, suggesting some components may still need hardening.

What is the IP and licensing situation?

DECODE was built on open standards and released as free and open source software. The stable DECODE OS release came with usage and development manuals. This means companies can build on top of the platform without licensing barriers, though commercial support would need to be sourced independently.

How does this handle GDPR compliance?

GDPR compliance was a core design requirement, not an afterthought. The project developed smart contracts specifically integrated with GDPR-compliant legal rules, enabling data subjects to exercise their right to control personal data. This was validated through pilot testing with real citizen communities.

What was actually tested in real-world conditions?

Four pilots ran in Barcelona and Amsterdam covering digital democracy, citizen sensing, and collaborative economy use cases. The pilots involved local communities, local government, social entrepreneurs, hackers, and makers. The final integration deliverable confirmed all DECODE components were tested in real-world pilots.

Can DECODE integrate with existing IT systems?

The architecture is modular by design, with separate components for identity management, data governance, IoT data sharing, and blockchain infrastructure. The IoT pilot specifically demonstrated integration with existing pilot infrastructure. Automated deployment tools were delivered for configured hardware and software environments.

Consortium

Who built it

The DECODE consortium brings together 16 partners from 6 European countries, with a notable balance of 5 universities, 5 research organizations, and 3 industry partners including 4 SMEs. The coordinator is Barcelona's municipal IT institute — a public body that runs a major city's digital infrastructure — which gave the project direct access to real municipal pilot environments. The 19% industry ratio is modest, reflecting the project's public-sector and civic orientation rather than commercial focus. For a business looking to adopt this technology, the academic and research depth (10 of 16 partners) means strong technical foundations, but commercial deployment support may require engaging third-party integrators.

How to reach the team

Institut Municipal d'Informatica de Barcelona (ES) — the city of Barcelona's official IT body. SciTransfer can facilitate an introduction to the technical team.

Order a report on this consortiumSee INSTITUT MUNICIPAL D'INFORMATICA DE BARCELONA profile →
Next steps

Talk to the team behind this work.

Want to explore how DECODE's privacy-by-design tools could work for your city platform or IoT deployment? SciTransfer can connect you with the right people from the consortium and prepare a tailored technology brief.

Order a report on this topicMore in Digital & ICT
More in Digital & ICT
See all Digital & ICT projects →
Affordable Satellite Communication Modules That Give SMEs Direct Access to Space Data
InnoSpaceComm
Open →
Home Dining Marketplace Connecting Travelers with Local Hosts Across Europe
ECINPERSON
Open →
AI-Powered 3D Art Creation That Cuts Production Time for Game and Film Studios
ArtomatixSuite
Open →