Public permissionless chains like Ethereum face a pressing challenge: reconciling immutability and decentralization with the GDPR’s data-protection rules.