Analysis of gdpr notification emails sent by blockchain service providers and developers and sentiment analysis of tweets about gdpr notification emails

The General Data Protection Regulation (GDPR) aims to protect and personal data of European Union citizens. The GDPR, which entered into force in countries that became members of the European Union on 25 May 2018, covers all companies that process the personal data of citizens within the borders of the European Union. Severe penalties and sanctions can be imposed on companies that do not comply with GDPR articles. GDPR has created difficulties for many innovative technologies due to the rights it provides to individuals and the data processing principles it has determined. Blockchain systems, which make it impossible to delete data with the way they operate, do not meet the right to be forgotten that GDPR gives to individuals. The fact that the data will be processed indefinitely, uncertainties in the approval collection mechanisms and, difficulties in assigning responsibilities due to the anonymous environment are other factors that endanger the compliance of these systems with the GDPR. Therefore, this study has been focused on the views of blockchain service producers and developers about the topic. In the process of GDPR coming into effect; notification emails that were sent to users by these systems were collected and analyzed. Within the scope of the study, a website was prepared for the collection of e-mails. The post requesting these e-mails and containing the prepared website link was shared in forums on 129 different crypto currency official websites. The reactions of forum members and system administrators to this sharing were monitored and recorded for 6 weeks. The post was shared on 148 forums. Among them, it was observed that 30 of them were removed by the moderator, 79 of them were removed by Reddit's spam filters, 2 of them were waiting for approval and were not accepted, 20 of them were temporarily suspended, 15 of them were not answered, only 1 post was commented and after 1 post was shared, it was banned and the permission to view the site was removed. In summary, these notification email requests were not welcomed by the system administrators and ignored by the users. This situation has been interpreted as the GDPR compliance process is immature in this sector, resistance is encountered by the systems and the users do not have a sufficient level of awareness. We continued the study by identifying people's attitudes and thoughts towards e-mails sent by companies. Thanks to Twitter, one of the most used social networks, we can easily follow what is happening all over the world about current issues and learn what people think. Using tweets shared by Twitter users, we determined what people thought about these emails they received. Thus, we were able to evaluate and analyze the positive or negative attitudes of people about these e-mails. We used the TextBlob library to do sentiment analysis on these tweets. Then we modeled the topic using the LDA algorithm. Then we made the topic modeling by using the LDA algorithm. Thus, we found out which topics were discussed in tweets containing positive, negative, or neutral emotions. Neutral sentiment tweets were often informative tweets. Negative tweets confirmed that people who received too many notification emails were annoyed. It has been observed that positive tweets belong to companies that legally secure themselves with notification e-mails and users who recover their forgotten accounts with these e-mails. With this study, a perspective is presented for companies and researchers who will work on this subject.