The General Data Protection Act (GDPA) will come into force from the 25th May 2018. A key requirement of the act, states that organisations collecting data from EU citizens, must ensure that personal data will be erased upon request. How are EU citizens expected to know which organisations store information about them. I propose creating an application that tracks data transactions via a blockchain.