The Cardano Foundation has partnered with German data cooperative Reef Data eG, a project that aims to let individuals pool their personal data and sell it to businesses in exchange for royalties. The partnership, announced July 28, is backed by Hamburger Volksbank, ARIC, VALIO, and Disruptive Elements. Reef plans to use Cardano's Reeve system to record payment flows and royalty distributions, while personal data stays off-chain — a design that aligns with recent European data protection guidance.
How the cooperative works
Reef's model is straightforward: members request their own data from companies under the EU Data Act, anonymize it on their phone, and contribute it to the cooperative's pool. The cooperative then licenses that data to businesses and pays royalties back to contributors. The EU Data Act, applicable since September 2025, covers data generated by connected products like cars and smart devices. GDPR Article 15 gives individuals the right to access data companies hold on them, and Article 20 covers portability in a machine-readable format — both are central to Reef's workflow.
Off-chain data, on-chain payments
The European Data Protection Board adopted final guidance on blockchain technologies on July 7, warning that immutable ledgers conflict with GDPR rights like erasure and correction. The EDPB recommended personal data be kept off-chain. Reef's architecture does exactly that: personal data never touches the blockchain. Only payment flows and royalty distributions are recorded on Cardano's Reeve system. That puts Reef ahead of many blockchain projects that struggle with GDPR compliance.
Regulatory framework and the EU list
The EU Data Governance Act provides a framework for data intermediaries. It requires recognized providers to register with national authorities and appear in a public list. That list was updated on July 28 and names 36 providers across 10 countries. Germany's only entry is Law & Innovation Technology GmbH, trading as Consenter. Reef is not yet on that list, but the partnership with the Cardano Foundation could help it meet the requirements.
The competition and open questions
Reef isn't the only data cooperative out there. Switzerland's MIDATA Cooperative focuses on nonprofit health data. Swash rewards users for browsing data. DataVaults runs EU-funded personal data hubs. Spain's SalusCoop handles health data donation for research. But Reef is more commercial — it sells datasets to buyers and distributes royalties under published, auditable rules. That commercial angle could attract more users, but it also raises questions about privacy. Reef has published limited technical detail about its on-device anonymization process. EU data-protection authorities distinguish true anonymization from pseudonymization, and pseudonymized data may still be considered personal information. Until Reef shows how it anonymizes data in practice, the privacy guarantees remain unclear.
The next step for Reef will likely be registration under the EU Data Governance Act. Without that, it can't appear on the official list of recognized data intermediaries. The Cardano Foundation partnership gives it a blockchain backbone, but the regulatory paperwork is still ahead.
