Many concepts and requirements converge in the field of identity and personal data, intersecting technique, practicality and security. The study of these aspects has led to various conclusions and solutions, particularly in terms of personal data soverignty and (de)centralization. Critical and positive sides of these solutions are analyzed, and an attempt is made to bring together existing techniques such as Key Event Receipt Infrastructure (KERI) and Self-Sovereign Identity (SSI) in the creation of a secure Personal Data Store. The result is a solution that shifts the locus-of-control of personal data to the subject of the data, provides cryptographic security, and is potentially compliant with the General Data Protection Regulation (GDPR).