Crypto Mom's Last Rodeo: Peirce Picks Privacy Over the Panopticon 🪩

Departing SEC Commissioner Hester Peirce used her penultimate week on the job to argue that regulators' insistence on collecting vast personal records under "know your customer" and anti-money laundering rules has created sprawling, hackable troves that put the very people they are meant to protect at risk. Speaking Wednesday at SIFMA's Digital Assets Conference in New York, Peirce said the framework rests on a flawed premise that amassing ever more data will help authorities spot criminals hiding among law-abiding users. "We build ever bigger data haystacks on the theory that we will find a needle or two inside," she said. "The bigger haystack, however, makes it harder to find the needles."

Peirce pointed to zero-knowledge proofs, the cryptographic method that lets one party verify a fact without exposing the underlying data, as a path away from mass collection. The technology underpins private cryptocurrency networks and assets, including Zcash. A proof can confirm that a user qualifies for a service "without that counterparty knowing your name, income, or address," Peirce said, calling for a regulatory framework that encourages attribute-based verification rather than identity-based surveillance. She warned that the alternative is "more data collection, more intermediary surveillance, more 'know your customer' requirements that turn our financial rails into a panopticon."

The remarks land against a string of recent KYC-related breaches. Fintech company Revolut exposed customers' passports and full Bitcoin transaction histories after fulfilling a fraudulent government data request, while hardware wallet maker Trezor suffered breaches at a third-party vendor that exposed tens of thousands of customers and later fueled phishing attacks. Such leaks have heightened fears of "wrench attacks," in which criminals physically target crypto holders whose wealth and identities are exposed.

Peirce, long the SEC's most crypto-friendly voice and a frequent critic of the agency's past "regulation by enforcement," rejected what she called "data maximalism," the assumption that more collection is always better. She suggested regulators permit firms to rely on third-party identity verification rather than each independently copying and storing the same sensitive records "across dozens of institutions," a theme she previously pressed at an August 2025 blockchain conference. Peirce disclosed that Wednesday's speech came during her penultimate week as a commissioner.