Peirce's Parting Challenge: Balancing Consumer Privacy and Security

Today, Commissioner Hester Peirce leaves the SEC after eight years of service. Peirce is a principled voice who has consistently advocated for regulation that balances risk and innovation in the digital asset industry. She has been a vocal critic of the Commission's approach to enforcement, often dissenting when they chose to bring enforcement actions rather than write rules the industry could comply with.

Pierce proposed a token safe harbor years before regulators were ready to listen and led the Crypto Task Force, insisting that the agency's duty to protect investors meant it must use its authority to provide regulatory guardrails for the rapidly expanding industry. Her work has not gone unnoticed, and she is widely recognized for her humility, conviction, and sense of humor.

However, Pierce's departure from the SEC does not mark the end of her mission. In a recent speech, she outlined the work that still needs to be done, describing the current state of financial regulations as a crossroads. One path is the world we've been living in, where dragnet surveillance, datafication, and cybersecurity breaches expose our most sensitive information to bad actors. The other path is a world of both privacy and security, where Americans can prove they're following the law without handing over their sensitive personal information.

Pierce has firsthand experience seeing how our financial regulations are designed to extract as much personal data from American consumers as possible. For over 50 years, our regulatory framework has been built upon the mass collection and storage of personal data from all Americans who interact with the financial system. Businesses collect personal data from consumers and share it with the government, which aims to track down actual criminal activity, the 'needle' in the 'haystack' of innocent, unassuming Americans' data.

However, the needle is rarely found in the haystack. The law is designed as if the bigger the haystack is, the easier it is to find the needle, when the opposite is true. The status quo leaves the government with an enormous cache of consumer data it must sift through, looking for evidence of criminal activity. The consequences of this mass collection and storage of data are stark, including centralized stores of data making breaches far more damaging, exposing consumers to greater harm, and jeopardizing our collective national security.

Pierce has identified a path forward, where consumer privacy is not sacrificed in the name of security. She believes innovation in privacy-enhancing technology, much of which is native to the blockchain ecosystem, can provide a solution. Blockchain infrastructure may allow individuals to transact while maintaining complete control over their personal information, and transaction records are public and secure. Zero-knowledge proofs enable selective disclosure, allowing an individual to demonstrate that they're permitted to transact without disclosing any unnecessary information. Verifiable credentials can use this technology to prove that a person is trustworthy and genuine without revealing their identity.

According to Pierce, what's missing is the regulatory framework that would allow and encourage the adoption of these technologies. It's now up to the regulatory community to create a framework that balances consumer rights with the need for law enforcement to monitor transactions and pursue bad actors.