Peirce urges end to KYC ‘panopticon’ in final SEC weeks

Hester Peirce, a commissioner at the Securities and Exchange Commission, used her final weeks at the agency to urge dismantling what she described as the KYC ‘panopticon.’ She argued that expanded know-your-customer rules have created pervasive surveillance that raises privacy concerns and may slow adoption of new financial services.

Peirce argued the current approach to customer identification captures more information than is needed to address illicit finance. She noted that the expansion of KYC requirements has turned routine financial activity into a source of centralized data collection.

The commissioner acknowledged that regulators have a role in preventing money laundering and terrorism financing, but added that current KYC practices sweep in ordinary consumers and small businesses. She recommended clearer limits on which data firms must collect, how long they may retain it, and who may access it.

Peirce pointed to the growth of digital banking and online trading as a driver of the KYC expansion. The shift of services online led firms and regulators to require more identity information for customer onboarding, producing large centralized stores of personal data that present privacy and security risks.

She proposed risk-based measures that focus enforcement on high-risk actors and transactions rather than blanket requirements for all users. Peirce highlighted privacy-preserving technologies, such as cryptographic proofs, that can confirm an individual’s eligibility without revealing underlying personal data.

She called for clearer regulatory guidance so firms can determine when less intrusive methods will suffice for compliance. “We should dismantle the KYC ‘panopticon’ and replace it with targeted, accountable processes,” Peirce wrote in prepared remarks.

Her remarks arrived amid ongoing debate among lawmakers, financial firms and technology companies about how to regulate digital assets, payments and financial data. Firms in the crypto sector have faced renewed scrutiny over whether existing customer checks are adequate, and traditional banks have been asked to tighten controls.

Peirce recommended specific policy options for lawmakers and regulators, including narrowing mandatory data fields, limiting retention periods, creating independent oversight of database access, and encouraging technologies that demonstrate compliance without exposing personal information.

The commissioner’s final intervention at the SEC adds her voice to policy discussions as lawmakers consider updates to the regulatory framework that covers both traditional finance and emerging digital-asset markets.