By law, financial firms are required to collect personal information about their customers, which ultimately ends up in online databases. Cryptocurrencies could create a more open financial system with improved consumer privacy protections
Even as all of humanity mobilises against COVID-19, thoughts are turning to how the world will be different after the crisis. As businesses rush to adapt to the new world of social distancing, the pandemic has accelerated an already inexorable trend towards digital commerce. This broader shift should also include the widespread adoption of digital currencies, which provide stronger consumer financial and privacy protections.
For most of the 20th century, encryption was reserved for national security needs. Cryptography helped the Allies win the Second World War, and then protected secret communications during the Cold War. Until as recently as 1992, the US, as a matter of national security, did not allow cryptographic technology to be exported. Encrypted communication was not widely available, and anyone using it was assumed to have something to hide.
But starting in the 1990s, early internet entrepreneurs began calling for encryption to be used in e-commerce, arguing that it was needed in order to protect customer credit card numbers, passwords and other information entered online. It turned out that the same encryption technology that had been created in academic labs – where trust and collaboration reigned – could be useful to everyone.
Cryptocurrencies hold the promise of creating a more open financial system with worldwide access, instantaneous fund transfers, lower costs and vastly improved consumer privacy protections
US policymakers and law enforcement initially balked at this push towards widespread encryption. In their view, privacy for everyone meant privacy for terrorists, drug dealers and money launderers. As then FBI Director Louis J Freeh told Congress in 1994, preserving the US Government’s ability to intercept internet communications was “the number one law enforcement, public safety and national security issue facing us”.
The debate about end-to-end encryption is still raging. But, crucially, consumer expectations have changed since the 1990s. The overwhelming majority of internet traffic is now encrypted, and most of us have been trained to look for the closed-lock icon in our browser before entering sensitive information. Popular apps like WhatsApp, Telegram, iMessage and Signal have led the way in normalising private messaging that can’t be tracked by third parties.
But there is one area of our lives where privacy is not yet the norm: our personal financial information. By law, financial firms are required to collect reams of personal information about their customers. This information ultimately ends up in online databases, where it presents a tempting target for hackers. In 2017, the credit rating firm Equifax revealed that a data breach had exposed sensitive information about more than 147 million consumers, or just under half of the US population. That followed a similar breach in 2013, when hackers famously obtained the names, credit card numbers and other information about tens of millions of Target customers.
Fortunately, a solution is on the horizon. Cryptocurrencies hold the promise of creating a more open financial system with worldwide access, instantaneous fund transfers, lower costs and vastly improved consumer privacy protections. When bitcoin first gained popularity, many people incorrectly assumed that it was anonymous money. In fact, as a blockchain technology, it uses a public ledger that records a digital trail of every transaction. Blockchain analytics firms are thus now helping law enforcement track down criminals who thought their trail was covered. And cryptocurrency exchanges like Coinbase have instituted robust anti-money-laundering and Know Your Customer programs that rival those of any financial institution.
Several more recent developments in cryptocurrency technologies promise to take consumer privacy to even higher levels, and they are sure to be controversial. First, ‘privacy coins’ such as Zcash and Monero offer new cryptocurrency protocols that make every transaction untraceable. Other cryptocurrencies aspire to replicate these features, and even JPMorgan Chase has explored private transactions through its Quorum cryptocurrency. This shift is a bit like when websites moved from HTTP to HTTPS as the global standard: it lets consumers know that their information is protected by default.
For countries thinking about cryptocurrency policy, the best approach will be to strike a balance between law enforcement, cybersecurity, privacy, innovation and economic competitiveness
Second, so-called ‘non-custodial cryptocurrency wallets’ now enable customers to store their own private keys (which allow one to move funds) instead of relying on a third party. By not actually storing customer funds, the providers of non-custodial wallets are aiming to position themselves as software companies rather than financial institutions subject to regulation. In the past, non-custodial wallets required a certain degree of technical sophistication to operate, limiting their use. But, like encrypted messaging apps, they are becoming increasingly accessible to a mass market.
A new generation
Unsurprisingly, these innovations have alarmed banks, regulators and law enforcement agencies. But just as the early internet needed encryption to enable digital commerce, cryptocurrencies need privacy protections to unlock their full power and potential. Whether one needs to guard against authoritarian regimes, data harvesters or criminals, the best way to ensure that sensitive financial data isn’t hacked is to avoid having to collect it in the first place.
Enhancing consumer financial protections does not mean giving free rein to criminals. Law enforcement agencies still have a wide range of tools at their disposal, from subpoenaing cryptocurrency exchanges to examining conversions into and out of fiat currencies (which are likely to remain the choke points for law enforcement). And these exchanges will continue to be regulated as financial services, regardless of whether consumers are using privacy coins or non-custodial wallets.
Having watched the US benefit enormously from the creation of the world’s leading internet companies, many countries are now working to attract the next generation of cryptocurrency firms. For countries thinking about cryptocurrency policy, the best approach, as always, will be to strike a balance between law enforcement, cybersecurity, privacy, innovation and economic competitiveness.
Consumers in a free society will always demand and expect reasonable levels of privacy. Our financial lives are no exception. Fortunately, cryptocurrencies can fix some of the most vexing issues in financial services. As we plan to rebuild economically after the COVID-19 crisis, we must allow these technologies to grow.
©️ Project Syndicate 2020