SEC Commissioner Peirce advocates zero-knowledge proofs for KYC/AML compliance overhaul

SEC Commissioner Hester Peirce told a room full of digital asset professionals that the financial industry’s approach to identity verification is fundamentally broken. Speaking at SIFMA’s Digital Assets Conference on September 23, she argued that zero-knowledge proofs could replace the bloated data pipelines that define modern KYC and AML compliance.

The pitch is straightforward: instead of hoarding sensitive personal information to prove someone meets a regulatory threshold, let cryptographic math do the work. A zero-knowledge proof can confirm that a person is, say, over 18 or an accredited investor, without ever revealing their name, address, or Social Security number.

The haystack problem

Peirce’s critique of current KYC/AML frameworks centers on what she described as the creation of massive “haystacks” of personal data. The idea behind traditional compliance is that collecting more information makes it easier to catch bad actors. In practice, Peirce argued, the opposite happens.

When regulated entities vacuum up enormous volumes of customer data, the sheer quantity makes it harder for law enforcement to find the needles they’re actually looking for. Meanwhile, all that collected data sits in centralized databases that become prime targets for breaches. Consumers pay the price twice: once through privacy erosion and again when their information inevitably leaks.

How zero-knowledge proofs change the equation

Zero-knowledge proofs are a cryptographic technique that lets one party prove a statement is true to another party without revealing any underlying information. Peirce advocated for what she called “attribute-based verification” using ZKPs. Under this model, compliance checks would verify specific attributes, such as age, citizenship, or accredited investor status, rather than collecting and storing full identity profiles. The verification happens mathematically, and the sensitive data never leaves the user’s control.

Peirce also pointed to public blockchains as a complementary piece of the puzzle. She noted that distributed ledgers offer transparency and tamper resistance that traditional record-keeping systems simply cannot match. She further urged regulators to update their frameworks to allow greater reliance on third-party identity verification services. Rather than every financial institution independently collecting and storing customer data, trusted third parties could handle verification once, issuing cryptographic attestations that users carry with them across platforms.

Policy signal, not policy change

It’s worth being precise about what this speech is and what it isn’t. Peirce’s remarks represent a significant policy signal from inside the SEC, but they do not constitute a formal rulemaking proposal. No notice of proposed rulemaking was filed. No specific regulatory guidelines were introduced.

Peirce has served as an SEC Commissioner since 2018 and has built a reputation as the agency’s most vocal advocate for digital asset innovation. Her comments at SIFMA align with the broader work of the SEC’s Crypto Task Force, which has been exploring how existing securities regulations intersect with blockchain technology. The speech did not reference any specific crypto tokens or protocols, keeping the discussion at the infrastructure and standards level.

Market participants watching for concrete shifts will need to track whether Peirce’s advocacy gets formalized into SEC guidance, whether other commissioners signal support, and whether Congress takes legislative action to codify technology-neutral compliance standards. Until then, the speech functions as an important directional indicator from one of the SEC’s five commissioners, not a green light for immediate operational changes.