Why Peirce’s Push for Zero-Knowledge Proofs Matters Now

On 24 September 2026, US Securities and Exchange Commission (SEC) Commissioner Hester Peirce publicly called for a radical shift in how financial institutions approach anti-money laundering (AML) and know-your-customer (KYC) obligations. Specifically, Peirce advocated for replacing traditional data collection and surveillance-heavy KYC/AML requirements with privacy-preserving technologies, notably zero-knowledge proofs (ZKPs) (FXStreet), (finance.biggo.com), (Decrypt), (ForkLog). This development is significant for Australian compliance officers, fintech founders, and AML/CTF teams, as US regulatory trends often foreshadow international shifts and may influence future Australian standards.

Understanding Zero-Knowledge Proofs: A Primer

Zero-knowledge proofs are cryptographic protocols that enable one party to prove to another that a statement is true without revealing any underlying information. In the context of KYC/AML, ZKPs could allow customers to demonstrate compliance (for example, that they are not on a sanctions list or are above a certain age) without sharing their full identity or sensitive personal data. This stands in stark contrast to the current model, which relies on the collection, storage, and sharing of extensive personal information across financial institutions and authorities.

The Current State: Data Collection and Surveillance

Traditional KYC/AML frameworks are heavily reliant on gathering and verifying customer data, storing it in central repositories, and sharing it with regulators or law enforcement as required. This approach has been criticized for:

• Creating significant privacy risks and data breach exposures
• Imposing high compliance costs on financial institutions
• Potentially excluding the unbanked or those lacking standard documentation
• Generating large volumes of personal data that may not be directly relevant to AML/CTF objectives

Commissioner Peirce’s Critique of the ‘KYC Panopticon’

Commissioner Peirce has described the current KYC/AML regime as a “panopticon,” suggesting that it fosters an environment of constant surveillance and mass data collection (finance.biggo.com). She argues that this is neither effective nor sustainable, and that technology like ZKPs can achieve the same compliance outcomes with far less intrusion. According to multiple reports, Peirce is urging regulators and industry to explore and pilot ZKP-based compliance as a privacy-first alternative (FXStreet).

Assessment: The Case for ZKPs in AML/CTF Compliance

Assessment: Peirce’s advocacy signals a growing recognition among US regulators that current KYC/AML approaches are becoming unsustainable, particularly as digital finance expands and data privacy concerns intensify. While the headlines do not indicate any immediate regulatory change, the SEC’s public endorsement of ZKPs may encourage fintechs and regtech providers to experiment with privacy-preserving solutions.

For Australian compliance teams, this development is likely to be of strategic importance for several reasons:

• US regulatory trends often influence Australian policy, especially in the context of global AML/CTF standards.
• Australian fintechs serving US clients or seeking global expansion will need to monitor these developments closely.
• Adoption of ZKP-based KYC could reduce data breach risks and associated liabilities.
• Privacy-first compliance solutions may become a competitive differentiator as consumer expectations shift.

Potential Impacts and Compliance Considerations

Opportunities

• Reduced Data Breach Risk: By limiting the amount of personal data collected and stored, ZKPs could shrink the attack surface for hackers and reduce the impact of breaches.
• Improved Customer Experience: Privacy-preserving KYC could streamline onboarding and reduce friction for customers, especially those wary of sharing sensitive data.
• Regulatory Alignment: Early adoption of ZKP-based solutions could position Australian fintechs as leaders in privacy-centric compliance, potentially easing future regulatory transitions.

Challenges

• Regulatory Uncertainty: No major jurisdiction currently accepts ZKPs as a full substitute for traditional KYC/AML processes. Compliance teams must be cautious about relying solely on untested models.
• Technical Complexity: Implementing ZKPs at scale requires significant technical investment and expertise, and interoperability standards are still emerging.
• Law Enforcement Access: Regulators may resist solutions that limit their ability to investigate and trace illicit funds, especially in high-risk sectors.

What’s Next? Signals for Australian AML/CTF Teams

While Peirce’s statements do not constitute a change in law or regulation, her public advocacy is a clear signal that the debate over privacy, surveillance, and effectiveness in AML/CTF is intensifying at the highest levels of US financial regulation. Australian compliance and risk teams should:

• Monitor US regulatory developments for pilot programs or shifts toward privacy-preserving compliance models.
• Engage with industry groups and regtech providers exploring ZKP solutions for KYC/AML.
• Assess internal data collection practices and consider the long-term benefits of minimising data retention where possible.
• Prepare for potential questions from regulators or clients about privacy risks and innovative compliance approaches.

Conclusion: A Moment of Opportunity and Caution

The SEC’s Peirce has put zero-knowledge proofs on the regulatory agenda, challenging the status quo of data-heavy KYC/AML. For Australian fintechs and compliance teams, this is both an opportunity to lead in privacy-first compliance and a challenge to stay within the bounds of current legal requirements. The next 12-24 months will likely see increased experimentation and debate around ZKPs in AML/CTF, with Australia well-placed to watch, learn, and potentially pilot these technologies in partnership with global peers.

This article was prepared by Valitros Intelligence, our automated news desk, from the public reporting linked above. It is general information, not legal or compliance advice.