Coinbase · Coinbase Privacy Policy

Extensive KYC/Identity Data Collection

High severity
Share 𝕏 Share in Share

What it is

We collect personal information you provide to us such as name, address, email address, and phone number. If you choose to use certain features, you may also provide financial account information, identification documents such as passport or driver's license, tax identification numbers, date of birth, and other information required by applicable law.

Why it matters

This is among the most sensitive combination of personal data that can be collected — government ID plus financial account information plus biometrics together enable identity theft, financial fraud, and comprehensive financial surveillance if breached or misused.

Consumer impact

Coinbase collects highly sensitive personal data including government-issued ID, financial account information, transaction history, biometric identifiers, and behavioral data, and shares this information with a broad ecosystem of third parties including advertising networks, blockchain analytics companies, and law enforcement agencies. Users have limited ability to restrict data collection as most categories are deemed necessary to provide services or comply with legal obligations, meaning opting out effectively requires closing the account. You can submit requests to access, delete, or export your personal data through Coinbase's privacy rights portal at privacy.coinbase.com.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Export Your Data
    Go to privacy.coinbase.com and submit a 'Download My Data' or 'Access My Data' request to see all KYC and identity information Coinbase holds about you. You will need to verify your identity to complete this request.

Applicable agencies

  • CFPB
    The CFPB has authority over financial data collection and security practices by financial services companies and can investigate inadequate data security for sensitive financial and identity information.
    File a complaint →
  • FTC
    The FTC has enforcement authority over inadequate security for sensitive consumer data including government IDs and financial information under FTC Act Section 5 and the Safeguards Rule.
    File a complaint →

Provision details

Document information
Document
Coinbase Privacy Policy
Entity
Coinbase
Document last updated
March 24, 2026
Tracking information
First tracked
April 3, 2026
Last verified
April 4, 2026
Record ID
CA-P-002041
Document ID
CA-D-00048
Evidence Provenance
Source URL
Wayback Machine
SHA-256
e2d4eaa6ef636c27b1f2eeda89403a21fabbd0722c16e0f34e9c2f754985ff07
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Coinbase | Document: Coinbase Privacy Policy | Record: CA-P-002041
Captured: 2026-04-03 08:57:19 UTC | SHA-256: e2d4eaa6ef636c27…
URL: https://conductatlas.com/platform/coinbase/coinbase-privacy-policy/extensive-kycidentity-data-collection/
Accessed: April 4, 2026
Classification
Severity
High
Categories

Other provisions in this document