This volume of sensitive financial and identity data makes your Coinbase profile an extremely high-value target for data breaches, and Coinbase's collection of this data is largely non-negotiable if you want to use their services.
Coinbase collects highly sensitive personal data including government-issued ID, financial account information, transaction history, biometric identifiers, and behavioral data, and shares this information with a broad ecosystem of third parties including advertising networks, blockchain analytics companies, and law enforcement agencies. Users have limited ability to restrict data collection as most categories are deemed necessary to provide services or comply with legal obligations, meaning opting out effectively requires closing the account. You can submit requests to access, delete, or export your personal data through Coinbase's privacy rights portal at privacy.coinbase.com.