Coinbase collects your bank account numbers, payment card details, and a full record of every cryptocurrency transaction you make — including amounts, dates, and counterparties.
New explicit provision detailing collection of sensitive financial data including banking details, card information, and cryptocurrency holdings, elevating transparency about financial data practices.
View full change record →Every cryptocurrency trade, transfer amount, counterparty, and linked bank account is recorded by Coinbase and may be reported to the IRS (1099-DA) or disclosed to law enforcement, creating significant financial privacy implications for active traders.
How other platforms handle this
The Riot Services use cookies, web beacons, and similar technologies to automatically collect, store, and read files on your device. They may be delivered in a first-party (i.e., by Riot Games) or third-party (i.e., by other companies) context. These tools help the Riot Services work and operate mor...
Our Services may be accessed by individuals without a PayPal account or profile. We will collect Personal Information from you even if you are a non-account holder when you use our Services, such as when you use our Pay without a PayPal Account, use Unbranded Payment Services (e.g., Braintree), use ...
For cookies: click on the button at the bottom of our Cookie Policy.
Your complete financial and trading history on Coinbase creates a detailed picture of your wealth, investment behavior, and financial relationships — data that is particularly sensitive and subject to regulatory reporting.
(1) REGULATORY FRAMEWORK: Financial data collection is mandated by BSA/FinCEN CIP requirements (31 CFR §1020.220), IRS Form 1099-DA reporting (effective 2025, 26 U.S.C. §6045), OFAC transaction screening, and state money transmission laws. GLBA (15 U.S.C. §6801 et seq.) governs financial privacy notices for nonpublic personal information (NPI). CCPA/CPRA classifies financial account numbers as 'sensitive personal information' requiring enhanced disclosures and opt-out rights. GDPR Art. 9 does not classify financial data as special category, but Art. 6(1)(b) (contract performance) and Art. 6(1)(c) (legal obligation) apply. Enforcement: FinCEN, IRS, CFPB, FTC, state financial regulators. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.