Coinbase · Coinbase Privacy Policy

Government and Law Enforcement Disclosure Without User Notice

High severity
Share 𝕏 Share in Share 🔒 PDF

What it is

Coinbase can hand your personal and financial data to law enforcement or government agencies — often without telling you — when legally required or when Coinbase believes it is necessary.

Change history

modified Apr 19, 2026

Changed from conditional 'compelled to do so' language to more expansive 'as required by applicable law,' removed specific references to 'User Agreement violations,' and added explicit statement that notification is not required in all circumstances.

View full change record →

Consumer impact (what this means for users)

Your complete transaction history, account details, and identity information can be disclosed to law enforcement or government agencies without your knowledge, which is particularly significant given Coinbase's obligations under BSA/AML reporting requirements including Suspicious Activity Reports (SARs).

How other platforms handle this

Adobe Medium

If we merge with or are acquired by another company, sell an Adobe website, app, or business unit, or if all or a substantial portion of our assets are acquired by another company, your information will likely be disclosed to the prospective purchaser, our advisers and any other prospective purchase...

Lyft Medium

Information to make the Lyft Platform safer, like background check information or identity verification information

Gemini Medium

We may preserve and share information as a result of requests from third parties such as civil litigants, law enforcement and other government authorities in the course of fraud investigations. Information may also be shared when we seek to protect ourselves in the course of litigation or other disp...

See all platforms with this clause type →
Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

As a cryptocurrency platform subject to FinCEN reporting obligations, Coinbase processes a high volume of government data requests; users may not be aware their account and transaction data has been disclosed to authorities.

View original clause language
We may disclose your personal information to law enforcement, government authorities, or other third parties as required by applicable law or legal process, including in response to a court order, subpoena, or government request. We may also disclose information where we believe it is necessary to prevent fraud, protect our rights or property, or protect the safety of our users or the public. We are not required to notify you of such disclosures in all circumstances.

Institutional analysis (Compliance & legal intelligence)

(1) REGULATORY FRAMEWORK: This provision is driven by BSA/FinCEN obligations (31 U.S.C. §5318, 31 CFR Chapter X) requiring SARs and CTRs; IRS reporting obligations (26 U.S.C. §6050W, 1099-DA requirements); OFAC compliance (50 U.S.C. §1701 et seq.); state money transmission laws; GDPR Art. 6(1)(c) (legal obligation) and Art. 23 (restrictions on data subject rights); and ECPA (18 U.S.C. §2701 et seq.) governing electronic communications disclosures to law enforcement. Enforcement: FinCEN, IRS, OFAC, DOJ, state financial regulators. (2)

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

  • FTC
    The FTC has authority over deceptive or unfair practices including overbroad discretionary disclosure of user data to third parties beyond legal mandate.
    File a complaint →
  • CFPB
    The CFPB has authority over financial data privacy practices affecting consumers of financial products and services, including cryptocurrency exchange platforms offering payment and financial account services.
    File a complaint →

Applicable regulations

BIPA
Illinois, USA
CCPA/CPRA
California, USA
COPPA
United States Federal
CAN-SPAM
United States Federal
DMA
European Union
FCRA
United States Federal
GDPR
European Union
GLBA
United States Federal
HIPAA
United States Federal
UK GDPR
United Kingdom

Provision details

Document information
Document
Coinbase Privacy Policy
Entity
Coinbase
Document last updated
March 24, 2026
Tracking information
First tracked
April 9, 2026
Last verified
April 9, 2026
Record ID
CA-P-002483
Document ID
CA-D-00048
Evidence Provenance
Source URL
Wayback Machine
SHA-256
78a7819594fbdda870b5d87062a20d9bc35a005cd93b3d670553ddb635dc7b75
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Coinbase | Document: Coinbase Privacy Policy | Record: CA-P-002483
Captured: 2026-04-09 14:51:12 UTC | SHA-256: 78a7819594fbdda8…
URL: https://conductatlas.com/platform/coinbase/coinbase-privacy-policy/government-and-law-enforcement-disclosure-without-user-notice/
Accessed: April 29, 2026
Classification
Severity
High
Categories

Other provisions in this document

Related Analysis