here is some lessons to learn about privacy..
ill use fiat as the established example.
when you buy things from walmart with your debit card. your bank only sees you->walmart $xxx.xx
this does not raise any red flags, because walmart is a legit business. your bank has no need to ask for what you have bought.
yes walmart keeps receipt records of your purchases(not your bank. nor government) BUT it is possible for there to be some future need to have your bank ask about a certain purchase and make a court order for your bank to ask walmart to disclose the details of your receipt.. but this is not a default thing. its the exception..
however if your bank offers you 'cashback' on purchases.. watch out. this is your bank bypassing the government overwatch exception, and instead is where your bank as a business wants YOUR PERMISSION to gather your purchase items lists from walmart so that your bank(as a business) can sell that data to other companies who may want to advertise their similar products to you
this is not about government surveillance. this is about the bank as a business getting your consent to invade your privacy for their financial gain with an enticement that you can make money too from their invasion of privacy
what you will find is that many CEX and even DEX will try to sell your data to other businesses. and yes. many of the new laws that allow businesses to share data, are not done by government wanting oversight at their level. but from businesses lobbying government to make these rules to allow businesses to make profit.
a bank/business does not need to wait for a court order from a government to be able to pass data, IF the terms and conditions of the bank/business makes the customer persuaded into signing upto/opting-into something that gives that bank/business permission to pass data
its why even here in the UK your medical records are still deemed private. unless you as the patient have opted into a service that allows data to be shared.
i say all this because even if there is no current law that has the government keeping records on everyone. (yep i said that the government does not store all database records of all coinbase customers, FACT) due to laws around needing court orders and suspected reported behaviour to trigger a court order request..
however coinbase or any exchange can simply put in the small print of their T&C of membership accounts that the member of coinbase by signing upto the service has by default opted into a scheme allowing their data and even their deposit taint analysis to be passed onto third parties
. they currently are not asking for consent to sell your data.. but they can.. EASILY
but they do ask for your implied consent to bypass the court order requirement.
here is one example of coinbase bypassing the court order requirement by getting your consent that allows them to pass info around without the need of a court order (getting your consent/authorisation)
https://www.coinbase.com/legal/user_agreement/united_states1.3. Consent to Access, Processing and Storage of Your Personal Data & Identity Verification. During registration for your Coinbase Account, or at any other time deemed necessary by Coinbase, you agree to provide us with the information we request for the purposes of identity verification, providing Coinbase Services to you, and the detection of money laundering, terrorist financing, fraud, or any other financial crimes and permit us to keep a record of such information. The information we request may include certain personal information, including, but not limited to, your name, address, telephone number, e-mail address, date of birth, taxpayer identification number, government identification, and information regarding your bank account (such as the name of the bank, the account type, routing number, and account number) and in some cases (where permitted by law), special categories of personal data, such as your biometric information. You consent to us accessing, processing and retaining any personal information you provide to us for the purpose of us providing Coinbase Services to you.
This consent is not related to, and does not affect, any rights or obligations we or you have in accordance with data protection laws, privacy laws and regulations. You can withdraw your consent at any time by closing your account with us. However, we may retain and continue to process your personal information if we reasonably believe it is necessary in order to comply with laws or regulations. In providing us with this or any other information that may be required, you confirm that the information is accurate and authentic. You agree to keep us updated if any of the information you provide changes. You authorize us to make inquiries, whether directly or through third parties, that we consider necessary to verify your identity or protect you and/or us against fraud or other financial crime, and to take action we reasonably deem necessary based on the results of such inquiries. When we carry out these inquiries, you acknowledge and agree that your personal information may be disclosed to credit reference and fraud prevention or financial crime agencies and that these agencies may respond to our inquiries in full. This is an identity check only and should have no adverse effect on your credit rating. We reserve the right at all times to monitor, review, retain and/or disclose any information as necessary to satisfy any applicable law, regulation, sanctions programs, legal process or governmental request. Further, you authorize your wireless operator (e.g., AT&T, T-Mobile, US Cellular, Verizon, or any other branded wireless operator) to use your mobile number, name, address, email, network status, customer type, customer role, billing type, mobile device identifiers (IMSI and IMEI) and other subscriber status details, if available, solely to allow verification of your identity and to compare information you have provided to Coinbase with your wireless operator account profile information for as long as you have a Coinbase Account. See our Privacy Policy and Cookie Policy for more information on how we process your personal data and the rights you have in respect of this.