Confidentiality is workable so long as the regulated firm can identify the parties and disclose on demand. Encrypted amounts are not the thing being restricted.
What Canada actually says
Canada is the clearest case in this section of an outcome that looks like a ban and is not one. Anonymity-enhancing assets have largely disappeared from Canadian platforms, and yet across the securities administrators and the financial intelligence unit we found no instrument that names them or prohibits them as a class. The mechanism appears to be the combination of know-your-product duties on platforms and a travel rule that makes an untraceable transfer above CAD 1,000 impossible to comply with. One large exchange's own delisting notice attributes the decision to recent compliance requirements in Canada without citing a single rule. Read that carefully: it is a compliance judgement by a private firm, not a prohibition, and the distinction matters when people cite Canada as precedent.
The instruments that matter
- Transfer records from CAD 1,000
- a virtual currency transfer record is required when transferring at the request of a person or entity at that value, with a separate large transaction record at CAD 10,000 in a single transaction
- What must travel
- name, address and account or reference number for both the party requesting the transfer and the beneficiary, with reasonable measures required where information is missing
- No instrument names privacy assets
- we found no securities regulator or FINTRAC instrument naming privacy coins or anonymity-enhanced assets, or prohibiting them as a class
- The mechanism appears commercial
- one major exchange's own Canadian delisting notice attributes the decision to recent compliance requirements in Canada, naming no regulator and no regulation
- Federal privacy reform stalled
- PIPEDA remains the federal private-sector law; Quebec's Law 25 is the more demanding regime in practice
What this means for confidential transactions
Bubble is built for exactly this shape of obligation: amounts and balances live on chain as ciphertexts, computation happens without decryption, and the only disclosure path is an on-chain access list through which an authorized party - an auditor, a supervisor, a counterparty - can request scoped decryption. That is confidentiality from the public, not from the regulator.
Related entries
- ArgentinaAmericas · Self-custody providers written out of the regime
- British Virgin IslandsAmericas · Structural confidentiality kept, transactional confidentiality not
- CaliforniaAmericas · A licensing regime that arrived in July 2026
- Cayman IslandsAmericas · A mature regime that never addresses confidentiality
- United StatesAmericas · Split by perimeter, not by ideology
- BahamasAmericas · Issuance of privacy tokens barred, trading not
Compliant by default.
See how selective disclosure satisfies a supervisor without publishing your book to the world.