Confidentiality is workable so long as the regulated firm can identify parties and disclose on demand.
What United States actually says
The US moved in both directions at once between 2024 and 2026, and the dividing line is custody rather than politics. Where an intermediary holds customer assets, identity obligations expanded: broker reporting went live on schedule, the travel rule is unchanged, and stablecoin issuers must now be able to freeze and seize. Where software is non-custodial, the direction reversed: the unhosted wallet proposal was withdrawn, the DeFi broker rule was repealed by Congress and cannot be reissued without new legislation, and a derivatives regulator declined to treat self-custodial wallet software as an intermediary. Executive Order 14178 states protection of self-custody and uncensored transacting as policy. Almost none of this is settled law: the market structure bill has still not passed.
The instruments that matter
- Tightening at the custodial perimeter
- 1099-DA broker reporting live with basis from 2026, the Bank Secrecy Act travel rule, GENIUS Act freeze-and-seize capability, NYDFS blockchain analytics, California DFAL five-year identity records
- Loosening around non-custodial software
- the 2020 unhosted wallet rule withdrawn in 2024, the DeFi broker rule repealed in 2025 and barred from reintroduction, the travel rule threshold cut withdrawn, and a CFTC no-action position for self-custodial wallet software in March 2026
- Executive Order 14178, 23 January 2025
- makes it policy to protect lawful use of public blockchains, including developing software, transacting without unlawful censorship, and maintaining self-custody
- Almost nothing legislative has passed
- the CLARITY Act reached a Senate cloture motion in August 2026 without a vote; the Blockchain Regulatory Certainty Act and the anti-CBDC bills remain pending
What this means for confidential transactions
Bubble is built for exactly this shape of obligation: amounts and balances live on chain as ciphertexts, computation happens without decryption, and the only disclosure path is an on-chain access list through which an authorized party - an auditor, a supervisor, a counterparty - can request scoped decryption. That is confidentiality from the public, not from the regulator.
Related entries
- OFAC and Van LoonAmericas · Sanctions · where the law found a limit
- FinCENAmericas · Bank Secrecy Act · the deepest US constraint
- GENIUS ActAmericas · Stablecoins · censorability as a licensing precondition
- IRS broker reportingAmericas · Tax · live at the custodial perimeter, dead beyond it
- NYDFSAmericas · The most privacy-restrictive US regulator, state or federal
- The third-party doctrineAmericas · Why chain analysis needs no warrant
Compliant by default.
See how selective disclosure satisfies a supervisor without publishing your book to the world.