# NIST

> NIST (US National Institute of Standards and Technology): The vocabulary that makes privacy claims testable. Region: Global. Builds with privacy tech: The regime itself mandates, pilots or funds privacy-preserving technology.

Part of the Soda Labs Privacy Hub regulation map, which reads the instruments
themselves rather than summarising the summaries: https://www.sodalabs.xyz/privacy-hub/regulation

## Key facts

- Entry type: Regulator or standard-setter
- Region: Global
- Subject: The vocabulary that makes privacy claims testable
- Authority: US National Institute of Standards and Technology
- Stance on on-chain confidentiality: Builds with privacy tech. The regime itself mandates, pilots or funds privacy-preserving technology.
- Tags: PETs, differential privacy, threshold cryptography, voluntary standards
- Canonical page: https://www.sodalabs.xyz/privacy-hub/regulation/reg-nist

## What it actually says

A national agency rather than a global one, included because its output gets adopted internationally as reference material and because it does something no financial regulator has. NIST turns privacy claims into things a supervisor can check. SP 800-226 gives an evaluation method for differential privacy guarantees and names the implementation hazards that make a formally correct deployment leak anyway, which is exactly the gap between claiming a privacy property and demonstrating one. The multi-party threshold cryptography work under the IR 8214 series covers threshold signatures and the MPC constructions used in custody. Whatever position a regulator eventually takes on privacy-enhancing technology in finance, the measurement vocabulary it will use probably comes from here.

## The instruments that matter

- **SP 800-226, March 2025**: guidelines for evaluating differential privacy guarantees, setting out evaluation factors and cataloguing common implementation hazards
- **Privacy Framework 1.0, CSWP 10, 16 January 2020**: version 1.1 was released as an initial public draft in April 2025 and remained in draft as of August 2026
- **Multi-party threshold cryptography, IR 8214 series**: directly relevant to threshold signatures and MPC-based custody

## Sources

- [SP 800-226](https://csrc.nist.gov/pubs/sp/800/226/final)
- [Threshold cryptography project](https://csrc.nist.gov/projects/threshold-cryptography)

## Related entries

- [ISO and IEC standards](https://www.sodalabs.xyz/privacy-hub/regulation/reg-iso): The standards bodies that specify privacy instead of policing it
- [BIS Innovation Hub](https://www.sodalabs.xyz/privacy-hub/regulation/reg-bis-innovation-hub): Central bank prototypes that build privacy on purpose
- [Convention 108+](https://www.sodalabs.xyz/privacy-hub/regulation/reg-convention-108): The only binding international data protection treaty
- [Basel Committee, SCO60](https://www.sodalabs.xyz/privacy-hub/regulation/reg-basel-sco60): Bank capital · the sharpest traceability rule anywhere
- [Egmont Group](https://www.sodalabs.xyz/privacy-hub/regulation/reg-egmont): How financial intelligence crosses borders
- [FATF](https://www.sodalabs.xyz/privacy-hub/regulation/reg-fatf): The source of almost every travel rule on earth