Privacy-Enhancing Technologies for Financial Data Sharing

Panagiotis Chatzigiannis,Wanyun Catherine Gu,Srinivasan Raghuraman,Peter Rindal,Mahdi Zamani
2023-06-17
Abstract:Today, financial institutions (FIs) store and share consumers' financial data for various reasons such as offering loans, processing payments, and protecting against fraud and financial crime. Such sharing of sensitive data have been subject to data breaches in the past decade. While some regulations (e.g., GDPR, FCRA, and CCPA) help to prevent institutions from freely sharing clients' sensitive information, some regulations (e.g., BSA 1970) require FIs to share certain financial data with government agencies to combat financial crime. This creates an inherent tension between the privacy and the integrity of financial transactions. In the past decade, significant progress has been made in building efficient privacy-enhancing technologies that allow computer systems and networks to validate encrypted data automatically. In this paper, we investigate some of these technologies to identify the benefits and limitations of each, in particular, for use in data sharing among FIs. As a case study, we look into the emerging area of Central Bank Digital Currencies (CBDCs) and how privacy-enhancing technologies can be integrated into the CBDC architecture. Our study, however, is not limited to CBDCs and can be applied to other financial scenarios with tokenized bank deposits such as cross-border payments, real-time settlements, and card payments.
Cryptography and Security
What problem does this paper attempt to address?
### What problem does this paper attempt to solve? This paper primarily explores Privacy-Enhancing Technologies (PETs) in financial data sharing, aiming to address the conflict between privacy protection and data integrity faced by Financial Institutions (FIs) during the data sharing process. #### Specific Issues: 1. **Conflict between Data Sharing and Privacy Protection**: - In the current financial system, FIs need to store and share consumers' financial data to provide various services (such as loans, payment processing, etc.). However, these sensitive data have been breached multiple times over the past decade. - Although some regulations (such as GDPR, FCRA, and CCPA) restrict FIs from freely sharing customers' sensitive information, other regulations (such as BSA 1970) require FIs to share certain financial data with government agencies to combat financial crimes, leading to an inherent conflict between privacy protection and transaction integrity. 2. **Application of Privacy-Enhancing Technologies**: - Researchers investigated several privacy-enhancing technologies, including Multi-Party Computation (MPC), Federated Learning (FL), Zero-Knowledge Proofs (ZKPs), and Homomorphic Encryption (HE), exploring their advantages and disadvantages in financial data sharing. - The paper also discusses how these technologies can be applied to Central Bank Digital Currencies (CBDCs) and other financial scenarios (such as cross-border payments, real-time settlements, and credit card payments). 3. **Specific Application Scenarios**: - **Fraud Detection**: Improving the accuracy of fraud detection through data and model sharing. - **Financial Crime Detection**: Utilizing cross-institutional data sharing to detect systemic abuse of the financial system, such as money laundering and terrorism financing. - **Credit and Activity Monitoring**: Providing credit reports and other consumer activity information for advertising or recommendation services. - **Macroeconomic Statistics**: Generating richer macroeconomic indicators by automatically collecting data from multiple institutions. 4. **Technical Details**: - **Multi-Party Computation (MPC)**: Allows FIs to jointly perform computational tasks without exposing private data, such as calculating average salaries. - **Homomorphic Encryption (HE)**: Enables computation on encrypted data, with the decrypted result being the same as if the computation were performed on plaintext. - **Zero-Knowledge Proofs (ZKPs)**: Allows one party to prove the truth of a statement without revealing any additional information. - **Federated Learning (FL)**: Enables multiple FIs to collaboratively train machine learning models without sharing raw data. Through the research and application of these technologies, the paper aims to find a solution that both protects privacy and ensures data integrity, thereby promoting the healthy development of the financial industry.