The Consolidated Audit Trail fight: market surveillance meets data-hoarding risk
2012–2025What Happened
After the 2010 flash crash, regulators pushed for a consolidated system to reconstruct market events across venues. Over time, critics argued the database’s scale created a breach and misuse risk, and the SEC in 2025 exempted certain personally identifiable information from CAT reporting.
Outcome
The SEC reduced some categories of sensitive data collected for surveillance.
The episode normalized a new principle: surveillance that endangers privacy can be self-defeating.
Why It's Relevant Today
It shows the SEC is already wrestling with the privacy risks of its own surveillance tools—before crypto even enters the room.
