The fundamental constraint is that financial transactions are inherently identifying events. Every payment simultaneously transfers value AND records the transfer. The record is not a side effect — it is an integral part of the transaction mechanism. Double-entry bookkeeping, which has governed finance for 500 years, requires that every transaction is recorded by at least two parties. Digital payments extend this to 4-7 parties (merchant, acquirer, network, issuer, processor, aggregator, regulator). Eliminating the record means eliminating the transaction. Cash provided a partial escape, but declining cash acceptance, CTR reporting requirements, and the impracticality of cash for large transactions ensure that financial PII generation is comprehensive and inescapable.

The identifiability of transaction patterns is a mathematical property of human behavioral uniqueness, not a technology limitation. Each person's spending pattern — the specific combination of merchants, amounts, timing, frequency, and location — is as unique as a fingerprint. De Montjoye et al. proved this rigorously: with 1.1 million people and 3 months of credit card data, 90% of individuals are uniquely identified by any 4 transactions. This cannot be engineered away because it is a property of human behavior, not of the financial system. People buy different things, at different times, in different places, in different amounts. This behavioral uniqueness is what makes them identifiable. Removing enough transaction detail to prevent pattern identification also removes the detail needed for fraud detection, credit scoring, and dispute resolution.

Regulatory fragmentation in financial PII is not a temporary condition awaiting harmonization — it is a structural consequence of the fact that financial regulation serves multiple, incompatible goals simultaneously. Privacy regulation protects individuals from surveillance. AML regulation enables surveillance to prevent crime. Tax regulation mandates information sharing between governments. Sanctions regulation requires screening every transaction against political lists. Consumer protection regulation demands transparency about data practices. Each regulatory regime was designed independently, with different assumptions, different enforcement mechanisms, and different definitions of the same terms. 'Personal data' under GDPR, 'nonpublic personal information' under GLBA, 'protected health information' under HIPAA, and 'personal information' under CCPA are different legal constructs with different scopes. No single compliance configuration satisfies all of them.

The speed constraint is economic, not merely technical. Payment networks compete on authorization speed. A payment network that adds 500ms of privacy-preserving computation to every authorization loses merchants to faster competitors. Visa's value proposition is sub-second global authorization — achieved by transmitting cardholder PII at the speed of light across its network. Secure multiparty computation, which could theoretically authorize payments without revealing cardholder details to the merchant, currently adds seconds to minutes of overhead. Homomorphic encryption, which could process encrypted transaction data, requires 1000x more computation than plaintext processing. Zero-knowledge proofs are the most promising but still add significant latency for complex proofs. The economics of payment processing — where speed is a competitive advantage measured in milliseconds — creates a structural barrier to privacy-preserving computation.

Pseudonymity is not anonymity, and public ledgers make the distinction fatal. Bitcoin addresses are pseudonyms — persistent identifiers that lack names but accumulate transaction history. The public ledger means that once a pseudonym is linked to a real identity (through exchange KYC, merchant payment, IP address logging, or social engineering), the entire transaction history associated with that pseudonym is retroactively de-anonymized. This is worse than traditional banking privacy, where transaction details are siloed per institution and accessible only through legal process. On a public blockchain, transaction details are accessible to anyone with an internet connection. Chain analysis has matured from academic research to a $10+ billion industry. The pseudonymity that blockchain promised has been demonstrated to be fragile against well-resourced adversaries, which now include every major government and financial regulator.

The coercion is structural, not incidental. Modern economies are designed around financial intermediation: employers pay through banks, landlords verify through credit bureaus, governments tax through financial records, and insurers price through financial profiles. Opting out of financial PII disclosure means opting out of economic participation. The 'unbanked' — 4.5% of US households, much higher globally — face higher costs for basic services (check cashing fees, prepaid card fees, money order costs), inability to build credit, exclusion from online commerce, and difficulty receiving employment income. Financial inclusion initiatives explicitly aim to bring more people into the documented financial system, which simultaneously brings them into the financial surveillance system. The goal of universal financial access and the goal of financial privacy are structurally opposed: you cannot participate without being documented, and documentation is surveillance.

Concentration in financial infrastructure is a network-effect-driven equilibrium, not a market failure awaiting correction. Payment networks exhibit strong network effects (more merchants attract more consumers attract more merchants), creating natural oligopolies. Credit bureaus exhibit data network effects (more data improves accuracy, which attracts more furnishers, which adds more data). The result is that financial PII concentrates in a small number of entities that cannot be replaced, cannot be avoided, and cannot be adequately secured. The Equifax breach proved that concentration creates catastrophic single points of failure: one breach exposed the core identity data of 45% of the US adult population. But the response was a $700 million fine, not structural reform. The credit bureau model, the card network model, and the SWIFT messaging model remain unchanged because there are no viable alternatives that provide the same network effects. Concentration is the cost of efficient financial infrastructure.