Highlights
- ECB Executive Board member Piero Cipollone says the digital euro, planned for launch in 2029, will be structurally unable to link individuals to specific transactions.
- Offline digital euro payments would be visible only to payer and payee, similar to cash, while online payments would be identified only by banks for anti-money-laundering purposes.
- Austrian digital rights group Epicenter.works counters that the privacy protections rely on institutional commitment rather than technical enforcement.
- Cipollone reiterated the digital euro is meant to complement, not replace, physical cash.
European Central Bank Executive Board member Piero Cipollone has defended the privacy design of the planned digital euro, arguing the system will offer stronger privacy guarantees than existing bank transfers once it launches in 2029, according to PANews, which cited reporting on his remarks. Cipollone said the Eurosystem itself would be structurally unable to identify who is sending or receiving digital euro payments, a claim aimed squarely at the privacy criticisms that have dogged central bank digital currency proposals globally.
How the Privacy Model Is Supposed to Work
Under the design Cipollone described, offline digital euro payments would function much like handing over physical cash — visible only to the payer and the payee, with no central record accessible to the Eurosystem. Online payments would work differently: only the commercial banks handling a given transaction would be able to identify the parties involved, and only for anti-money-laundering compliance purposes, rather than the central bank holding a master ledger of who is transacting with whom. Cipollone framed this as a meaningful improvement over the status quo, since ordinary bank transfers today already pass through systems where multiple financial intermediaries can see transaction details beyond just AML screening.
Civil Society Isn't Fully Convinced
Not everyone is satisfied with the technical framing. Austrian digital rights organization Epicenter.works and other civil society groups have argued that the digital euro's privacy protections depend more on institutional and legal commitments than on hard technical enforcement built into the system itself. Their concern is that privacy-protective legislation governing the digital euro could be weakened during implementation or reinterpreted through future judicial rulings, leaving the actual privacy guarantees more fragile than the current technical description suggests. That tension — between what a system is technically capable of and what legal and institutional safeguards actually enforce over time — is a recurring fault line in the broader global CBDC debate, not one unique to the eurozone's project.
Why This Debate Matters Beyond Europe
The digital euro is one of the most closely watched CBDC projects globally, and how the ECB resolves the privacy question will likely influence design choices at other central banks weighing their own digital currency programs. Cipollone also reiterated that the digital euro is intended to coexist with physical cash rather than replace it, a point the ECB has repeated consistently to counter narratives that a CBDC launch is a first step toward eliminating cash entirely. With a 2029 target launch still several years out, the technical architecture and the legislation governing it both remain subject to further negotiation within the EU. The next concrete milestone to watch is the European Parliament's ongoing legislative work on the digital euro regulation, which will determine how much of Cipollone's privacy framing gets written into binding law rather than remaining a policy aspiration.
Related: 39 US State Banking Groups Unite to Build Bank-Run Blockchain Network
