The European Central Bank is pushing back against privacy criticisms surrounding its planned digital euro, arguing that the system’s technical design would restrict what the Eurosystem can see about individual payments. In an interview published on Monday, ECB Executive Board member Piero Cipollone said the central bank would not be able to identify people making or receiving digital euro transactions.
Cipollone’s remarks come as lawmakers, privacy advocates and crypto community figures continue to warn that government-issued digital currencies could enable expanded financial surveillance—even if particular design choices are intended to limit visibility. The debate has also intensified in the United States, where policymakers have moved to block federal CBDC development.
Key takeaways
- ECB Executive Board member Piero Cipollone says the Eurosystem would not be able to identify users making or receiving digital euro payments.
- Cipollone argues that transaction identifiers would be designed so that only banks involved in transfers can identify users, including for anti-money laundering checks.
- Offline digital euro payments are described as limiting available payment details to the payer and payee.
- While privacy safeguards are a focal point, the ECB also frames the digital euro as a way to reduce Europe’s reliance on non-European payment infrastructure.
ECB privacy design: limited visibility by the central bank
In an Aug. 10 interview published by the ECB, Cipollone outlined how the digital euro could be structured to reduce direct surveillance by the central bank. He said the “Eurosystem would not be able to identify the users making or receiving payments.”
Instead, Cipollone’s position is that identity resolution would sit with the financial intermediaries that carry out the transactions. According to his description, only the banks involved in payment flows would be able to identify users, including for anti-money laundering purposes, while the Eurosystem itself would not be able to directly link specific individuals to digital euro payments.
The ECB official also pointed to offline capabilities as another privacy boundary. He said offline digital euro transactions would make payment details available only to the payer and payee—an approach intended to limit third-party access in scenarios where payments do not rely on continuous connectivity.
Why privacy concerns remain central
Despite the ECB’s attempt to address privacy fears at the design level, the project still faces scrutiny from multiple quarters. The underlying concern is that central bank-issued digital money, even with constraints, could change the nature and scale of visibility into financial activity compared with cash.
The ECB’s assurances are likely to be tested against the real-world implementation choices that follow design specifications. Critics have argued that institutional oversight—whether through intermediaries, reconciliation processes, or compliance workflows—could still produce surveillance outcomes that users may find difficult to fully anticipate from technical descriptions alone.
Digital euro as payment sovereignty project
Privacy is not the only pillar of the ECB’s digital euro messaging. The institution has also pitched the initiative as a response to strategic vulnerabilities in Europe’s payments stack.
Earlier in the year, Cipollone argued in a public lecture in Latvia that Europe’s reliance on non-European payment providers creates “strategic vulnerability.” According to his remarks, two-thirds of euro-area card transactions are governed by non-European companies. The digital euro, he suggested, could reduce this dependence by supporting European-controlled payment infrastructure.
This broader framing matters because it places the digital euro at the intersection of consumer protection debates and industrial policy. Even if privacy safeguards are strong on paper, the political and operational rationale for the program could shape the compromises lawmakers accept as negotiations continue.
Legislative progress and the timeline being discussed
Regulatory momentum in Europe has continued alongside the privacy debate. The European Parliament’s Economic and Monetary Affairs Committee backed its position on digital euro legislation in June. Later, in July, lawmakers cleared the proposal for negotiations with the Council.
The ECB has also indicated that a digital euro could be issued as early as 2029, assuming the necessary legislation is adopted and the project completes remaining technical and operational steps.
U.S. policy contrasts: restrictions on CBDC development
The privacy dispute around the digital euro echoes a parallel debate in the United States, where lawmakers have moved to limit CBDC efforts. Earlier coverage has noted that President Donald Trump issued an executive order in January 2025 prohibiting federal agencies from developing or promoting a CBDC, citing concerns including financial stability, individual privacy and US sovereignty.
On the legislative side, House lawmakers have also advanced proposals aimed at constraining a potential US CBDC. One such initiative, the Anti-CBDC Surveillance State Act, seeks to prohibit the Federal Reserve from issuing a CBDC.
While the European and US approaches differ in institutions and legal frameworks, the policy contrast underscores a shared theme: whether digital versions of money should be treated primarily as an infrastructure upgrade—or as a systemic governance risk that could increase surveillance and compliance reach.
As the ECB moves closer to implementation, the key question for users and investors will be how the promised privacy boundaries translate into concrete technical specifications and compliance workflows, especially for online and offline transaction modes. The next milestones to watch are the outcomes of Europe’s ongoing legislative negotiations and the operational details that will determine how much control the Eurosystem, banks, and other parties actually have over transaction information.
