Piero Cipollone, a member of the European Central Bank's Executive Board, has issued one of the clearest public commitments yet on a question that has dogged central bank digital currency projects across every major economy: who can see your transactions? His answer, delivered as global scrutiny of CBDCs intensifies, was unambiguous — the Eurosystem will not identify digital euro users. For a project that has struggled to win ordinary Europeans' trust, that declaration carries weight well beyond a policy statement.
The timing of Cipollone's remarks is no accident. Central bank digital currencies are under fire worldwide, with privacy concerns emerging as the single most potent obstacle to public acceptance. From the United States Congress to Brazil's legislature, from Nigeria's rocky eNaira rollout to early debates over a potential digital pound in the United Kingdom, the pattern is consistent: populations are willing to engage with state-issued digital money in principle, but deeply resistant when they suspect governments or central banks could use the infrastructure to monitor individual spending behaviour. The digital euro project has been no exception to this dynamic.
The Eurosystem — the monetary authority comprising the ECB and the national central banks of eurozone member states — has long insisted that its design for a digital euro incorporates meaningful privacy protections. But Cipollone's statement elevates that assurance to the level of named, accountable public commitment. By explicitly stating that the Eurosystem would not identify users, he is staking institutional credibility on a specific architectural promise: that the digital euro will not become a surveillance instrument dressed up as a payment rail.
What makes this pledge technically credible, or at least technically achievable, is the layered structure the ECB has proposed for the digital euro ecosystem. Unlike a purely centralised ledger where the issuing authority records every transaction, the ECB's design envisions intermediaries — commercial banks and payment service providers — handling the customer-facing relationship, including identity verification. The central bank would receive only the aggregate settlement information necessary to manage money supply, not a granular record of who paid whom, where, and for what. This distinction between knowing a transaction occurred and knowing who conducted it is the crux of the privacy argument Cipollone is making.
Critics, including civil liberties organisations and a growing number of European parliamentarians, have questioned whether such design commitments are durable. Legislation can be amended; technical architectures can be revised; emergency provisions can expand surveillance powers. The concern is not solely about the ECB's intentions today, but about the institutional and legal framework that will govern the digital euro across decades and successive political administrations. A promise from an Executive Board member, however sincere, is not the same as an enforceable right enshrined in primary law.
This tension — between an institution's stated design philosophy and the legal durability of privacy guarantees — sits at the heart of the global CBDC debate. The Bank for International Settlements, which coordinates research among central banks internationally, has acknowledged that public trust is the foundational prerequisite for any retail CBDC to achieve meaningful adoption. Without it, even a technically superior digital currency risks being bypassed by the very citizens it was designed to serve, who may prefer private-sector alternatives ranging from commercial bank payment apps to stablecoins.
The ECB's public communications offensive on privacy also reflects competitive pressure. Private digital payment networks operated by entities such as Visa and Mastercard, alongside newer fintech entrants and blockchain-based stablecoin issuers, are not standing still. Any prolonged public perception that the digital euro represents a step backward on personal financial privacy relative to existing alternatives would undermine the ECB's core argument that a digital euro is necessary to preserve European monetary sovereignty and payment autonomy.
What This Means for the Digital Euro's Future
Cipollone's intervention clarifies the ECB's political and communications strategy: get ahead of the privacy narrative before it hardens into a deal-breaking public objection. Whether that strategy succeeds will depend less on further declarations and more on the concrete legislative framework the European Parliament and Council ultimately adopt to govern the digital euro's rollout. Privacy advocates will be watching closely to see whether Cipollone's promise survives the legislative process intact — translated into enforceable rights rather than remaining institutional aspiration. In the interim, his statement represents a meaningful, if incomplete, step toward addressing the concern that a CBDC and meaningful financial privacy are mutually exclusive. The global CBDC debate is far from settled, but the ECB has now publicly drawn a line, and the world's other central banks will be taking note.
Written by the editorial team — independent journalism powered by Codego Press.