
Digital euro privacy protections would prevent the Eurosystem from linking users to specific payments, ECB's Piero Cipollone said. Rights groups push for independently verifiable technical controls.
European Central Bank Executive Board member Piero Cipollone said the Eurosystem would be unable to link individual users with specific payments under the digital euro's proposed design, addressing fears that a central bank digital currency could expand government surveillance.
Cipollone's comments came in an interview published Aug. 24. He said the digital euro would provide stronger privacy than conventional bank transfers because the Eurosystem would not receive information allowing it to identify individual users.
"The digital euro guarantees the maximum level of privacy that current technology can offer," Cipollone said.
Online transactions would be processed through banks and other payment service providers, which could identify customers when performing anti-money laundering checks. The Eurosystem would receive pseudonymized settlement information and would not directly connect that data with a particular person, according to the ECB's updated guidance. Those protections do not make online digital euro transactions anonymous to the customer's bank.
The digital euro would run on a centralized settlement platform, not a public blockchain. The Eurosystem would process and verify holdings and settlements while payment providers handled customer-facing accounts.
Offline payments would take place directly between devices such as smartphones or payment cards. The ECB says personal transaction details would remain known only to the payer and recipient. Anti-money laundering controls would apply when users added or withdrew money from an offline wallet, a process the ECB compares with checks performed when customers deposit or withdraw physical cash.
Offline functionality would also allow payments during network disruptions. Users would need to fund their offline balance beforehand, limiting available spending to the value stored locally on their device.
Cipollone rejected claims that the digital euro would replace cash, pointing to the ECB's work on redesigned banknotes as evidence that physical and digital euros are intended to coexist.
Austrian digital rights group epicenter.works and partner organizations remain unconvinced. The draft's privacy safeguards "rely too heavily on institutional assurances," the group warned.
The group's statement called for a privacy threshold covering routine payments, public documentation of core mechanisms and open-source code where possible. It also backed zero-knowledge proofs, threshold cryptography and authenticated encryption.
Civil society groups argue that laws and policies can be weakened during implementation or reinterpreted by courts, making technical controls harder for institutions to bypass.
The European Parliament's negotiating position includes privacy-by-design measures and offline payments. Lawmakers also proposed zero-knowledge technology for transaction verification, as crypto market analysis reported.
The digital euro regulation did not receive final approval from the European Parliament in July. Members instead authorized negotiations with the Council after approving Parliament's position on July 9. The Council adopted its negotiating position in December 2025. Both institutions must agree on a common text before separately approving the regulation.
The ECB says it could be ready for a potential first issuance during 2029 if lawmakers adopt the necessary legislation by the end of 2026. Its Governing Council would make a separate decision on whether issuance should proceed. A 12-month pilot is planned for the second half of 2027. The ECB selected 36 payment providers for the pilot, including banks and non-bank companies.
The pilot will test online and offline transfers, merchant payments and the user experience. Its results and the final EU legislation will determine whether the ECB's privacy promises become enforceable features of the finished system.
Drafted by a large language model from the source reporting linked above, then screened by automated publishing checks. It is not read by a journalist before publication. Some articles cite our Alpha Score. Verify prices and figures against the original source. Educational coverage, not personalized advice.