ECB Defends Digital Euro Privacy Amid Surveillance Concerns

The ECB’s design relies on a centralized settlement platform where the Eurosystem processes holdings while commercial banks handle customer-facing accounts. Under this model, banks continue to conduct anti-money laundering checks, but the central bank receives only pseudonymized data. Cipollone claims this architecture provides a higher degree of privacy than existing commercial bank transfers.

Offline transactions are intended to replicate the anonymity of physical cash. Payments occur directly between devices, keeping transaction details strictly between the payer and the payee. Anti-money laundering oversight would occur only when users load or withdraw funds from their digital wallets, mirroring standard procedures for physical cash deposits.

Despite these assurances, digital rights organizations like epicenter.works remain skeptical. Critics argue that relying on institutional promises is insufficient and are pushing for hard technical guarantees, such as zero-knowledge proofs and open-source code. They contend that legal policies are vulnerable to future reinterpretation, whereas technical controls offer immutable protection.

Legislative progress remains ongoing, with the European Parliament and the Council currently negotiating the final regulatory framework. While the ECB eyes a potential 2029 rollout, the project hinges on lawmakers finalizing legislation by the end of 2026. A 12-month pilot program scheduled for 2027 will test these privacy mechanisms, serving as the final proving ground for the ECB’s claims.