The Eurosystem will not identify digital euro users, Piero Cipollone said in a statement that cuts directly to the deepest concern hanging over central bank digital currencies. His words land as CBDC projects worldwide struggle with the same question: how do you build a public currency without turning it into a surveillance device?
Cipollone's remark addresses the fear that a government-run digital currency would give officials a direct view into what citizens buy, who they pay, and when. That fear is not niche. It has followed CBDCs from the earliest pilots to the biggest proposals.
What Cipollone Actually Said
The Eurosystem, which oversees the euro, will not identify individual users. That is the core of the promise. The phrasing is careful — it does not say the digital euro will be anonymous. It says the Eurosystem itself will not do the identifying.
That distinction matters. Even if the central bank steps back, the digital euro would run through commercial banks and payment providers. Those institutions are bound by anti-money laundering rules that require them to know their customers. A bank that hands out digital euro would still need to collect and store the same identity data it does today for deposits.
The user might be invisible to the Eurosystem, but not to the bank that holds the account. The privacy answer only goes so far.
The Global Privacy Question
Central bank digital currencies face privacy concerns everywhere. The problem is universal: a digital money system needs a record of transactions, and that record is a map of everyone's financial life. The debate over who gets to see that map has become a defining issue for CBDC projects.
The Eurosystem's position is one possible answer. It says the central bank won't look. But that leaves the rest of the chain unanswered. The same question is being asked in other jurisdictions, and the answers vary. Some projects have built in privacy layers; others have chosen more transparent designs. The Eurosystem's approach is to promise non-identification at the central bank level, but the full picture is still open.
The Gaps in the Promise
What does "not identify" actually mean in practice? If the Eurosystem holds no identity data, it can't see who is paying whom. But it also can't see a money laundering or suspicious spending. That is a tradeoff. The Eurosystem has not said how it will handle these exceptions. The statement is a promise about the central bank, not about the whole system.
The digital euro project is still being designed. No date has been set for a final decision. The next step is for the Eurosystem to work out the rest of the privacy framework — the rules for banks, for the ledger, and for the transaction data that will exist somewhere. Until then, the one clear promise is that the Eurosystem itself won't be doing the identifying.
