ECB board member Piero Cipollone said the Eurosystem will not be able to link individuals to their transactions, but banks that handle those payments still will. The statement draws a clear line between the central banking system's own visibility and the data held by commercial banks.
The Eurosystem's limits
Speaking on the subject, Cipollone said the Eurosystem—the framework that includes the European Central Bank and the national central banks of eurozone countries—won't have the technical ability to match a person to a specific payment. That's a meaningful distinction. It suggests that, within the Eurosystem's own infrastructure, the identity of the person making a transaction is not part of the settlement record.
The point matters because it addresses a recurring question about privacy in the push toward new forms of central bank money. If the Eurosystem itself can't see who paid whom, the system as a whole is built without a built-in surveillance layer. The statement doesn't explain exactly why that is, but it's a concrete answer to a question that has been raised repeatedly as the ECB explores digital currency options.
Banks still hold the data
Cipollone was clear about one thing: the banks that handle those transactions won't be in the dark. They'll still have the ability to link individuals to their payment activity. That's because banks operate customer accounts, know their clients, and are legally required to keep records under anti-money laundering rules.
So the distinction is not about total anonymity. It's about which layer of the system gets to see what. The central bank would not be able to connect a purchase to a person, but the bank that processes the purchase could. That means a lot of privacy protection would depend on where the payment flows through—and on how banks use their own data.
The statement does not explain whether banks would be required to share that information with the Eurosystem in some other way, or whether they could keep it only for their own compliance and business purposes. It simply draws a line: the central system is blind, the banks are not.
What the statement doesn't settle
What remains unresolved is what happens in practice. If banks still have the ability to link people to transactions, that doesn't eliminate the risk of surveillance—it just moves it. The Eurosystem may not be looking, but that doesn't mean nobody is.
Nor does it clarify how this would work across borders within the eurozone, or how a bank's access to transaction data would be used for commercial purposes. The statement touches on the principle but not the mechanics. Those details are left for another day.
The question now is whether the distinction Cipollone described becomes part of the actual design of future payment systems, or just a principle in a speech. For now, the statement stands as the clearest public description of who sees what in the Eurosystem—and it leaves the banks as the place where the data lives.
