In digital euro, only your bank can link payments to people, so design your data walls and consent flows now

The digital euro splits who knows what. When a bank onboards a user, it creates a hashed user identifier and registers it with the Eurosystem's platform. Under rulebook v0.91, the platform uses it to enforce holding limits and to support emergency switching to another provider. The ECB says the data it receives will be pseudonymised and encrypted, so the Eurosystem cannot tell who is paying or being paid. Your bank, as the user's payment service provider, is the only party that can link a payment to a named person, mainly so it can meet anti-money laundering rules.

That makes you the guardian of the sensitive part. The ECB President's August 2026 letter says providers would need the user's explicit consent before using digital euro data for commercial purposes. Treat this as the direction of travel, not settled law: the digital euro Regulation is still being negotiated between the Council and Parliament. Offline payments go further. Neither banks nor the Eurosystem would see personal transaction details there.

Act now. Map where digital euro data will sit in your systems. Keep it apart from marketing and analytics pipelines. Make the hashed-identifier process repeatable and well tested, and draft a clear consent journey for any cross-selling you plan. Banks that build privacy into the design early will avoid costly rework and earn trust at launch.