A family office does not need a view on whether a central-bank digital currency is “the future of money.” It needs a view on custody, on privacy, and on what a retail token would and would not replace in the cash line. In 2026, CBDC custody privacy 2026 is that operating file. This note is educational, not a launch forecast and not personalised advice. Vellum is a fee-only multi-family office. It will not invent a go-live date the Eurosystem has not decided.
Two objects travel under one acronym. A retail CBDC would be a digital form of central-bank money for the public, designed to sit beside banknotes. A wholesale CBDC would be an instrument for settlement between financial institutions. Families live in the first conversation when they think about wallets and privacy, and in the second when they think about how securities and large payments might settle. Mixing the two in one slide is how the file becomes hype.
CBDC custody privacy 2026 is an operating question
Custody, for a family, already means several things: bank deposits, money-market funds, securities at a custodian, gold in a vault, and sometimes crypto on an exchange the office should not have used. A retail CBDC would add another claim: a liability of the central bank, likely held through supervised intermediaries, with a holding limit and a privacy design that is a political choice, not a technical footnote. The operating questions are ordinary. Who is the account servicer. What happens if that servicer fails. What does the central bank see. What do intermediaries see. What remains as private as cash. What is reported under AML rules. None of those questions requires a view on token design slogans.
Cash in a family policy is a liquidity and counterparty budget. Replacing a slice of bank deposits with a central-bank claim would change the counterparty. It would not replace securities custody, fund administration, or the private-bank relationship that still clears the rest of the book. Families who treat a CBDC as a new “vault for everything” are describing a product that official sector papers do not describe. How an independent office unbundles advice from product factories remains the same problem as in open architecture versus in-house funds in 2026.
What the ECB actually says about a digital euro
The ECB digital euro hub is the primary official source for the euro-area retail project. The Eurosystem presents a digital euro as a possible digital form of cash, complementary to banknotes and coins, not as a replacement for them by force of a press release. The project has moved through investigation and preparation phases. Issuance is a decision that depends on Union legislation and on a later Governing Council choice. Preparation is not issuance. Families should keep that sentence in the minutes every time a bank relationship manager says “when it launches.”
The ECB’s digital euro FAQs are the right place to read the current official framing of distribution (supervised payment-service providers), offline use as a design aim, and the political work still sitting with co-legislators. This article does not convert those pages into a calendar. A date that is a legislative assumption or a technical readiness target is not a launch. If the family needs a date, the date is the one on the ECB page on the day of the meeting, quoted as the ECB’s own words, with the conditionality left attached.
National central banks republish the same project. They are not a second source of a go-live. They are part of the Eurosystem. For a family, one official hub plus the legislation, when adopted, is enough. Broker notes are optional colour. They are not custody policy.
Retail versus wholesale, and what “cash-like” means
Retail CBDCs are the privacy debate. Wholesale CBDCs are a market-infrastructure debate. The BIS Innovation Hub CBDC work has run experiments on both, including cross-border wholesale proofs of concept. Those experiments state, often in the first pages, that they do not indicate an intention to issue. Families who cite a BIS project as evidence that a currency “is coming next year” have misread the disclaimer.
Cash-like, in official retail design talk, usually means a public means of payment issued by the central bank, usable in person and, in the euro project’s stated aims, with an offline mode, and with privacy that is stronger for small payments than a commercial-bank app. It does not mean anonymous large transfers. It does not mean a yield product. It does not mean a securities account. Holding limits, where discussed, exist precisely so that a retail CBDC does not drain bank deposits at scale. A limit is a policy instrument. It is also a custody fact: the family cannot park the treasury in a retail wallet.
Holding limits, intermediaries, and the servicer risk
If distribution runs through payment-service providers, the family’s operational counterparty is still an intermediary, even if the claim is on the central bank. Onboarding, wallet recovery, and operational outages will look like banking. The legal claim may not. That split is why the office should ask, when a product exists, for the liability map: who reimburses a mistaken payment, who holds the keys or the credentials, and what insolvency of the PSP does to access. Until legislation and a scheme rulebook exist in force, those questions are a watchlist, not a vendor request for proposal. Do not buy a “digital euro ready” overlay from a private bank on the back of a preparation-phase slide.
Privacy versus AML is the design trade-off
Cash leaves little of a trail. Bank transfers leave a complete one. A retail CBDC will sit between those poles by design. Official work discusses tiered privacy: more cash-like for low-value payments, more traceable where AML and CFT rules require identification. That trade-off will be written in law, in a scheme rulebook, and in the intermediary’s compliance stack. Families should not expect a CBDC to restore a numbered-account fantasy, and they should not expect it to be as transparent to a commercial bank as a current account. The honest position for a 2026 IPS footnote is: privacy will be a statutory and scheme outcome; the office will not treat rumours of total surveillance or total anonymity as facts.
Data that intermediaries hold is already a GDPR and banking-secrecy file. A new instrument does not abolish those regimes. It may add a central-bank or scheme-level data policy. Counsel, not a conference panel, will read that policy when it exists. Cross-border families should note that a euro-area retail CBDC would be a euro-area instrument. It would not homogenise Swiss, UK, or Gulf cash rules.
What a CBDC does not replace in family custody
Securities remain at a custodian under CSDR-style and national rules. Funds remain with depositaries. Private-company shares remain in registers and notaries. Gold remains in vaults. Crypto, if any, remains a separate operational risk the IPS should already have constrained. A retail CBDC, if issued, would compete with cash and with a slice of transaction deposits. It would not become the family office’s books and records. The Vellum Finance services map is still look-through reporting, advice, and coordination. It is not a wallet app.
Treasury policy can still be written now. Maximum uninsured deposit per bank. Money-market fund rules. Payment-bank versus custody-bank split. Those sentences do not wait for a CBDC. They also determine whether a future retail wallet would even matter. A family that already ladders deposits and funds does not need a token to reduce single-bank exposure. A family that still runs operating cash in one private-bank current account has a concentration problem that no central-bank logo will fix by itself.
Wholesale experiments such as the BIS Project Mariana proof of concept on cross-border wholesale CBDC exchange are relevant to how large FX and settlement might one day work among institutions. They are explicitly experimental. They are not a reason to change a family’s custody bank this quarter.
Conclusion
CBDC custody privacy 2026 is a watchlist for families, not a hype cycle. Read the ECB digital euro pages for the retail euro-area project, and the BIS for experiments that are not issuance. Keep retail and wholesale apart. Do not invent a launch date. Write cash and deposit concentration now, and treat privacy as a legal design that will not restore anonymity for large payments. When and if a digital euro exists, the office will ask the same questions it already asks of a bank: claim, intermediary, limit, data, and recovery. Until then, preparation at the central bank is not a product on the family’s balance sheet.
Discretion. Stability. Prosperity.
Team Vellum
A team of passionate professionals who combine their expertise to bring knowledge through Vellum Finance & Patrimoine blog articles. Each member writes about their own field of expertise, cross referencing with our colleagues own fields to ensure the highest quality of information possible in all our content.
