MSED 2026 · current draft

Institutional Determinants of Privacy Design in Central Bank Digital Currencies

Martin Bok & Dominik Stroukal

Abstract

Central bank digital currencies (CBDCs) make transaction privacy an explicit institutional design choice. We ask whether political and economic conditions predict the privacy posture documented by central banks, while separating privacy vocabulary from design commitments. A frozen multilingual corpus contains 113 official or authority-attributed documents (3,963 pages) across forty-seven jurisdictions and two institutional composites. Two independently run large-language-model extractors produced 11,358 source-verified statements, deduplicated into 6,949 candidates. We aggregate them with a predeclared equal-vote ensemble in which every candidate has unit mass and provider disagreements are retained rather than averaged away. On a separate calibration set, the verified union attained precision 0.980, recall 0.766 and span fidelity 1.000; it failed the preregistered recall gate and is therefore treated as exploratory, not automated gold. In the blind probability sample, reviewer-specific design-weighted validity was 0.786 and 0.761; inclusion agreement was 62.6% (Gwet’s AC1 = 0.426; Krippendorff’s alpha = −0.069), and exact-code agreement among the 214 jointly retained candidates was 46.7%. In the production union, the privacy-family share and documented privacy posture correlate only r = 0.219. No tested institutional condition survives family-wise correction; the largest commitment-side association is with the informal economy (r = −0.286). The design demonstrates both the value and the current limits of reproducible multi-model qualitative extraction.

Keywords: central bank digital currency; privacy; institutional design; csQCA; financial infrastructure
JEL: E42, E58, C83

What the paper finds

1

How often privacy appears in official documents is a poor proxy for actual documented privacy design: the two measures share only 4.8% of their variance.

2

No tested political or economic condition is a statistically robust predictor after correcting for multiple tests.

3

The informal economy supplies the strongest posture-side lead (r = −0.286), but its interval reaches zero; it supports follow-up research, not a settled claim that high-informality economies “stomp on” privacy.

4

The blind audit estimates candidate validity at 78.6% and 76.1% by reviewer, but 62.6% inclusion agreement and 46.7% exact-code agreement show that similar aggregate validity does not imply strong item-level reproducibility.

Current evidence

Dominant CBDC purpose by ensemble and provider
Figure 1. Dominant CBDC purpose by ensemble and provider. Bars are ensemble counts; markers show provider-only sensitivity.
Provider sensitivity of institutional correlations
Figure 2. Provider sensitivity of institutional correlations. Squares are ensemble estimates; circles and crosses show provider variants.

Submission status

Independent blind coding is complete; consensus adjudication remains open. Of 365 sampled candidates, 364 are analyzable after excluding one item without a usable translation. The reviewers agree on inclusion for 228 cases (62.6%); Gwet’s AC1 is 0.426 and Krippendorff’s nominal alpha is −0.069. Reviewer-specific design-weighted validity is 78.6% and 76.1%, with a descriptive pre-adjudication midpoint of 77.3%.

The joint dual-empty audit found one missed unit among 31 analyzable controls and recovered two eligible claims. The substantive analysis continues to use the full ensemble, with provider variants as sensitivity checks; the human audit estimates measurement quality and does not replace the production corpus with a 5% sample.

Work in progress and future research

This paper and dataset remain work in progress. Future releases will test whether improving LLMs, a larger and better-balanced sample of official documents, and a more precisely operationalized family structure can improve recall, cross-provider stability and human coding agreement. The 77.3% midpoint will remain explicitly pre-adjudication until a human consensus phase is completed.

Data and code

The frozen code, canonical provider outputs, provenance manifests and derived results are maintained at github.com/BokMartin/cbdcdataset. Website-ready derived tables are available on the data page.