This article examines the data protection and privacy concerns arising from the use of retail Central Bank Digital Currencies (CBDCs), specifically in the context of a system built on a public blockchain, such as Ethereum. It examines the extent to which the risks and concerns can be minimised by building in privacy-enhancing technologies in the governance framework of the retail CBDC as set out in documents and legislative provisions explaining the operation of the digital pound and the digital euro.