European Digital Identity (EUDI)

 The European Digital Identity (EUDI) Wallet has transitioned from technical pilots into the final rollout phase, following the adoption of the eIDAS 2.0 regulation and key implementing acts.

Under EU law, all EU Member States are required to make at least one certified EUDI Wallet available to every citizen and resident by late 2026 (specifically, 24 months after the adoption of the core implementing regulations in late 2024).

1. Core Regulatory & Technical Milestones

• Finalized Architecture (ARF): The European Commission’s Architecture and Reference Framework (ARF) has locked in the technical standards for how wallets interact with verifiers, ensuring cross-border interoperability across all 27 Member States.

• Implementing Acts: Secondary legislation covering wallet certification, data integrity, and person identification data (PID) has entered into force, giving national governments and private developers a clear legal blueprint to launch compliant apps.

• Large-Scale Pilots (LSPs) Wrapping Up: Consortia like POTENTIAL, EWC (EU Digital Wallet Consortium), NOBID, and DC4EU have completed real-world testing across banking, travel, mobile driving licenses, and education credentials, feeding final bug fixes and UX improvements into national rollouts.

2. Key Features & Capabilities

The EUDI Wallet is designed to replace physical documents and fragmented logins with a single, user-controlled mobile app:

• Person Identification Data (PID): Your foundational digital ID, backed by your national government, allowing you to prove who you are online and offline with the highest level of assurance (eIDAS High).

• Electronic Attestations of Attributes (QEAA / EAA): Digital versions of official documents stored directly on your device, including:

  • Mobile Driving Licenses (mDL)

  • University diplomas and professional certifications

  • European Health Insurance Cards (EHIC) and e-prescriptions

  • Travel credentials (boarding passes, hotel check-ins, and border pre-clearance)

• Qualified Electronic Signatures (QES): Every citizen gets free access to legally binding e-signatures for non-professional use—making signing rental contracts, bank loans, or government forms as simple as authenticating with FaceID or a fingerprint.

• Strong Customer Authentication (SCA) for Payments: Banks and payment providers are required to accept the EUDI Wallet for account logins and transaction approvals, streamlining online checkouts and Open Banking flows.

3. Privacy & Security Upgrades

Unlike commercial single-sign-on tools (like "Sign in with Google or Apple"), the EUDI Wallet enforces strict European privacy principles by design:

• Selective Disclosure: Using cryptographic techniques (such as SD-JWT and ISO/IEC 18013-5 mdoc), you only share the exact piece of data required. For example, to enter a venue or buy age-restricted goods, the wallet sends a cryptographic "Yes, over 18" proof without revealing your birth date, name, or address.

• Zero-Knowledge Proofs (ZKP): Ongoing updates to the technical toolbox are integrating advanced ZKP capabilities to further prevent "linkability"—meaning relying parties cannot track your activity across different websites or services.

• Unlinkability & No Tracking: Wallet providers (including governments) are legally barred from tracking where, when, or how you use your credentials. Data is stored locally in the secure element of your smartphone, not in a central government cloud.

• Relying Party Registration: Any business or organization asking for your data must register with national authorities and declare why they need it. Your wallet will warn you if a company asks for more data than it is legally authorized to request.

4. National Rollouts & Ecosystem

While the EU sets the standards, citizens will actually download wallets provided either by their national government or by certified private companies (such as banks or telecoms) operating under national oversight.

In Spain, for instance, the government has been bridging its existing MiDNI and Cl@ve infrastructure toward full eIDAS 2.0 compliance, while other nations like Germany, France, the Netherlands, and the Nordic countries are integrating their existing national eID schemes (like AusweisApp, France Identité, and BankID) into the EUDI framework.

5. What Happens Next?

• Mandatory Acceptance (2026–2027): Public services across the EU must accept the EUDI Wallet upon launch. By late 2027, major private sectors—including banking, telecoms, energy, transport, and Very Large Online Platforms (VLOPs)—will be legally required to accept it if a user chooses to log in or verify their identity with it.

• Voluntary for Citizens: Despite mandatory acceptance by businesses and governments, using the wallet remains 100% voluntary for citizens; physical ID cards and traditional login methods will continue to exist alongside it.

Resume in Spanish