EU Digital ID Wallet Moves Forward

- The underlying regulation, eIDAS 2.0, entered into force on May 20, 2024, mandating all 27 EU member states to offer at least one compliant EUDI Wallet to their citizens and businesses by the end of 2026. While wallet adoption is voluntary for citizens, private sector entities in regulated industries, such as financial institutions, and very large online platforms will be required to accept the wallet for user authentication by December 2027. - Four large-scale pilot programs (POTENTIAL, EWC, NOBID, and DC4EU) involving over 550 organizations across 26 member states, plus Norway, Iceland, and Ukraine, have concluded. These pilots tested 11 major use cases, including bank account opening, mobile driving licenses, and payments, completing over 1,300 tests to inform the final technical specifications. - The technical foundation is the Architecture and Reference Framework (ARF), which outlines common standards and protocols to ensure interoperability between different wallets, issuers, and relying parties across the EU. Key technologies include Selective Disclosure JWTs (SD-JWT), allowing users to share only necessary data attributes, and standards for mobile documents (ISO 18013-7). - For financial services, the wallet is designed to streamline Know Your Customer (KYC) and Know Your Business (KYB) processes by providing instant access to government-verified identity data. It will also support Strong Customer Authentication (SCA) for payments through a "Payment Attestation" that cryptographically links transaction details to the user's authentication. - While the EUDI wallet focuses on individuals, a parallel European Business Wallet (EBW) is being developed to handle digital identity for legal entities. This will facilitate cross-border KYB, submission of official documents, and secure business-to-government communication, with mandatory acceptance by public sector bodies within two years of adoption. - Despite technical successes in pilots, significant challenges to adoption remain, including the need for a seamless user experience, addressing public concerns over privacy, and ensuring consistent implementation across all member states. Some countries, like the Netherlands, have already indicated they may miss the 2026 deadline, and early research suggests expected user adoption is only around 29%. - The ecosystem involves multiple players beyond the user and service provider, including government-appointed PID Providers to verify identity, and both Qualified and Non-Qualified Attestation of Attributes (QEAA/EAA) Providers—such as banks or universities—who issue verifiable credentials like proof of income or diplomas into the wallet. - Large-scale pilots have demonstrated the wallet's potential in payment use cases, with one consortium (EWC) successfully conducting live card and account-to-account payment transactions. User research from these pilots showed 80% found wallet-based checkout easier than traditional banking flows, and fraud is projected to drop significantly when identity and payments are combined.