The EU Digital Identity Wallet: A Revolution in Your Pocket

Imagine a world where you no longer need to carry a bulging physical wallet stuffed with plastic cards. A world where proving your age at a bar, renting a car on holiday in Italy, or even opening a bank account in another country can be done securely with a few taps on your smartphone. This is the vision behind the European Digital Identity (EUDI) Wallet, a flagship initiative of the European Union’s digital strategy.

In the last three years, the European Union has significantly accelerated its activity to create a unified framework for the digital identity of citizens and businesses. Set to become a reality for all EU citizens, residents, and businesses by late 2026, the EUDI Wallet aims to standardize digital identification across the bloc. Based on the revised eIDAS regulation (eIDAS 2.0), it promises to be a secure, personal digital vault for your identity data and official documents—from your national ID and driving license to university diplomas and medical prescriptions.

But as with any grand technological project, the path to a seamless digital Europe is paved with both promise and critical challenges. 

The Promise: Control, Convenience, and Security

At its core, the EUDI Wallet is designed to shift power back to the user. Unlike commercial login systems from tech giants, the EU wallet is built on a “user-centric” model prioritizing data sovereignty and privacy.

• User Control and Privacy by Design: A key feature is “selective disclosure.” Currently, if you show your ID card to prove you’re over 18, you reveal your full name, date of birth, address, and document number. With the wallet, you can share only the fact that you are over 18, without revealing any other personal details. The architecture is designed to minimize data sharing and prevent tracking and profiling by online platforms.
• Seamless Cross-Border Life: The ultimate goal is a friction-free digital single market. A citizen in France could use their wallet to enroll in a Portuguese university, rent an apartment in Berlin, or pick up an e-prescription at a pharmacy in Spain. For businesses, this means streamlined “Know Your Customer” (KYC) processes, reduced paperwork, and easier access to a pan-European customer base.
• Enhanced Security: The wallet aims to reduce identity theft and fraud by using high-level cryptographic security. Credentials stored in the wallet are tamper-proof and digitally signed by issuing authorities (like a government or university), making them far more secure than physical documents or scanned copies.

The Shortcomings: Concerns Over Privacy and Exclusion

Despite the emphasis on privacy, the project has drawn criticism from civil liberties groups and privacy advocates.

• The Privacy Paradox: Critics worry that creating a single, universally accepted digital identity could inadvertently lead to “over-identification.” The fear is that it could become an unwritten requirement for everyday interactions, eroding anonymity in both online and offline spaces. Some people and organisations have expressed concern that without strict safeguards, the system could enable new forms of tracking by both governments and private companies, potentially placing EU citizens at a lower privacy level than before.
• Digital Exclusion: Another significant concern is the risk of leaving people behind. While the wallet is voluntary for individuals, its widespread adoption for essential public and private services could disadvantage those who don’t own a smartphone, lack digital skills, or simply prefer analog methods. Ensuring that non-digital alternatives remain viable is a crucial, yet challenging, requirement.

Real-World Testing: Insights from the Pilots

To gain experience with the viability and sustainability of the entire concept before the full rollout, the EU has co-funded 6 Large Scale Pilot (LSP) projects—POTENTIAL, NOBID, DC4EU, EWC, APTITUDE and WE BUILD. These pilots involve hundreds of partners across Europe (connecting state institutions, technology companies, and regulated service providers) and tested the wallet in everyday scenarios like opening bank accounts, accessing government services, using mobile driving licenses, and presenting educational credentials.

A great benefit of these projects is the free availability of detailed documentation of the launched solutions and the gathered experience to the general public. This will save time and resources for all future implementation projects.

The experiences so far have been revealing. The NOBID consortium, which focused on payments and banking across six countries, recently concluded its pilot. The main use-cases of the NOBID project included:

• Verification of the wallet as a means for payment authorization in accordance with PSD2 (in Strong Customer Authentication mode), verification of user identity in online transactions, and linking payment initiation with user identity.
• Verification of work with digital signatures and identity attributes added to the wallet (for age verification, residency, etc.), and at the same time, storing and managing user certificates in the wallet. What the NOBID project did not manage to complete (mainly due to time constraints) is the final certification of the so-called qualified electronic signature solution.
• Verification of cross-border recognition of citizens’ identity within the framework of interoperability between national schemes and the possibility of so-called on-boarding to services in different states.

Their user testing highlighted a critical lesson: strong technical performance must be matched by a smooth, intuitive user experience. Participants found some processes, such as setting up a PIN or understanding data-sharing consent flows, to be confusing. The pilot showed that transparency is key; users need clear, plain-language explanations of what data they are sharing and why.

Another wave of verifying the proposed use cases was launched by the Aptitude project this autumn. The Aptitude project aims to verify more complex integrations of various use cases from the area of everyday life. The main ones include:

• Digital version of the passport stored in the wallet (Digital Travel Credentials – DTC). The pilot tests interoperability between states and border controls, pre-check-in processes, identity checks at airports, and sharing only a minimal set of data (privacy by design). This is one of the most strategic scenarios – the digitalization of travel.
• Wallet function as a tool for purchasing travel tickets (Smart Ticketing & Check-in), checking into accommodation, and verifying eligibility for discounts (e.g., student, senior, etc.).
• Digitalization of vehicle documents (Mobile Vehicle Registration Certificate – mVRC), which includes vehicle registration available in the wallet, the possibility of data sharing with the police, insurance company, or carrier, and the replacement of physical plastic cards with digital identity.
• Banking and payments under SCA conditions at a unified level of authentication, payment transactions, and analysis of wallet interoperability models for banks in the EU, where one of the outputs may be a proposal for a standardized way of client verification across the entire EU.

Overall, many pilot participants found the concept of consolidating multiple official credentials into one secure digital space to be highly convenient. The fact that the wallet is government-backed was seen as a significant factor in building trust. Other pilots, like Ireland’s internal trial with over 500 civil servants, have also reported successful tests of credential issuance and verification, paving the way for public betas.

What are the key challenges identified so far?

The pilots have also revealed specific challenges that will need to be addressed to achieve mass adoption. 

1. The “Business Model” Problem & Private Sector Adoption

This is arguably the most acute challenge. The ecosystem relies on private companies (banks, telecom, transport) accepting the wallet, and potentially building their own. However, there is currently no clear revenue model for private wallet providers or relying parties.

• The “Free” Competitor: Governments are mandated to provide a “free” wallet to citizens. Private companies (like banks) find it hard to compete with a state-subsidized product that has no subscription fee.
• Privacy Limits Monetization: Strict “privacy-by-design” rules prevent wallet providers from harvesting user data for ads or marketing. Without data monetization or transaction fees, private companies have little financial incentive to build or support these wallets.
• Integration Costs: For relying parties (e.g., a car rental agency or a bank), integrating the EUDI wallet into their legacy systems is expensive and technically complex, with the Return on Investment (ROI) initially unclear.

2. Cross-Border Interoperability & Fragmentation

The promise of the EUDI wallet is that a digital ID issued in Germany works seamlessly to rent a car in Italy or open a bank account in France. Achieving this technical reality is proving difficult.

• Divergent Standards: While the Architecture and Reference Framework (ARF) exists, Member States are interpreting technical specifications differently. If countries implement slightly different standards for “verifiable credentials,” the wallets won’t communicate effectively across borders.
• Identity Matching: There is no single “European Social Security Number.” Matching a user’s identity across borders (e.g., ensuring “Jan Jansen” in the Netherlands is the same “Jan Jansen” trying to access a service in Spain) remains a massive technical and legal headache without compromising privacy.

3. Dependency on “Big Tech” (Apple & Google)

To achieve the highest security level (Level of Assurance “High”), the EUDI wallet needs access to the Secure Element (SE) or Trusted Execution Environment (TEE) on smartphones—the specific chip implementation that stores biometric and cryptographic data securely.

• Sovereignty Risk: Apple and Google control access to these hardware features. EU regulators are wary of building a sovereign European identity system that is technically dependent on the goodwill and hardware permissions of American tech giants.

4. Privacy Paradox & User Trust

Adoption hinges on trust, but the public is wary of a government-issued “super app” that tracks their interactions.

• Unlinkability: A core requirement is that transaction data must not be “linkable”—meaning the issuer (the government) should not know where you used your ID (e.g., a bar or a hospital). Implementing this technically (using advanced cryptography like Zero-Knowledge Proofs) is incredibly difficult to do at scale and is not yet fully standardized.
• Surveillance Concerns: Privacy advocates worry that without perfect unlinkability, the wallet could become a tool for state surveillance, tracking every time a citizen accesses a service.

5. Aggressive Timeline vs. Readiness

The deadline for Member States to provide a wallet is 2026, but the technical maturity varies wildly across the bloc.

• Uneven Speed: Digital frontrunners (like Estonia or Austria) are well-prepared, while other nations are lagging significantly. This “two-speed Europe” risks a launch where the wallet works in some countries but is useless in others.
• Certification Bottlenecks: Every wallet must be certified for security. There is currently a shortage of independent auditors and certification bodies capable of certifying these complex apps across all 27 Member States in time.

Conclusion

The EU Digital Identity Wallet represents a seismic shift in how we prove who we are. It has the potential to immensely simplify our digital lives, boost cross-border commerce, and set a new global standard for privacy-preserving digital identity. However, the gap between vision and reality is filled with technical complexities, legitimate privacy concerns, and the immense challenge of building public trust. The success of this ambitious project will depend on how effectively Europe can balance security, usability, and the fundamental rights of its citizens in the final implementation. The next few years of piloting and refinement will be decisive.

About us

next studio consulting has rich experience in the integration and implementation of large-scale solutions in the field of banking and payments, and we are prepared to provide our know-how and capacity for strategic considerations regarding involvement in the EUDIW ecosystem or the integration of payment services that will be part of the EUDIW.