eIDAS 2.0 and the EU Digital Identity Wallet

Regulation (EU) 2024/1183: every member state must offer at least one certified EU Digital Identity Wallet by the end of 2026; relying parties required to use strong user authentication must accept the wallet from the end of 2027.

JurisdictionEuropean Union
CategoryCybersecurity
StatusUpcoming
Effective date
Latest development

Analysis

Below is a compliance-focused analysis of Regulation (EU) 2024/1183 (eIDAS 2.0) and the EU Digital Identity Wallet (EUDI Wallet), grounded in official EU sources and selected industry analyses where helpful.

Key Requirements

  • Deadline for Member States: the Commission states that Member States must provide EUDI Wallets by the end of 2026 in line with the Regulation and implementing regulations adopted.[European Commission policy page][EUR-Lex summary]
  • Deadline for relying parties: the framework provides an acceptance obligation for relying parties required to use strong user authentication, with the Commission/legal summaries indicating the wallet must be accepted from the end of 2027.[Stibbe analysis][Venvera compliance note]
  • The precise date is commonly described as 24 December 2027 in market analyses, tied to the 36-month implementation window after the relevant implementing acts entered into force.[Venvera compliance note][Stibbe analysis]

Compliance Challenges

Implementation Best Practices

Recent Updates

  • 30 April 2024: Regulation (EU) 2024/1183 was published in the Official Journal and became the legal basis for the European Digital Identity Framework.[EUR-Lex Regulation text][European Commission policy page]
  • 20 May 2024: the Regulation entered into force under the standard EU rule of 20 days after publication.[EUR-Lex Regulation text]
  • 4 December 2024: the Commission page indicates a package of implementing regulations was adopted, covering the wallet’s core rules, interfaces, data models, certification framework, and notifications.[European Commission implementing regulations page]
  • 7 May 2025: the Commission reported adopting four implementing regulations on registration and certification of wallets and relying parties.[European Commission Commission page]
  • 30 July 2025: the Commission reported adoption of seven additional implementing regulations focused on trust services and one on electronic attestation specifications, with publication in the Official Journal and entry into force 20 days later.[European Commission update]
  • 2026 Commission materials: the Commission states the framework mandates Member States to provide wallets by end-2026, while legal summaries continue to treat the relying-party acceptance obligation as a late-2027 requirement.[European Commission policy page][EUR-Lex summary]
  • In market commentary, the acceptance deadline is often operationalized as 24 December 2027.[Venvera compliance note][Stibbe analysis]

Related Regulations

  • GDPR (Regulation (EU) 2016/679) overlaps because EUDI Wallet implementations must minimize personal data, define lawful processing, and support rights and security obligations.[EUR-Lex GDPR text][EUR-Lex EUDI summary]
  • PSD2 (Directive (EU) 2015/2366) overlaps for banks and payment providers because wallet acceptance and strong authentication must coexist with payment-security requirements such as strong customer authentication.[EUR-Lex PSD2 text][Stibbe analysis]
  • NIS2 (Directive (EU) 2022/2555) overlaps because wallet ecosystems and relying parties will need cybersecurity governance, incident handling, and risk-management controls aligned with EU security expectations.[EUR-Lex NIS2 text][European Commission EUDI home]
  • eIDAS trust-service rules remain relevant because the wallet ecosystem depends on qualified electronic signatures, attestations, seals, and other trust services defined under the wider eIDAS framework.[EUR-Lex Regulation text][[European Commission implementing regulations page](https://digital-strategy

Recent developments

  • — Euronews reports that every EU country must provide at least one **certified EU Digital Identity Wallet** by December 2026, built to common standards for cross‑border interoperability, highlighting both convenience and security/privacy concerns for citizens and businesses in sectors like cybersecurity and finance.[7] (source)
  • — Eideasy’s September 1, 2026 status snapshot shows rapid national rollout progress: Romania, Croatia, Hungary, Portugal and Liechtenstein have advanced their EUDI wallet implementations, moving up readiness categories as technical documentation, pilot apps and wallet-aligned solutions go live—intensifying cybersecurity, integration and compliance work ahead of the eIDAS 2.0 deadlines.[12] (source)
  • — Biometric Update describes Europe’s digital ID wallets moving from pilots to public rollout, including Albania’s new electronic identification law aligning with eIDAS to strengthen security and trust services, and Germany’s expanded pilots funded through 2026 despite technical complexity and legislative delays—illustrating both momentum and implementation risks for cybersecurity and digital identity providers.[9] (source)
  • — Forbes analyzes the race by **27 EU member states** to meet the December 24, 2026 eIDAS 2.0 deadline to offer digital identity wallets, noting that many countries are behind schedule and that banks, telecoms and major online platforms will be obliged to accept these wallets roughly a year later—raising operational, security and fraud‑prevention challenges for the cybersecurity industry.[4] (source)
  • — Eideasy’s August 2026 update notes that **Italy** has moved into the top readiness category after opening a controlled national IT‑Wallet test environment to private wallet providers, signaling increased technical engagement, interoperability testing and security hardening activity around the EU Digital Identity Wallet ecosystem.[3] (source)
  • — The July 2, 2026 snapshot on EU digital identity wallets highlights changes including Denmark’s AltID launch in production and new tracking of EEA EFTA countries, while stressing that AltID’s registry is not yet an eIDAS 2.0 relying party registry, underscoring ongoing work on governance, relying‑party onboarding and secure integration with the future EU wallets.[1] (source)
  • — Zyphe reports that on 18 June 2026 the **eIDAS Committee decided the EUDI Wallet biometric portrait will remain optional**, allowing member states to let users decline facial images in their wallets; this compromise ends a privacy‑driven standoff with the Commission and has major implications for biometric authentication strategies, AML/KYC processes and privacy‑by‑design in cybersecurity architectures.[10] (source)
  • — The European Commission’s page on the **EUDI Wallet Toolbox** describes an early implementation solution based on the same technical specifications as the future wallets, intended to support development and testing ahead of full rollout by end‑2026 and driving early work on interoperability, cryptographic standards and secure attribute sharing under eIDAS 2.0.[14] (source)
  • — Namirial’s April 2026 status check explains that amended eIDAS rules require each member state to make at least **one European Digital Identity Wallet available by 24 December 2026**, with regulated entities mandated to accept it one year later, framing a clear compliance and risk‑management timeline for financial services, trust service providers and broader cybersecurity operations.[11] (source)
  • — ENISA announces a contribution agreement to support development and rollout of **national certification schemes for EU Digital Identity Wallets**, confirming that member states must provide at least one certified wallet by end‑2026 and emphasizing high security and assurance requirements—shaping the cybersecurity industry’s focus on certification, secure remote onboarding and wallet hardening.[5] (source)

Related regulations

Put it into practice

Browse all regulations · Compliance deadlines · Latest updates