Official Binding
Note
Commission Implementing Regulation specifying the person identification data and electronic attestations of attributes issued to European Digital Identity Wallets, pursuant to the amended eIDAS Regulation.
Summary
Purpose
This implementing regulation sets the rules for issuing person identification data (PID) and electronic attestations of attributes to wallet units, that is, the European Digital Identity Wallet as the user holds it Art. 1 Art. 2(2). Its annex describes the technical content and format of PID Annex. The text itself states that it must be regularly updated to keep in line with technologies, standards and the wallet’s Architecture and Reference Framework (ARF) Art. 1. It was amended by Implementing Regulation 2026/1731 of 15 July 2026.
Who it applies to
- PID providers, responsible for issuing and revoking PID and binding it to a wallet unit Art. 2(4).
- Providers of electronic attestations of attributes Art. 4.
- Member States, for the uniqueness of PID, the publication of the supported wallet solutions and the enrolment of users Art. 3(4) Art. 3(6) Art. 3(7).
- Wallet providers and relying parties, for the protection of the portrait Art. 3a.
Key points
- Issuance of PID. PID contains what is needed for it to be authenticated and validated, complies with the annex, is unique for the Member State and is cryptographically bound to the wallet unit Art. 3(2) Art. 3(3) Art. 3(4) Art. 3(5).
- Identity verification. The user is enrolled according to the requirements of assurance level high, and their identity is verified before issuance Art. 3(7).
- Mutual trust. The provider identifies itself to the wallet with its access certificate, and verifies the wallet unit attestation before issuing; in both cases, it may also use another authentication mechanism in accordance with an electronic identification scheme notified at assurance level high Art. 3(8) Art. 3(9).
- Portrait. The wallet warns the user that they are sharing biometric data and asks them for explicit confirmation; the relying party does not store the portrait, except as provided for by law Art. 3a.
- Attestations. They comply with at least one of the standards of Annex II to Implementing Regulation 2024/2979, and their provider identifies itself with its access certificate Art. 4(1) Art. 4(2).
- Revocation. The PID provider publishes its rules for managing validity status Art. 5(1). It must revoke the PID at the explicit request of the user, when the wallet unit attestation has been revoked, or in the other cases provided for by its rules Art. 5(4). It informs the user within 24 hours, giving the reasons Art. 5(3), and a revocation cannot be reverted Art. 5(5). Only the issuer can revoke:
Only providers of person identification data or electronic attestation of attributes can revoke the person identification data or electronic attestations of attributes issued by them.
- Privacy. PID providers implement techniques that ensure unlinkability where the identification of the user is not required Art. 5(8), and selective disclosure applies to each item of PID, including the portrait Annex.
- Content of PID (annex). For a natural person: six mandatory items (surnames, given names, date and place of birth, nationality, portrait applicable from 11 August 2028) and optional items (address, sex, email, telephone…); for a legal person: name and unique identifier; metadata (issuing authority and country…); encoding in the ISO/IEC-mdoc and SD-JWT VC formats Annex.
Important articles
- Art. 2: definitions (wallet unit, wallet instance and wallet solution, PID provider, access certificate…).
- Art. 3: issuance of PID.
- Art. 3a: protection of the portrait (added by 2026/1731).
- Art. 4: issuance of attestations.
- Art. 5: revocation.
- Annex: technical specifications of PID.
Links
- Basis in the Regulation: the wallet and its functions Art. 5a.
- Formats of attestations: Annex II to Implementing Regulation 2024/2979, which makes specification ETSI TS 119 472-1 applicable Annex II ETSI TS 119 472-1 V1.2.1.
- List of PID providers made available by the Commission under Implementing Regulation 2024/2980 Annex Implementing Regulation (EU) 2024/2980 — consolidated version of 11/08/2026.
- mdoc format: ISO/IEC 18013-5 summary ISO/IEC 18013-5:2021.
- Learning path: step 3, the European wallet.
Consolidation without official value
This summary relies on the consolidated version published on EUR-Lex, which incorporates Implementing Regulation 2026/1731 Implementing Regulation (EU) 2024/2977 — consolidated version of 11/08/2026. It serves as documentation: only the texts published in the Official Journal are authentic.
Written by Asphalia.