Security and privacy
The security and privacy features of EU Digital Identity Wallets
Discover the many ways that EU Digital Identity Wallets will protect your privacy and security; including a selective disclosure of attributes functionality and a privacy dashboard.
Your data Your control
Your data Your control
EU Digital Identity Wallets will protect your privacy and ensure you get to decide how your data is used. It will ensure that everyone in the EU can safely and securely access private (or public) digital services, while protecting users and service providers against identity theft.
All the digital documents stored in your wallet (like your digital ID, mobile driving licence or train ticket) will remain private, as will the transactions in which you use these documents. Not even the issuers of your documents will be informed when the documents are shared.
No tracking and profiling
EU Digital Identity Wallets will limit tracking and profiling, through its data minimisation design, and the legal rules set by European Digital Identity Framework.
Discover the privacy features
We make sure your data is safe
Your data will be locally stored in your wallet, following the highest cybersecurity standards, ensuring its security.
Find out how your data is protected
Compliance with privacy and security standards
EU Digital Identity Wallets will be well monitored, ensuring that each wallet meets the obligations set out by EU and Member State laws. Wallets will be Cybersecurity certified.
Learn about the standards
Your security and privacy is our priority
Open-source code and rigorous testing will ensure safety and total transparency in how your wallet will work, with security statistics made publicly available. Wallets can be suspended in case a serious security risk is identified.
Learn about security
Selective disclosure
The selective disclosure of attributes will allow you to only share the specific information requested by a service provider, without revealing extra information.
For example, with the selective disclosure of attributes you could choose to share your date of birth, but without revealing any other identifying details that could be used for profiling.
The result is increased privacy while still having access to a wide range of digital services.
The depiction above is for illustrative purposes only and is not representative of what the EU Digital Identity Wallets made available by Member States will look like.
No tracking and profiling
No tracking and profiling
Digital document issuers will be legally forbidden to combine your personal data with third-party data, while the data minimisation features, like the selective disclosure of attributes, of the wallet will further ensure your privacy. This all combines to make the tracking and profiling of your online activity extremely difficult.
Processing of your data
The processing of the data you do share will be strictly regulated, to ensure a maximum of privacy and security for all users. Additional measures will be introduced by Member States to protect your data and privacy when using your wallet across borders.
Unobservability
Unobservability means that your actions stay entirely private and invisible online. This is opposed to anonymity, where you are not personally identifiable, but your actions are visible. EU Digital Wallets will ensure unobservability online by prohibiting the collection of data on how you use your wallet, digital ID, and any digital documents. Nor can any of your data be combined, ensuring that how you use your wallet — and the data you share — stays private and wholly yours.
Know where your data has been with the privacy dashboard
Every EU Digital Identity Wallet will have a built-in dashboard offering an overview of who you've shared data with, and exactly what data was shared. This dashboard will include:
A log with your transaction history
Every service provider you've shared data with will be listed.
Data deletion request
You will be able to request that the service provider you've interacted with delete your data, directly through the dashboard.
Reporting
Worried that someone you shared personal information with has misused your data? You can report your concerns directly in the dashboard.
Your data is yours
You have the right to download your data from the wallet.
The depiction above is for illustrative purposes only and is not representative of what the EUDI-Wallets made available by Member States will look like.
We make sure your data is safe
A broad range of technical and legal measures ensure that your data stays safe and private.
Your data is encrypted
Advanced cryptographic methods are used to encrypt your data.
Multi-factor authentication
Safety measures prevent cryptographic secrets from being exported outside of your EU Digital Identity Wallet. All exchanges of data follow cybersecurity requirements and protocols that ensure security and privacy.
Compliance with privacy and security standards
European Digital Identity Framework
Each EU Digital Identity Wallet will be certified to ensure it meets the security standards set in the European Digital Identity Framework.
Your EU Digital Identity Wallet will be compliant with strict privacy and security standards.
European Digital Identity Framework
Each EU Digital Identity Wallet will be certified to ensure it meets the security standards set in the European Digital Identity Framework.
Member State certifications and auditing
Member States will be required to certify every wallet they (or a software provider) make available.
Credential / digital document providers (issuers of Qualified Electronic Attestations of Attributes) will be audited every two years to ensure that the necessary security measures are taken to address all risks.
Every service provider that relies on information in the wallet (a.k.a. Relying Parties) must register their activities and declare how they will use EU Digital Identity Wallet data. They should also carry out data protection impact assessments.
Your security and privacy are our priority
Your security and privacy are our priority
Your online security is our priority. Here are some of the ways we will ensure your data stays secure and private.
Wallet suspension
EU Digital Identity Wallets can be suspended if security issues are found.
Safe test environments
Member States will work together with SMEs, researchers, and other key stakeholders to test and improve how EU Digital Identity Wallets work, while always ensuring wallets meet the obligations set out in EU and Member State law.
Public security statistics
Statistics on all security and data breaches will be made publicly available.
Open-Source code
Every EU Digital Identity Wallet available to citizens will use open-source code which guarantees its transparency. How wallets work and how data is used will be publicly available information.
What are EU Digital Identity Wallets?
Safe and easy digital identification for everyone in Europe.